Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa
File:                     323630343a653034303a3a2f33322d3438203d3e203632353939.roa (raw, json)
Hash identifier:          IdEEceodCPU49DNjgQA+YXFPjEWoYAGxzDpAi94+xYU=
Subject key identifier:   21:4F:4C:C5:6D:F1:9F:65:59:CC:02:B6:C2:5E:7A:CD:1A:5C:80:14
Certificate issuer:       /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial:       0F173A562022AE5D52A4623A37143A9896EA585D
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa
Signing time:             Sat 16 Aug 2025 01:48:21 +0000
ROA not before:           Sat 16 Aug 2025 01:43:21 +0000
ROA not after:            Sat 15 Aug 2026 01:48:21 +0000
asID:                     62599
IP address blocks:        2604:e040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
                          rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:17:3a:56:20:22:ae:5d:52:a4:62:3a:37:14:3a:98:96:ea:58:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
        Validity
            Not Before: Aug 16 01:43:21 2025 GMT
            Not After : Aug 15 01:48:21 2026 GMT
        Subject: CN=214F4CC56DF19F6559CC02B6C25E7ACD1A5C8014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:5e:bb:f2:dd:af:f1:6b:ea:c7:1e:f8:72:
                    4a:81:00:0c:66:d8:61:6b:7b:1c:78:41:d1:b8:ee:
                    db:c3:41:cb:e2:0d:1e:cc:20:10:c8:e4:f5:12:2b:
                    28:96:ac:c0:d3:b9:42:67:4f:c5:ac:17:e7:8a:df:
                    15:d9:f0:50:65:9e:d7:29:23:5a:52:58:a4:32:26:
                    ea:c7:56:ce:35:c8:cd:e7:be:05:0d:77:04:16:7a:
                    1a:16:dd:2b:48:c0:fa:0b:aa:d5:11:e8:55:70:33:
                    09:f3:d4:52:20:bd:c0:e4:d4:eb:28:98:03:cf:73:
                    d9:80:b7:e1:77:cd:1d:c7:db:22:07:29:cd:b2:a7:
                    a3:d5:98:2b:48:2f:bc:1b:d4:58:61:2b:33:f8:46:
                    59:0e:37:8e:c3:57:c4:51:92:63:a8:81:8d:4a:7b:
                    37:47:37:fe:4e:1c:b9:76:fe:3c:0e:fa:5d:67:65:
                    77:1a:d5:ad:93:bf:6a:01:98:e0:1f:3f:44:62:f0:
                    68:a7:71:be:8c:dd:e6:05:95:ca:20:b9:e4:2e:ae:
                    84:09:bc:dd:16:97:ea:ac:2c:dc:43:d2:b7:2d:36:
                    79:e3:88:0a:26:b1:1a:02:ff:fd:ec:ea:9d:d0:d2:
                    d5:d5:1d:6b:58:87:63:02:f5:0d:c4:70:cb:d2:8c:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4F:4C:C5:6D:F1:9F:65:59:CC:02:B6:C2:5E:7A:CD:1A:5C:80:14
            X509v3 Authority Key Identifier:
                keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e040::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:e5:a9:1b:f5:ab:d9:85:09:35:56:9a:20:7c:69:da:2b:
         0d:de:e1:1b:67:82:cf:45:01:61:0a:c1:02:87:a0:f8:fd:2e:
         9e:90:66:15:05:4e:3c:0f:4b:b9:a2:a8:fe:44:67:bf:fc:3c:
         09:97:b5:ac:0b:ce:be:5b:95:ba:71:2a:35:24:56:e1:56:c2:
         cb:01:56:dd:a7:e2:09:67:bd:c0:ac:e2:d1:82:26:42:30:38:
         c8:ba:6e:2f:35:af:7e:c1:6b:18:d8:8c:36:45:b5:35:d5:1b:
         46:61:28:b2:94:34:c4:10:76:df:86:9d:84:ec:79:ac:c1:58:
         e9:85:98:66:3d:79:46:d1:33:82:57:ef:fa:1c:24:04:ac:51:
         91:e0:04:7c:cf:e4:1a:88:41:3f:ff:92:38:8e:84:28:32:83:
         db:ae:e6:1a:c5:75:08:f3:a0:12:a7:14:0c:06:68:4d:63:d5:
         96:1a:00:8c:94:ef:74:88:35:26:a8:3f:e5:bc:42:55:60:f2:
         dd:ef:1c:2f:73:b0:f9:10:ff:de:cc:01:1a:c0:63:f8:9d:e1:
         76:f3:8f:d8:39:c5:37:10:d3:0f:66:93:aa:4d:f3:71:6d:59:
         a7:97:3d:74:51:3c:fd:54:28:91:f3:ec:fa:7a:65:4e:d0:6f:
         d2:8a:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:53:49 2025 by rpki-client