Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa
File:                     3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (raw, json)
Hash identifier:          WfeRz4Z6r0okfXdRyQKIIDaAbs6l4Rn/rzaKLVMz/XE=
Subject key identifier:   2E:5A:1D:74:BE:04:21:03:4E:6B:CC:BF:0B:2C:6C:E9:8B:37:C3:06
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       7F9C376090161D437473005E567E79D7BCD79BEE
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa
Signing time:             Wed 03 Jun 2026 16:56:14 +0000
ROA not before:           Wed 03 Jun 2026 16:51:14 +0000
ROA not after:            Wed 02 Jun 2027 16:56:14 +0000
asID:                     47553
IP address blocks:        142.147.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9c:37:60:90:16:1d:43:74:73:00:5e:56:7e:79:d7:bc:d7:9b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jun  3 16:51:14 2026 GMT
            Not After : Jun  2 16:56:14 2027 GMT
        Subject: CN=2E5A1D74BE0421034E6BCCBF0B2C6CE98B37C306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:6b:14:9c:07:ce:d7:7a:af:b3:2b:df:e6:
                    4b:2f:8b:e1:73:63:a4:1a:75:ff:cc:16:54:e8:2b:
                    d9:9a:f0:3e:dd:ca:f5:12:dd:43:a4:74:89:1f:4c:
                    1c:86:90:48:37:3f:f3:f7:e0:3a:38:11:9b:43:5c:
                    61:45:32:47:57:20:83:f2:81:a0:99:37:3a:6d:d2:
                    e9:f8:cb:ec:fa:df:a3:47:30:85:46:45:f3:94:f0:
                    a0:7d:9f:db:65:2a:33:8d:7a:22:71:2f:2f:a1:28:
                    2b:07:98:d4:c1:c0:7a:36:35:f3:1f:fc:47:a6:d5:
                    e4:31:90:b8:56:35:c0:7e:9a:0e:53:a0:8e:a8:da:
                    a2:f6:6e:0a:ee:4b:25:99:fb:85:56:28:ff:ad:11:
                    dc:16:f2:99:5c:2c:c1:ff:b7:de:51:98:1e:6d:b1:
                    7e:af:a5:52:67:42:de:ec:66:6f:4f:3e:6b:30:12:
                    b7:bf:ab:3a:fc:c7:04:82:ef:97:ed:bb:bd:ca:74:
                    79:03:54:ef:86:c3:5a:76:6c:be:31:4c:5b:82:62:
                    d2:98:41:70:67:07:8b:39:b2:5a:1b:c5:e3:06:4c:
                    7f:60:6c:c1:46:57:b7:3a:59:1c:73:b6:69:f5:2f:
                    2b:8b:43:26:74:f4:9b:fa:9e:fb:9c:6a:cb:5e:fc:
                    4e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5A:1D:74:BE:04:21:03:4E:6B:CC:BF:0B:2C:6C:E9:8B:37:C3:06
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b2:da:fe:d1:3d:c1:78:e7:43:b7:15:cc:1c:78:e5:cd:31:
         d1:dd:9b:bd:d7:dd:bb:cf:15:2a:1e:87:19:3b:bb:38:7c:8c:
         51:cc:f8:0e:5f:cc:10:d9:71:e4:50:f8:0f:80:13:34:59:2c:
         eb:c4:ce:bd:87:a6:88:6c:8e:0d:ac:77:ad:51:54:90:6a:02:
         be:37:51:33:03:5d:00:4a:d5:6d:8f:1f:b5:9b:38:ec:ae:80:
         a2:b0:94:3d:c5:c9:37:b6:54:0b:e1:51:a3:ec:8d:4c:1a:4f:
         bb:37:d3:bc:78:2a:a4:7f:41:e6:f5:e6:a0:7a:f5:7a:23:46:
         da:e0:e6:98:94:be:96:d8:83:e0:6f:73:b4:e6:8e:a4:fc:49:
         12:8c:f2:a8:2e:95:b0:3e:5a:93:b1:6e:36:40:a7:e8:ad:3d:
         09:a6:8a:26:be:1b:b8:88:e5:ab:1b:4c:cc:ec:a3:9b:f3:4b:
         2b:20:07:49:7c:49:96:8f:54:88:9c:d4:d9:75:f5:0d:ef:98:
         17:7f:85:bb:7f:12:46:07:15:99:e7:22:f5:84:3c:7a:a5:75:
         da:e7:5e:3c:cf:04:03:b4:58:53:9f:bc:b3:dc:d8:06:58:06:
         b4:f5:7d:3c:d2:e3:a2:ec:bc:10:c6:aa:ec:63:3e:9c:e8:da:
         b4:6d:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:08:18 2026 by rpki-client