Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b7d6f06e-a8f6-328c-b587-8ab5c0c461f6.roa
File:                     b7d6f06e-a8f6-328c-b587-8ab5c0c461f6.roa (raw, json)
Hash identifier:          pUXi82nAKPlpu6W4GjOsbm2qUWjREPgZP4dJyNDLpLA=
Subject key identifier:   A8:87:E4:25:C0:F3:CC:48:9B:3D:55:B5:C5:C7:6B:6A:20:78:6F:36
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB4441C9857DA99F695BC0
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b7d6f06e-a8f6-328c-b587-8ab5c0c461f6.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        2607:da00:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:44:41:c9:85:7d:a9:9f:69:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=f9d6e724-eee5-4e0c-be9f-0afccffcb35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:8e:fb:bc:43:d1:62:90:de:2a:cb:a3:6c:
                    73:46:d4:20:e6:c1:9d:91:bb:eb:7d:0c:81:ed:48:
                    47:4d:3f:5b:65:eb:66:a4:3c:57:2d:63:9e:47:25:
                    58:24:02:31:00:56:e6:f7:75:d7:2e:af:0a:78:bb:
                    fb:14:0b:c3:cd:e2:18:ac:ea:0f:c6:21:6a:da:e7:
                    95:3a:ec:2b:67:4a:48:c3:da:c5:15:68:d3:3b:95:
                    fd:b0:37:f6:2d:55:44:3a:4b:d8:7c:60:14:a8:b0:
                    7f:0c:b3:98:1d:76:67:ad:58:30:ef:46:2f:a7:df:
                    12:4c:38:a1:2b:db:13:d3:3d:6d:ff:e3:e9:60:a2:
                    b2:0d:88:87:cc:87:a7:07:45:87:e2:ca:96:49:57:
                    ab:46:94:19:52:6d:1b:c1:b3:6f:7d:70:5f:91:2e:
                    5c:ca:2c:e2:01:11:4d:af:bd:c2:5b:ea:2f:f4:a5:
                    30:de:f5:cf:3c:cc:72:71:0d:15:af:3c:ff:99:13:
                    11:3c:3d:cb:db:55:b7:62:6a:b6:3f:f9:9b:0b:34:
                    dd:36:12:31:a7:5c:d1:af:4a:12:0e:78:fc:db:d8:
                    dc:41:87:47:f7:0a:06:80:48:9e:be:6e:15:21:d8:
                    4f:f9:8f:86:05:de:90:14:1d:5f:34:ac:0a:5e:d7:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:87:E4:25:C0:F3:CC:48:9B:3D:55:B5:C5:C7:6B:6A:20:78:6F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b7d6f06e-a8f6-328c-b587-8ab5c0c461f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:da00:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a1:49:d1:94:6a:e0:97:42:0f:22:d5:43:31:e2:86:05:5f:
         ff:37:70:61:6c:76:03:d2:8b:08:fd:5b:d2:9a:4e:8d:65:16:
         af:b0:32:39:a6:25:6d:95:a0:d4:f8:60:f5:bb:37:34:67:52:
         88:c1:c1:fc:0c:e3:f8:c2:dc:e8:7c:09:d1:b8:e1:25:e6:0a:
         f8:aa:be:25:c6:4c:35:a9:4b:e7:b0:48:9e:d4:ff:91:f6:30:
         41:cf:38:ef:b2:96:42:d8:6c:8c:68:d0:46:3f:18:14:bf:87:
         4b:d2:79:1f:4a:e2:1f:55:af:ed:db:d3:9e:d2:16:ef:34:40:
         cc:93:28:42:3e:61:02:a4:92:20:58:d4:73:06:98:cb:ac:5c:
         3b:69:ee:1f:3c:5c:7f:2c:18:6b:f6:63:af:ea:90:61:6b:96:
         5e:57:18:ff:27:fe:e5:92:ba:01:4a:76:d8:cf:1b:dd:38:cb:
         08:4d:ab:9c:02:82:da:10:73:33:58:06:21:ac:7d:3c:fe:b0:
         9b:9c:0e:d8:b3:ca:42:a8:49:6b:53:4d:60:c4:f6:04:9e:05:
         f3:09:a5:57:a5:37:54:da:1c:dc:2a:3b:91:51:f4:b4:de:bb:
         95:5c:81:22:c5:2c:17:8a:cd:c9:6c:0f:72:7a:7a:8f:ce:01:
         67:a5:e5:15
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3wq0RByYV9qZ9pW8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk
ZjlkNmU3MjQtZWVlNS00ZTBjLWJlOWYtMGFmY2NmZmNiMzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iGO+7xD0WKQ3irLo2xzRtQg5sGdkbvrfQyB
7UhHTT9bZetmpDxXLWOeRyVYJAIxAFbm93XXLq8KeLv7FAvDzeIYrOoPxiFq2ueV
OuwrZ0pIw9rFFWjTO5X9sDf2LVVEOkvYfGAUqLB/DLOYHXZnrVgw70Yvp98STDih
K9sT0z1t/+PpYKKyDYiHzIenB0WH4sqWSVerRpQZUm0bwbNvfXBfkS5cyiziARFN
r73CW+ov9KUw3vXPPMxycQ0Vrzz/mRMRPD3L21W3Ymq2P/mbCzTdNhIxp1zRr0oS
Dnj829jcQYdH9woGgEievm4VIdhP+Y+GBd6QFB1fNKwKXtfukQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKiH5CXA88xImz1VtcXHa2ogeG82MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYjdkNmYwNmUtYThmNi0z
MjhjLWI1ODctOGFiNWMwYzQ2MWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfaAAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlKFJ0ZRq4JdCDyLVQzHihgVf/zdwYWx2A9KLCP1b0ppOjWUWr7Ay
OaYlbZWg1Phg9bs3NGdSiMHB/Azj+MLc6HwJ0bjhJeYK+Kq+JcZMNalL57BIntT/
kfYwQc8477KWQthsjGjQRj8YFL+HS9J5H0riH1Wv7dvTntIW7zRAzJMoQj5hAqSS
IFjUcwaYy6xcO2nuHzxcfywYa/Zjr+qQYWuWXlcY/yf+5ZK6AUp22M8b3TjLCE2r
nAKC2hBzM1gGIax9PP6wm5wO2LPKQqhJa1NNYMT2BJ4F8wmlV6U3VNoc3Co7kVH0
tN67lVyBIsUsF4rNyWwPcnp6j84BZ6XlFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:00 2026 by rpki-client