Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa
File:                     323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (raw, json)
Hash identifier:          TCcn0Y+BfTRByqvYafvKOIuV1D0e6Ui8goXdVFQHQp0=
Subject key identifier:   35:31:81:FD:F1:7D:49:F6:4E:A4:0E:4B:B7:8C:DE:D8:9A:44:3B:9B
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       357493D99E25E514896A97F39E440C7C1722BFD1
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa
Signing time:             Thu 12 Mar 2026 11:56:13 +0000
ROA not before:           Thu 12 Mar 2026 11:51:13 +0000
ROA not after:            Thu 11 Mar 2027 11:56:13 +0000
asID:                     20473
IP address blocks:        2604:e4c0:110::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:74:93:d9:9e:25:e5:14:89:6a:97:f3:9e:44:0c:7c:17:22:bf:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Mar 12 11:51:13 2026 GMT
            Not After : Mar 11 11:56:13 2027 GMT
        Subject: CN=353181FDF17D49F64EA40E4BB78CDED89A443B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:80:66:b8:be:28:35:85:46:a5:c0:89:69:
                    16:8c:5c:62:e0:b2:06:ae:a7:c8:a3:ef:94:a9:77:
                    dd:28:e1:6b:b0:df:95:83:9a:76:20:f5:a4:e3:73:
                    94:61:7b:0c:68:1b:a3:de:bd:73:e7:55:6e:49:41:
                    71:c7:86:67:84:df:c2:d4:a4:00:3f:f1:35:96:49:
                    87:02:a2:c2:1e:61:a6:db:14:bd:47:e6:a5:0e:5b:
                    a5:9d:4a:1a:0e:30:1a:59:80:41:2a:b7:ae:5a:65:
                    36:e5:cc:c4:f9:ee:90:84:42:f4:0e:7f:d5:45:67:
                    e3:c0:1f:2a:57:e7:89:e6:91:4d:0f:9c:dd:ba:87:
                    85:a2:95:6a:b7:4d:87:da:f4:29:8c:13:66:6e:a5:
                    06:1d:d9:28:ad:70:fe:4e:ba:f3:3f:dd:fb:b8:57:
                    09:4b:7d:3b:19:67:81:23:54:0f:11:31:44:b0:06:
                    4e:3d:da:a8:92:a0:89:ab:c9:ac:dd:63:43:25:58:
                    81:5c:62:0a:40:a9:0f:f9:bb:a3:df:af:3a:7d:4a:
                    76:44:d8:b9:c9:c8:4a:05:a2:75:07:08:a7:ec:44:
                    7d:23:ce:56:fa:8a:c6:d7:64:7c:99:79:3f:94:8a:
                    26:69:7b:68:66:ed:3c:f2:2c:c5:30:ee:61:1d:e8:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:31:81:FD:F1:7D:49:F6:4E:A4:0E:4B:B7:8C:DE:D8:9A:44:3B:9B
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         70:34:0c:f3:70:2b:29:61:1a:41:54:ae:2b:ed:be:4a:2c:fb:
         41:3e:98:7e:01:53:80:e3:eb:44:ac:07:14:7e:f8:2b:7b:e7:
         fe:c8:63:82:6e:10:59:2a:c0:e2:73:1e:fe:4b:39:f4:56:61:
         09:62:44:fe:d9:c3:4b:e1:36:0e:48:50:0f:d0:66:42:92:f9:
         8d:0c:f6:1c:9d:69:f6:71:7f:41:e2:60:7e:e1:cd:0b:38:07:
         78:b8:ac:f2:b6:42:48:22:a4:05:d8:f7:92:48:b2:b5:78:cb:
         82:e5:37:e5:9b:ba:d4:22:88:37:be:06:96:86:4c:7e:94:65:
         94:70:e6:9d:0c:2d:45:e9:63:6b:cb:43:46:45:07:13:aa:d2:
         65:18:6a:d9:b1:b6:a6:36:5c:21:3a:cc:6b:f4:c1:24:54:cb:
         08:34:b9:ec:71:88:05:04:11:5f:ba:74:97:a0:8e:29:32:76:
         3a:ee:bc:c2:45:b5:81:16:c4:e7:cc:50:43:69:01:8f:ff:80:
         0d:d5:aa:1c:a7:8d:2d:e3:30:90:81:35:80:11:50:5f:42:f2:
         d9:43:9b:3c:4e:75:41:47:5d:df:b0:86:67:fb:b2:de:72:cc:
         1a:c9:58:bb:00:87:a7:51:7b:7c:da:d9:c9:13:cc:da:b0:90:
         f4:64:7e:a1
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIUNXST2Z4l5RSJapfznkQMfBciv9EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh
N2NmZjE3MzliMDI3YzY0MGIwHhcNMjYwMzEyMTE1MTEzWhcNMjcwMzExMTE1NjEz
WjAzMTEwLwYDVQQDEygzNTMxODFGREYxN0Q0OUY2NEVBNDBFNEJCNzhDREVEODlB
NDQzQjlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLGAZri+KDWF
RqXAiWkWjFxi4LIGrqfIo++UqXfdKOFrsN+Vg5p2IPWk43OUYXsMaBuj3r1z51Vu
SUFxx4ZnhN/C1KQAP/E1lkmHAqLCHmGm2xS9R+alDlulnUoaDjAaWYBBKreuWmU2
5czE+e6QhEL0Dn/VRWfjwB8qV+eJ5pFND5zduoeFopVqt02H2vQpjBNmbqUGHdko
rXD+TrrzP937uFcJS307GWeBI1QPETFEsAZOPdqokqCJq8ms3WNDJViBXGIKQKkP
+buj3686fUp2RNi5ychKBaJ1Bwin7ER9I85W+orG12R8mXk/lIomaXtoZu088izF
MO5hHeg6KwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFDUxgf3xfUn2TqQOS7eM3tia
RDubMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4
MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw
MjdjNjQwYi5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzNjMwMzQzYTY1MzQ2MzMwM2Ez
MTMxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEJgTkwAEQMA0GCSqGSIb3DQEBCwUAA4IBAQBwNAzzcCspYRpBVK4r7b5KLPtB
Pph+AVOA4+tErAcUfvgre+f+yGOCbhBZKsDicx7+Szn0VmEJYkT+2cNL4TYOSFAP
0GZCkvmNDPYcnWn2cX9B4mB+4c0LOAd4uKzytkJIIqQF2PeSSLK1eMuC5Tflm7rU
Iog3vgaWhkx+lGWUcOadDC1F6WNry0NGRQcTqtJlGGrZsbamNlwhOsxr9MEkVMsI
NLnscYgFBBFfunSXoI4pMnY67rzCRbWBFsTnzFBDaQGP/4AN1aocp40t4zCQgTWA
EVBfQvLZQ5s8TnVBR13fsIZn+7LecswayVi7AIenUXt82tnJE8zasJD0ZH6h
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:43 2026 by rpki-client