Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31616499-f428-3106-b7a5-10e852b2e626.roa
File:                     31616499-f428-3106-b7a5-10e852b2e626.roa (raw, json)
Hash identifier:          3juXfLBT8JM3BKg5uOzIgPEu2UoExlmKpo2Hl9qdwLc=
Subject key identifier:   23:70:32:EB:31:4A:A4:C2:8B:12:0F:88:A7:F7:76:F8:71:5B:C3:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295584010DC88A0EACAA9FD0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31616499-f428-3106-b7a5-10e852b2e626.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1015:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:84:01:0d:c8:8a:0e:ac:aa:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=169669bf-5259-4894-aaac-7bc551252f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:38:aa:2e:2a:03:9b:58:3d:12:4a:2c:b6:
                    71:8f:5e:8b:57:ea:41:d1:2c:ed:b4:e0:25:d7:7f:
                    e1:24:c0:bf:e6:a9:5c:32:9e:9c:40:4d:ed:ee:b7:
                    b6:74:04:58:26:40:52:3e:39:09:04:26:0e:a8:7b:
                    8c:00:fa:da:d6:85:2c:3e:54:96:6a:0f:82:a7:fb:
                    92:12:58:05:86:f6:33:e9:72:f1:3f:7b:b8:40:29:
                    df:35:05:3c:32:8a:ba:b1:2e:d2:c0:f3:2a:55:cd:
                    08:23:0b:57:94:01:00:71:e2:a5:8a:be:06:7f:d0:
                    9b:c8:ef:c6:d2:d9:f5:73:31:a3:e2:6b:60:f8:cf:
                    fb:3a:d3:95:3a:75:25:1d:d3:1d:2d:3f:fd:0f:37:
                    93:7f:ef:de:fd:5d:f6:e5:d4:b9:30:8d:85:88:5f:
                    1d:e6:10:80:1e:a9:29:07:72:5b:e2:42:a8:7a:f8:
                    e8:61:8a:96:83:44:2a:eb:69:17:f3:38:a5:25:15:
                    27:69:b1:2b:ef:72:83:7b:20:ed:9b:f8:d3:9b:08:
                    09:7a:58:20:92:2c:b9:56:6b:9f:22:c2:a0:d2:94:
                    9b:4c:b4:60:74:83:54:ed:58:8c:f2:33:2e:a3:30:
                    9c:0f:3c:da:44:ea:e3:ec:42:f3:e1:2d:b8:8b:51:
                    00:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:70:32:EB:31:4A:A4:C2:8B:12:0F:88:A7:F7:76:F8:71:5B:C3:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31616499-f428-3106-b7a5-10e852b2e626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:a4:a4:e5:ef:d7:5a:99:ee:af:b6:6c:c5:28:92:ac:e0:
         40:31:f2:84:db:46:cc:f0:25:81:97:b6:ce:f7:f8:08:54:d4:
         cd:db:26:f9:78:fb:2e:5e:5d:eb:00:4d:07:2d:0b:38:3d:4a:
         0e:c8:e4:20:90:c6:85:35:57:2f:de:8b:12:7f:53:ba:a6:77:
         9c:2c:bc:7c:56:b3:72:9a:26:a1:19:fe:2c:50:94:f8:24:30:
         66:f2:4f:67:51:ba:dd:18:6e:ea:25:fc:c3:50:13:e6:0f:c4:
         3f:18:94:a1:0a:63:1d:da:ef:b4:eb:87:1c:25:23:e8:8a:72:
         94:ea:d6:9a:1d:ed:88:2a:80:7b:47:26:56:5a:7f:ce:1c:cc:
         58:2b:ab:6a:7f:2c:d4:db:21:9f:4c:94:80:c2:b5:f8:76:3c:
         4e:16:59:c6:a8:61:9a:fb:61:e3:74:7c:e5:5e:18:d5:f3:c6:
         77:55:a4:cf:b3:7f:41:f1:77:5e:52:a6:d8:77:61:fe:97:6d:
         65:95:d0:d3:ba:e1:3d:79:15:47:8a:9b:9e:29:9d:d2:b5:a4:
         f8:88:e4:9b:b2:07:06:3c:86:62:fa:47:7d:56:63:b4:65:e3:
         f7:48:2b:bd:0a:2a:47:fa:4f:24:9b:0b:bf:2a:42:b6:9c:01:
         50:35:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:06:48 2025 by rpki-client