Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8ca778b8-ae4f-3d0f-8482-464160f08b8f.roa
File:                     8ca778b8-ae4f-3d0f-8482-464160f08b8f.roa (raw, json)
Hash identifier:          CaKT5iOQdB++4bZAZZ++yxK6MN3oH7lNAveVyo056pY=
Subject key identifier:   30:BE:F4:C2:40:77:E7:98:8A:73:60:27:65:57:90:60:9A:D8:99:8C
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B4FDC7CBA381BB65AB8BA3D15
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8ca778b8-ae4f-3d0f-8482-464160f08b8f.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     15164
IP address blocks:        2607:da00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7c:ba:38:1b:b6:5a:b8:ba:3d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=012c23ab-44d5-4a3d-a651-743d3d53d27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:e1:0b:23:86:d6:ca:5e:02:2f:77:01:8a:
                    2a:02:a5:1c:ba:42:f9:b2:12:fc:85:49:91:a7:df:
                    68:75:3b:ff:90:96:ff:9e:1b:25:be:71:35:25:3a:
                    9b:ac:10:ea:56:31:a7:28:65:bd:4a:78:e1:db:93:
                    ef:8f:ee:be:43:d6:31:09:d5:47:6b:65:ee:ef:e0:
                    cc:52:51:dc:c5:d1:0f:1e:81:5f:8b:16:f5:85:ce:
                    a1:a1:5f:f5:02:13:e6:8a:1e:2d:02:b4:23:aa:bd:
                    51:55:fb:20:9a:60:e3:1f:70:7c:69:e0:48:01:7a:
                    0b:07:dc:c9:7e:cd:4b:35:96:25:11:ed:c9:17:0f:
                    bf:ff:d1:58:6b:a7:03:41:b3:bc:38:78:55:71:01:
                    d9:fc:da:6c:f2:b3:a0:a2:e1:91:8a:88:0a:ab:f8:
                    53:fc:4e:9e:c3:09:01:44:a1:34:58:b3:12:8e:2a:
                    b7:dd:41:b9:da:e4:6b:36:25:06:09:eb:fa:f8:5b:
                    7b:bb:ea:dc:2e:71:f5:b0:43:ec:0e:54:0c:d3:1e:
                    a2:67:57:62:34:71:0d:ad:34:3b:32:e4:e2:ff:dc:
                    f9:02:c7:7d:a7:db:63:4c:04:b0:d0:48:da:08:d2:
                    ab:4a:1a:5a:5f:fa:3b:be:a0:b9:6f:6d:4b:a2:7e:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BE:F4:C2:40:77:E7:98:8A:73:60:27:65:57:90:60:9A:D8:99:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8ca778b8-ae4f-3d0f-8482-464160f08b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:da00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ce:08:0f:7a:24:bb:21:6e:52:90:49:8c:1d:e6:ef:82:37:
         8d:1e:fd:b6:3a:ac:ad:e3:01:42:02:5f:89:36:95:cb:1a:97:
         55:23:33:89:07:b8:0a:84:a1:e1:f4:84:f6:f0:00:52:fb:64:
         4f:f4:19:6e:76:2e:9e:ef:e0:37:7c:fe:a7:6d:3b:0e:c4:8e:
         06:d8:7f:48:83:30:bc:00:92:f6:6b:bd:3f:a2:ca:0c:04:72:
         c0:86:79:a0:ee:c2:96:ff:de:d0:48:dc:54:64:b3:b7:c4:47:
         c4:ce:b2:3c:96:62:8f:58:d6:ac:6e:79:68:2f:88:ee:19:92:
         28:20:07:21:ca:1e:2c:55:8b:96:62:64:87:5a:66:be:16:6c:
         a3:27:be:07:f3:28:4c:00:a2:7e:af:d4:bb:e1:ce:5e:f4:19:
         98:78:17:c8:fd:4f:1a:2d:5e:0b:ae:79:1e:7b:7b:da:83:5c:
         27:9c:c3:b9:35:4c:c8:9d:b0:82:2b:ae:87:04:93:af:92:07:
         d8:26:cb:65:5a:68:ab:1b:ad:a2:d7:16:90:0b:14:f9:1c:df:
         00:59:c5:ad:4f:28:8b:7d:d5:ed:39:33:a1:05:6c:9e:99:b0:
         c8:50:ea:7c:f5:ce:aa:78:88:8e:ef:d8:8d:06:a4:f2:1b:c1:
         82:ee:35:ee
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtP3Hy6OBu2Wri6PRUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
MDEyYzIzYWItNDRkNS00YTNkLWE2NTEtNzQzZDNkNTNkMjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyDhCyOG1speAi93AYoqAqUcukL5shL8hUmR
p99odTv/kJb/nhslvnE1JTqbrBDqVjGnKGW9Snjh25Pvj+6+Q9YxCdVHa2Xu7+DM
UlHcxdEPHoFfixb1hc6hoV/1AhPmih4tArQjqr1RVfsgmmDjH3B8aeBIAXoLB9zJ
fs1LNZYlEe3JFw+//9FYa6cDQbO8OHhVcQHZ/Nps8rOgouGRiogKq/hT/E6ewwkB
RKE0WLMSjiq33UG52uRrNiUGCev6+Ft7u+rcLnH1sEPsDlQM0x6iZ1diNHENrTQ7
MuTi/9z5Asd9p9tjTASw0EjaCNKrShpaX/o7vqC5b21Lon5YEQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDC+9MJAd+eYinNgJ2VXkGCa2JmMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOGNhNzc4YjgtYWU0Zi0z
ZDBmLTg0ODItNDY0MTYwZjA4YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfaAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnc4ID3okuyFuUpBJjB3m74I3jR79tjqsreMBQgJfiTaVyxqXVSMz
iQe4CoSh4fSE9vAAUvtkT/QZbnYunu/gN3z+p207DsSOBth/SIMwvACS9mu9P6LK
DARywIZ5oO7Clv/e0EjcVGSzt8RHxM6yPJZij1jWrG55aC+I7hmSKCAHIcoeLFWL
lmJkh1pmvhZsoye+B/MoTACifq/Uu+HOXvQZmHgXyP1PGi1eC655Hnt72oNcJ5zD
uTVMyJ2wgiuuhwSTr5IH2CbLZVpoqxutotcWkAsU+RzfAFnFrU8oi33V7TkzoQVs
npmwyFDqfPXOqniIju/YjQak8hvBgu417g==
-----END CERTIFICATE-----
Generated at Thu Oct 9 11:07:35 2025 by rpki-client