Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e088a733-e597-34b0-a437-f146f04508c7.roa
File:                     e088a733-e597-34b0-a437-f146f04508c7.roa (raw, json)
Hash identifier:          NgqGMnvh17n/poqTxLnBLkTJZucrZUlCwKStu6XxJAc=
Subject key identifier:   7E:DA:96:CD:6F:6D:B3:D4:BF:E4:0B:F0:A9:8D:5E:1B:87:15:AF:66
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100CF57EDC49FEF9BC87E600
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e088a733-e597-34b0-a437-f146f04508c7.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        2607:da00:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:f5:7e:dc:49:fe:f9:bc:87:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=ded7b86a-6bb2-4275-b6f7-cf5cc3b9bde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:90:65:d1:b2:be:d9:3f:55:68:d3:d9:2c:
                    d1:23:fa:3d:75:b6:17:67:51:0f:28:f5:ec:47:23:
                    fa:b2:6a:b2:00:c4:12:40:5c:47:c1:8f:e3:2d:57:
                    c2:61:14:a2:cb:25:3f:1f:80:be:36:fb:c4:c9:d7:
                    91:90:e7:27:8d:0d:2f:fb:31:29:31:6e:ae:95:36:
                    9f:94:62:78:37:d4:21:f5:0a:a1:c3:0c:50:d9:5a:
                    02:b4:19:46:a9:28:ff:20:fc:2a:18:fb:2a:79:c0:
                    16:ec:c9:35:91:25:66:65:6e:a5:da:3b:60:d6:46:
                    8f:6f:f7:68:f0:10:4e:53:eb:98:7d:22:af:8b:7c:
                    47:a9:00:da:46:45:e2:e2:6a:14:ea:23:22:47:74:
                    d1:35:bb:c2:86:5f:2a:41:c1:be:b3:ae:36:80:97:
                    2d:09:45:78:86:60:55:7a:51:fc:e9:8a:ea:f3:ac:
                    29:37:e1:72:d6:d1:56:b9:0b:cd:6e:cb:e2:be:a7:
                    6a:c7:8b:0d:01:95:f9:a0:e1:4e:3d:5e:6f:26:36:
                    0c:06:09:76:db:7b:47:16:be:4b:21:27:b1:7a:6f:
                    b6:00:64:96:f8:50:71:3d:82:ff:02:31:3b:77:e7:
                    f2:7e:58:18:74:e4:02:73:66:5c:91:dc:a1:a1:23:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DA:96:CD:6F:6D:B3:D4:BF:E4:0B:F0:A9:8D:5E:1B:87:15:AF:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e088a733-e597-34b0-a437-f146f04508c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:da00:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:ff:c5:f6:e7:06:24:4d:10:c7:0e:dd:79:23:77:9a:92:
         36:96:85:75:cb:de:b2:d8:f2:76:fc:5d:ac:f3:a0:50:39:ed:
         20:6e:e2:d5:57:fd:31:a7:87:b6:54:3f:59:f2:70:bb:7c:61:
         da:cd:b0:1a:29:bc:c2:4f:fb:7a:6c:3c:c8:86:e3:f2:60:68:
         51:a8:7c:e8:3a:f4:06:e9:5c:7d:46:2d:e0:65:dd:aa:98:32:
         5a:f0:74:b3:fa:03:50:37:d4:f1:69:40:78:ef:11:fe:85:da:
         0d:bf:53:20:8f:eb:b3:3e:47:47:7d:7b:9b:b3:8b:11:e2:b1:
         c4:30:5d:6a:36:f5:a4:3e:52:94:5c:39:09:50:f9:e1:2f:36:
         a3:8e:02:85:48:6f:3b:ea:52:47:46:8a:a9:7d:e8:5a:97:52:
         b9:42:ff:10:e0:da:1f:d0:8e:1c:a9:41:a9:55:46:ff:16:45:
         27:09:fc:ed:e2:54:c4:41:d2:dd:35:d2:b3:d1:6b:23:df:e2:
         30:93:5a:79:c4:5c:f3:5e:50:8b:df:f2:11:35:63:bb:d4:16:
         34:0c:e8:2e:6b:f0:b9:ed:96:55:16:76:a1:bc:fb:04:9d:45:
         0d:3f:ec:21:e2:6a:26:d2:a0:95:26:96:30:df:d7:7c:78:1d:
         5a:35:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:33:26 2026 by rpki-client