Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa
File:                     323630343a653463303a3a2f33322d3438203d3e203131393330.roa (raw, json)
Hash identifier:          RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=
Subject key identifier:   C9:2A:AA:9D:76:D8:67:68:85:53:C8:EA:18:A4:A4:86:03:0F:C3:75
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       46BD09E54A3A18A27480B1134DD95380B8663475
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa
Signing time:             Sat 16 Aug 2025 01:48:26 +0000
ROA not before:           Sat 16 Aug 2025 01:43:26 +0000
ROA not after:            Sat 15 Aug 2026 01:48:26 +0000
asID:                     11930
IP address blocks:        2604:e4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bd:09:e5:4a:3a:18:a2:74:80:b1:13:4d:d9:53:80:b8:66:34:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Aug 16 01:43:26 2025 GMT
            Not After : Aug 15 01:48:26 2026 GMT
        Subject: CN=C92AAA9D76D867688553C8EA18A4A486030FC375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:f1:b9:82:c7:2b:4a:43:fb:be:9c:c1:43:
                    be:dd:58:46:f5:cd:91:da:95:ed:ac:9a:8a:ed:67:
                    dd:8c:b2:b0:80:56:41:d2:b6:fa:48:66:3d:5c:dd:
                    53:81:a5:0b:d8:95:80:b4:1b:d6:57:b0:c6:b0:1d:
                    ab:f6:5f:4f:3d:14:ee:5d:7f:99:52:b2:a8:51:e0:
                    e2:c1:0c:40:63:dc:78:30:33:3d:04:4b:d0:b6:58:
                    52:6a:9c:c8:e6:ac:d7:54:eb:63:3d:f4:46:57:fe:
                    72:1d:53:28:c3:37:d0:b1:10:d4:21:ed:60:5f:45:
                    91:04:32:84:6d:63:b2:12:10:29:61:70:a3:98:de:
                    1f:d0:6f:05:fb:6d:c5:02:35:ae:91:8d:44:92:2e:
                    92:ce:99:88:10:13:36:fe:b0:2a:9e:4f:d6:ff:5f:
                    1c:4b:89:dc:e7:ed:13:99:11:d6:ac:f1:82:de:cf:
                    36:ae:fc:a5:da:18:1b:6d:ec:72:b3:f6:88:d4:2a:
                    d6:43:9c:b2:5e:63:27:60:6c:d8:d3:3d:7e:22:2a:
                    17:c4:61:38:91:26:c0:af:3f:ac:57:b1:ce:2b:d9:
                    67:c8:ce:76:72:ab:d7:be:56:89:5a:38:f1:bd:3b:
                    7b:ac:b2:34:17:ed:c6:e5:8f:70:5f:8c:71:8e:52:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2A:AA:9D:76:D8:67:68:85:53:C8:EA:18:A4:A4:86:03:0F:C3:75
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:58:2d:16:e7:c3:88:3b:65:5d:7e:44:11:a9:55:cc:a3:
         16:e3:df:68:d2:6b:c5:3c:87:57:fd:e4:93:e8:f2:79:63:f0:
         0c:e2:f9:bd:01:ed:e7:04:41:a6:82:28:a4:27:45:4f:6b:ea:
         dd:f0:65:e7:be:c1:b3:30:52:83:d0:ff:ef:02:f0:d3:69:f6:
         20:18:5c:04:49:d7:10:ff:74:4f:06:17:5f:10:ea:6c:39:50:
         4b:f0:fb:b4:b6:b8:87:e8:be:22:db:ab:5b:14:e9:da:ed:14:
         2c:53:56:9e:cd:60:9b:37:34:53:57:aa:a6:8a:bd:93:9c:6b:
         02:52:ff:e0:1d:da:89:91:68:47:34:77:da:9a:84:f9:6d:42:
         13:a0:f8:eb:5c:36:73:e8:9f:76:1d:e1:1b:41:46:e8:00:96:
         e6:8c:a6:0d:4b:32:e8:56:cd:a4:92:13:a2:27:5f:5d:bb:fe:
         43:da:53:13:0c:47:24:3a:16:7f:4c:75:6a:e8:22:9e:e2:c8:
         ce:b0:82:5e:39:69:1f:23:99:22:44:05:28:93:56:4c:01:4b:
         72:f2:1b:cc:4e:35:28:c4:75:c4:6b:45:67:40:91:60:d8:90:
         e5:27:62:0e:ed:74:f9:3b:b6:f4:41:f0:e9:8b:55:ae:3a:98:
         bd:b3:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:29 2025 by rpki-client