Route Origin Authorization

$ rpki-client -vvvf rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a653030303a3a2f33392d3438203d3e203335393136.roa
File:                     323630373a663133303a653030303a3a2f33392d3438203d3e203335393136.roa (raw, json)
Hash identifier:          5FWIPzfs2ZpMz8QcnifclE/2jJXo2amvcoNn3YJED8Y=
Subject key identifier:   DF:07:CE:87:96:13:BA:9D:5E:BA:D1:7F:40:F9:E8:F6:33:86:95:A2
Certificate issuer:       /CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Certificate serial:       7FBB5B219B6EB47A6B4B26ADA1381786A0F66EB4
Authority key identifier: DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a653030303a3a2f33392d3438203d3e203335393136.roa
Signing time:             Thu 10 Sep 2026 04:16:56 +0000
ROA not before:           Thu 10 Sep 2026 04:11:56 +0000
ROA not after:            Thu 09 Sep 2027 04:16:56 +0000
asID:                     35916
IP address blocks:        2607:f130:e000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bb:5b:21:9b:6e:b4:7a:6b:4b:26:ad:a1:38:17:86:a0:f6:6e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
        Validity
            Not Before: Sep 10 04:11:56 2026 GMT
            Not After : Sep  9 04:16:56 2027 GMT
        Subject: CN=DF07CE879613BA9D5EBAD17F40F9E8F6338695A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:ea:91:39:6a:42:99:bb:9c:fc:d8:d0:bc:
                    49:6a:1d:8c:4e:9c:cd:8c:2c:5a:44:09:ce:ed:28:
                    45:b9:ba:25:5b:fd:b6:43:32:8f:9d:67:6e:c4:a4:
                    51:a8:20:ec:18:9a:b7:b2:97:0e:a6:05:28:a1:a3:
                    62:e7:d9:5e:d8:81:d8:aa:92:23:78:28:98:56:c5:
                    d6:20:cf:f9:53:4e:d7:08:2a:29:05:e7:35:f7:37:
                    97:a2:61:82:df:fa:b6:fc:e2:cf:5c:03:52:f9:76:
                    a0:e1:18:8a:69:51:fc:ff:a2:4c:ae:56:ab:1d:54:
                    5a:1d:98:0e:83:3e:62:0f:b0:d4:d7:08:e2:f4:e0:
                    04:72:e4:b0:15:95:c0:ed:f7:f7:88:e5:f9:fa:17:
                    f8:df:25:91:31:09:be:ac:d5:23:98:de:38:ba:70:
                    52:8a:23:95:70:d2:1c:8e:21:7f:fd:ea:c5:e9:ea:
                    29:f4:76:5c:1e:4e:59:df:a7:2d:d0:49:ac:62:c6:
                    b9:10:29:4a:f8:de:99:d5:49:00:53:60:df:ba:0f:
                    7f:d6:13:dd:80:2d:a9:59:17:86:87:ea:59:fd:5d:
                    f4:e0:89:a3:21:2e:05:4a:16:b1:01:a3:da:5c:9e:
                    10:bc:1b:bf:bb:ed:6b:7b:c7:8e:14:1e:50:fc:eb:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:07:CE:87:96:13:BA:9D:5E:BA:D1:7F:40:F9:E8:F6:33:86:95:A2
            X509v3 Authority Key Identifier:
                keyid:DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/0/323630373a663133303a653030303a3a2f33392d3438203d3e203335393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f130:e000::/39

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:f9:b7:19:b6:a4:99:1c:5c:74:8f:f9:74:68:af:b6:00:
         f3:f7:cb:5f:75:4e:a0:35:14:3e:9a:4f:9e:54:31:01:af:fa:
         84:33:d7:31:b4:cc:c6:bd:02:26:13:77:a7:65:e9:c3:78:38:
         3f:ef:9d:56:72:56:b8:ec:ec:7f:9b:36:56:ef:2e:20:c2:33:
         62:ad:6c:88:27:f5:f8:e2:0a:94:0c:87:fd:68:13:4e:6a:31:
         ba:f7:11:0d:2f:fd:7f:38:ee:c8:4d:0a:83:7e:92:ce:99:58:
         7d:4f:f7:ef:6e:d1:3e:8f:03:2b:3b:4d:92:c5:98:c1:ed:70:
         dc:ff:dc:4f:96:30:d7:25:af:d2:09:8e:f1:1c:a3:00:d5:8b:
         06:56:77:52:97:7b:ee:ea:d7:44:19:00:b0:22:4f:5a:79:e7:
         98:4c:e3:f9:28:99:72:66:c1:3e:13:64:29:30:82:b6:34:58:
         1f:e6:71:44:ce:2b:21:7f:dd:ef:a1:d0:db:9b:e2:03:49:22:
         b0:e2:17:2c:d0:b5:7e:0b:97:36:0a:96:db:f5:42:f7:f9:14:
         b3:32:86:4c:94:b9:07:8f:78:a7:b8:d6:de:6a:8b:1e:5c:43:
         eb:ed:4e:55:cb:d4:c2:e5:8a:2a:88:56:c1:63:5e:aa:02:fa:
         f0:5d:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:30:29 2026 by rpki-client