Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/410cc4e5-c4cf-3442-962d-6ab9bf3c98fa.roa
File:                     410cc4e5-c4cf-3442-962d-6ab9bf3c98fa.roa (raw, json)
Hash identifier:          f5+wZXSQxFUKD7lt2t2NRQ6gPiX8l3AEYQi+7JfwAdY=
Subject key identifier:   F7:45:2F:A5:B7:A6:A5:A5:24:4B:64:78:1F:69:0E:B5:6E:15:04:2D
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100D03875D20773202BA9A00
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/410cc4e5-c4cf-3442-962d-6ab9bf3c98fa.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        2607:da00:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0d:03:87:5d:20:77:32:02:ba:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=3063aa52-7071-4db3-845e-1f619554101d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:4b:30:e1:96:98:12:cb:ea:30:1c:c1:08:
                    9b:87:20:b8:af:82:1f:6a:e1:0f:2f:b5:74:ca:9b:
                    54:6d:9f:73:59:33:b6:40:cc:a8:71:b7:b2:4d:74:
                    ed:50:05:e8:5b:d7:34:ec:2c:03:6e:75:c0:ba:d1:
                    12:0b:51:b7:20:75:6e:f4:5d:a2:9c:dd:12:8c:79:
                    5f:6a:2b:34:d6:7e:a5:90:e9:8b:b3:d0:e4:9c:02:
                    04:a4:51:9f:93:d9:58:51:63:81:7d:92:b6:0d:d6:
                    9c:8d:60:e1:ff:6d:e5:f2:4e:44:45:63:6b:95:42:
                    40:5f:9c:f5:74:ed:1a:2f:1a:bf:6b:e7:ac:ff:bf:
                    49:06:27:f0:4b:3c:0f:18:9d:cb:84:e1:7e:20:97:
                    e5:c3:1c:67:87:09:0a:e6:2c:98:12:6b:9d:dc:a6:
                    e3:39:55:eb:50:e2:e3:4d:7f:49:51:2a:a4:13:f2:
                    99:18:a7:d3:c6:ba:1c:38:da:af:29:8c:a5:6d:84:
                    67:56:0f:ac:0d:23:9f:88:ac:2d:29:34:65:f4:46:
                    fd:05:d4:cf:fc:f9:da:8f:6b:66:88:08:29:d4:a9:
                    51:04:06:ef:ff:3e:4a:17:e0:f7:df:6d:80:66:0a:
                    97:5e:41:60:59:10:2f:ac:5b:55:c5:db:ef:01:35:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:2F:A5:B7:A6:A5:A5:24:4B:64:78:1F:69:0E:B5:6E:15:04:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/410cc4e5-c4cf-3442-962d-6ab9bf3c98fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:da00:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0c:b8:cf:a8:50:f6:63:ca:c1:d4:86:e2:2d:0f:17:18:87:
         f5:55:f7:b7:8b:b2:df:67:9d:a2:05:b7:a2:26:37:05:12:6d:
         27:63:57:07:b8:7c:92:3f:0d:20:7e:7b:41:4e:3b:f7:12:f4:
         10:44:1f:16:69:c9:73:99:28:f7:b4:34:83:3e:89:e9:80:1a:
         69:7b:4c:29:9f:4a:c0:57:c7:7b:21:b0:31:9c:d6:21:02:6e:
         08:b6:f4:93:43:77:8c:64:5e:54:6f:7b:af:b0:15:22:2e:60:
         02:3d:02:84:83:df:76:28:ad:e3:8c:4e:f7:93:63:d4:d3:e5:
         88:5c:de:03:eb:bd:bb:b9:dd:fe:cc:1d:86:bd:88:d8:87:26:
         32:23:f9:94:3c:67:f9:35:59:fd:aa:c5:35:f5:16:2d:ad:2d:
         03:fc:5d:58:6a:9c:e9:86:3b:8d:0d:95:6b:aa:3c:b4:ee:cb:
         30:71:bb:c1:ef:cc:87:9c:cd:23:31:6a:8a:17:07:c1:a6:eb:
         fc:ff:a8:53:e5:04:4c:a2:ca:9c:d7:5d:90:df:65:60:d1:52:
         d7:dc:b2:cd:18:e5:66:15:33:91:26:c2:a9:68:83:ea:5e:b5:
         b9:48:76:aa:f8:a3:6a:6d:76:f9:a3:bd:08:c1:7e:bc:6b:b4:
         7d:f2:23:9e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0QDQOHXSB3MgK6mgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk
MzA2M2FhNTItNzA3MS00ZGIzLTg0NWUtMWY2MTk1NTQxMDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0RLMOGWmBLL6jAcwQibhyC4r4IfauEPL7V0
yptUbZ9zWTO2QMyocbeyTXTtUAXoW9c07CwDbnXAutESC1G3IHVu9F2inN0SjHlf
ais01n6lkOmLs9DknAIEpFGfk9lYUWOBfZK2DdacjWDh/23l8k5ERWNrlUJAX5z1
dO0aLxq/a+es/79JBifwSzwPGJ3LhOF+IJflwxxnhwkK5iyYEmud3KbjOVXrUOLj
TX9JUSqkE/KZGKfTxrocONqvKYylbYRnVg+sDSOfiKwtKTRl9Eb9BdTP/Pnaj2tm
iAgp1KlRBAbv/z5KF+D3322AZgqXXkFgWRAvrFtVxdvvATUn7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPdFL6W3pqWlJEtkeB9pDrVuFQQtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNDEwY2M0ZTUtYzRjZi0z
NDQyLTk2MmQtNmFiOWJmM2M5OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfaAAYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEAy4z6hQ9mPKwdSG4i0PFxiH9VX3t4uy32edogW3oiY3BRJtJ2NX
B7h8kj8NIH57QU479xL0EEQfFmnJc5ko97Q0gz6J6YAaaXtMKZ9KwFfHeyGwMZzW
IQJuCLb0k0N3jGReVG97r7AVIi5gAj0ChIPfdiit44xO95Nj1NPliFzeA+u9u7nd
/swdhr2I2IcmMiP5lDxn+TVZ/arFNfUWLa0tA/xdWGqc6YY7jQ2Va6o8tO7LMHG7
we/Mh5zNIzFqihcHwabr/P+oU+UETKLKnNddkN9lYNFS19yyzRjlZhUzkSbCqWiD
6l61uUh2qvijam12+aO9CMF+vGu0ffIjng==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:32:16 2026 by rpki-client