Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78616c78-08df-3de2-92c2-15fb98ca7189.roa
File:                     78616c78-08df-3de2-92c2-15fb98ca7189.roa (raw, json)
Hash identifier:          xdtvyRB93HlJgW5VH9grBj4/HI3mXTLj6siEI2Jiq9M=
Subject key identifier:   EE:64:C3:39:03:2C:A5:EF:6F:24:D3:95:0E:0C:33:10:CA:2A:78:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29558868A3AED73F772E9D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78616c78-08df-3de2-92c2-15fb98ca7189.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1017:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:88:68:a3:ae:d7:3f:77:2e:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=c92d342b-48fa-4bf7-aa3e-25b1ba3554e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:bb:6f:ab:5c:d9:d2:d1:37:91:38:16:85:
                    7a:6c:cc:d9:a3:62:d6:a3:86:cd:a7:da:6e:45:f0:
                    3e:81:4c:50:b6:37:c1:a5:50:78:6e:0c:31:75:80:
                    d0:73:bb:fa:b1:a5:ce:8c:0b:0f:b0:a0:35:8e:c2:
                    49:da:19:8c:9f:19:df:e2:5a:37:96:2d:21:af:79:
                    b0:be:98:46:34:0e:a3:cc:53:d5:ca:d1:56:0a:b0:
                    ec:93:2d:0f:ca:59:ba:f7:24:16:b1:6a:44:1f:65:
                    0b:43:ff:a7:e6:0e:1a:0d:8b:4f:2f:83:a7:35:fb:
                    b8:96:e5:6b:b5:4c:fd:e4:18:72:d7:50:a9:0d:37:
                    01:47:a1:8d:88:94:00:43:7b:1f:fd:c8:c2:25:01:
                    b9:20:db:00:6b:ff:9e:7f:6a:af:09:d8:00:fe:20:
                    8b:22:cb:10:f5:f4:41:79:cb:72:ad:a8:d1:9b:b6:
                    20:eb:e2:47:71:47:6e:01:ee:7c:cb:00:a8:4b:e3:
                    c9:ff:2d:1e:82:58:b3:3c:1c:28:9d:09:2e:46:fc:
                    2c:ea:0d:34:33:24:77:79:2e:11:d6:11:8f:9d:1d:
                    83:0c:27:f4:1c:2a:02:c3:66:49:95:aa:07:5f:c6:
                    68:3a:58:a5:dd:89:b3:80:99:ee:0b:a5:0c:40:ff:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:C3:39:03:2C:A5:EF:6F:24:D3:95:0E:0C:33:10:CA:2A:78:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78616c78-08df-3de2-92c2-15fb98ca7189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b7:fc:75:92:b6:80:03:3f:4e:c2:0a:6a:59:46:3c:b4:c2:
         c7:a1:ee:50:d8:1f:8a:82:3d:a5:42:e2:63:24:55:7f:33:44:
         7d:de:32:73:38:b8:35:bf:fb:13:9b:c3:22:67:c9:4f:a0:51:
         c6:bb:45:06:3b:9d:01:7a:fc:2d:cd:5d:d1:69:23:55:17:41:
         b5:c4:68:6e:58:7d:25:4d:01:09:20:90:7d:8f:26:42:f5:b8:
         ce:25:8a:12:b2:a4:9e:ec:97:5c:b2:fe:95:b5:28:0c:d7:b2:
         24:b2:73:5a:83:87:77:6d:70:ef:59:30:f2:d9:1a:ac:c8:8a:
         d0:6b:08:ed:fd:65:bb:aa:a5:d8:81:1a:d6:92:63:1c:53:ed:
         2a:09:c7:e8:4f:69:0f:46:c2:b0:ae:40:ad:3f:23:29:ac:5d:
         5e:81:c6:7e:ff:b7:73:6e:a4:7c:d7:1d:9c:dd:e9:0e:3b:de:
         32:0e:38:f0:b5:80:99:d3:f0:1a:a5:80:ad:ef:69:01:25:04:
         2d:9f:14:cc:33:88:21:cd:32:36:48:a3:00:08:c5:e3:82:dc:
         2a:9c:52:92:cb:9f:68:b2:29:dc:c1:dc:c6:5b:15:99:e5:32:
         67:10:7c:db:14:1e:9f:1d:83:a5:96:85:4c:2e:7c:51:17:db:
         5f:c6:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:45:22 2025 by rpki-client