Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa
File:                     323630343a653463303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier:          Jg/dOJ9vWsCWz0necaHH1kraMhqIxvWP0S2yGkWolhU=
Subject key identifier:   A6:D4:FE:17:DB:75:41:89:E9:C7:6F:7C:97:B4:08:53:45:9E:4F:E4
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       21E120D482FE78AF37D583A72D843DB6156FF13C
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa
Signing time:             Sat 18 Jul 2026 01:56:14 +0000
ROA not before:           Sat 18 Jul 2026 01:51:14 +0000
ROA not after:            Sat 17 Jul 2027 01:56:14 +0000
asID:                     949
IP address blocks:        2604:e4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e1:20:d4:82:fe:78:af:37:d5:83:a7:2d:84:3d:b6:15:6f:f1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Jul 18 01:51:14 2026 GMT
            Not After : Jul 17 01:56:14 2027 GMT
        Subject: CN=A6D4FE17DB754189E9C76F7C97B40853459E4FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:75:53:bd:df:18:de:24:13:46:22:47:ed:
                    0e:8f:32:48:82:7f:83:39:b3:4e:3f:57:a9:65:03:
                    a8:82:bd:24:ba:89:0e:f1:20:06:75:18:43:89:32:
                    f4:60:09:3d:50:0e:3b:8c:e5:df:4d:d2:14:88:7d:
                    e1:28:47:b5:06:a1:27:2a:2e:36:19:57:59:fc:30:
                    57:04:9a:23:ff:d4:74:29:b0:78:60:53:63:e0:90:
                    48:97:4c:12:bb:ff:f3:ee:bf:60:d4:4e:07:c1:47:
                    34:7e:05:ec:37:de:49:ea:ec:b9:77:e0:1b:23:a5:
                    33:6f:63:43:e2:b7:44:10:51:df:b3:bc:17:81:e8:
                    e6:c9:12:59:b6:80:c5:18:dc:0b:47:35:38:c4:7e:
                    0a:5d:33:69:91:fb:04:da:00:1c:57:18:b0:29:3a:
                    a5:54:25:1d:33:75:76:73:21:ed:0d:ee:1e:3c:6c:
                    b7:0b:de:f7:2a:f9:5b:d6:19:31:9e:b8:f9:3d:5c:
                    52:d3:d0:21:1b:ec:10:17:61:f6:b7:d4:f7:8a:e5:
                    21:b4:0c:ef:b5:50:40:90:c4:8c:38:81:c3:cf:25:
                    6b:64:42:d4:91:f5:70:22:35:f0:3e:cc:dc:96:23:
                    67:e8:84:de:a6:69:0c:e6:26:f8:62:f7:4d:1f:1f:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D4:FE:17:DB:75:41:89:E9:C7:6F:7C:97:B4:08:53:45:9E:4F:E4
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:9b:93:a2:48:f4:3c:ae:06:07:0a:90:47:bd:67:dd:91:
         96:1b:2e:83:6a:cf:08:f9:a3:c3:a9:1b:60:21:be:13:a5:da:
         ee:1e:40:77:c4:a6:46:d9:d7:98:24:5e:c6:b1:a7:32:e1:83:
         57:7f:e7:0b:d3:bd:e0:0a:77:43:51:81:cc:86:bf:06:79:25:
         3c:9b:63:35:fc:4a:f4:6f:4f:e7:53:f5:ad:c9:ca:f7:17:84:
         08:93:70:40:83:37:3b:a3:2e:03:14:8e:9e:32:d6:0b:04:e6:
         33:37:4c:fe:79:f9:65:9a:b9:ac:59:c9:29:ef:11:28:0e:15:
         13:b3:91:1a:50:86:b0:fb:64:cd:cd:6a:da:4b:90:2f:a9:84:
         ce:f4:3b:68:9d:bd:3f:41:94:89:3b:a7:95:b3:ae:42:f2:1a:
         0c:0a:29:6c:5b:61:60:e8:e8:d0:85:15:68:a4:ea:f8:aa:e7:
         d1:2b:64:1b:21:1a:1c:94:69:bf:e9:6d:f4:5d:de:09:c5:c7:
         0d:23:08:ad:0f:5f:3f:b2:58:81:02:8a:76:ed:5d:bb:0f:c5:
         e9:2a:78:01:3a:bd:fc:5f:f0:c5:a9:46:56:f5:72:c2:57:ae:
         4b:2f:7f:cf:6c:b7:9b:8e:ae:2d:28:48:6b:3a:77:56:f0:87:
         a9:55:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:16:49 2026 by rpki-client