Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/ae0ce974-b160-3b50-8606-6a49c27c111f.roa
File:                     ae0ce974-b160-3b50-8606-6a49c27c111f.roa (raw, json)
Hash identifier:          f0m+wD379zfmnvYVJZooxYNgQvtp/Jd2MPpDNs9NZhU=
Subject key identifier:   87:93:4A:AF:EE:76:23:6A:B5:C7:7E:6B:9F:EC:A6:76:21:9E:64:59
Certificate issuer:       /CN=841d3ce8-d29f-40af-b883-2f114aee4d29
Certificate serial:       010D0C9F4328584D0217B671FF67ED0A36896E80
Authority key identifier: DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/ae0ce974-b160-3b50-8606-6a49c27c111f.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     400615
IP address blocks:        2607:e100:3000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:b6:71:ff:67:ed:0a:36:89:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841d3ce8-d29f-40af-b883-2f114aee4d29
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=25a1e515-fe2b-4f50-bfea-8f0641affbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:22:68:cc:3f:61:ab:bb:dd:9e:6f:3f:b1:
                    8d:04:87:a6:d8:6b:88:9b:30:83:b5:80:b4:1e:28:
                    41:a5:1f:44:f7:e4:af:c6:5b:02:ea:d9:de:98:7f:
                    50:75:6c:64:dd:5f:22:f7:52:88:af:1e:5c:c0:8d:
                    38:3b:3f:f9:b3:75:ce:6a:16:2f:c7:b8:85:34:6b:
                    fb:35:e4:17:3d:02:c0:5d:71:4d:36:89:a1:23:2f:
                    53:c1:71:8a:2d:fd:75:bf:7c:b1:a1:5e:93:11:d5:
                    5d:c8:3f:cb:76:20:28:e0:e3:c5:74:72:ad:20:2b:
                    7b:08:e6:c3:7d:8d:87:ec:02:6c:cb:e7:53:4c:54:
                    59:bc:20:6e:3e:29:d2:b6:ac:fb:37:b5:f8:31:31:
                    71:e3:24:d2:a4:20:d2:dd:d7:64:42:03:ed:10:ad:
                    0f:d6:7e:16:46:1d:38:36:dc:a5:f1:e3:44:54:c2:
                    72:e8:a6:51:99:14:e4:35:31:5c:0e:86:7f:d1:d5:
                    59:3e:57:df:cc:dd:3d:4d:e7:22:99:a9:62:fc:fb:
                    b2:d9:a1:94:33:9c:ac:48:21:60:82:99:63:d0:5a:
                    c6:27:06:08:67:6e:de:04:7a:4e:ce:09:52:60:f3:
                    ac:51:49:88:69:40:63:3f:f4:64:77:e6:ea:3d:dc:
                    23:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:93:4A:AF:EE:76:23:6A:B5:C7:7E:6B:9F:EC:A6:76:21:9E:64:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/ae0ce974-b160-3b50-8606-6a49c27c111f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl

            X509v3 Authority Key Identifier:
                keyid:DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e100:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:57:c7:1e:75:52:ee:1e:13:8f:22:ac:a5:e9:38:15:f9:
         3d:62:57:fd:94:6e:91:1b:4c:f2:6f:af:29:d4:c2:81:fe:89:
         ed:fe:ee:7e:87:7d:32:b9:20:9e:ad:d5:ac:48:31:35:b7:02:
         ea:70:96:38:69:f4:a3:26:c3:5b:d1:82:93:c6:a2:ba:a5:d6:
         f6:fa:2e:94:ee:1c:75:e7:a0:a8:9c:86:10:40:9d:38:b0:5a:
         dc:61:d8:72:3d:bc:48:df:79:b9:9e:22:d6:2f:a2:e3:23:1b:
         a0:c4:04:eb:1d:b7:84:88:ed:01:41:88:7f:8d:29:4f:ca:83:
         5b:e0:6e:fb:41:a6:49:a8:2e:fa:b2:51:aa:37:21:ba:42:24:
         ce:57:69:40:9b:f5:16:ff:96:79:a5:d3:d6:7d:48:7b:0f:52:
         28:53:9c:14:fd:77:c5:3a:0c:b6:c8:b8:b3:df:a1:2d:f2:78:
         4e:13:1b:71:27:8a:2f:8f:87:86:ed:ef:09:8a:d7:0e:f3:3c:
         06:9d:82:3a:96:d1:5c:95:3f:57:7b:91:16:a4:dc:76:13:4a:
         f7:50:77:17:34:23:4b:62:fa:24:93:57:5a:a2:9b:ea:d9:a2:
         f7:8d:62:38:9d:2d:8a:2b:50:a8:98:f1:60:c7:c3:5d:bc:cb:
         98:27:9a:30
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0CF7Zx/2ftCjaJboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQxZDNjZTgtZDI5Zi00MGFmLWI4ODMtMmYxMTRhZWU0
ZDI5MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjVhMWU1MTUtZmUyYi00ZjUwLWJmZWEtOGYwNjQxYWZmYmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsggiaMw/Yau73Z5vP7GNBIem2GuImzCDtYC0
HihBpR9E9+SvxlsC6tnemH9QdWxk3V8i91KIrx5cwI04Oz/5s3XOahYvx7iFNGv7
NeQXPQLAXXFNNomhIy9TwXGKLf11v3yxoV6TEdVdyD/LdiAo4OPFdHKtICt7CObD
fY2H7AJsy+dTTFRZvCBuPinStqz7N7X4MTFx4yTSpCDS3ddkQgPtEK0P1n4WRh04
Ntyl8eNEVMJy6KZRmRTkNTFcDoZ/0dVZPlffzN09Tecimali/Puy2aGUM5ysSCFg
gplj0FrGJwYIZ27eBHpOzglSYPOsUUmIaUBjP/Rkd+bqPdwjDQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIeTSq/udiNqtcd+a5/spnYhnmRZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NDFk
M2NlOC1kMjlmLTQwYWYtYjg4My0yZjExNGFlZTRkMjkvYWUwY2U5NzQtYjE2MC0z
YjUwLTg2MDYtNmE0OWMyN2MxMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODQxZDNjZTgtZDI5Zi00MGFmLWI4
ODMtMmYxMTRhZWU0ZDI5Lzg0MWQzY2U4LWQyOWYtNDBhZi1iODgzLTJmMTE0YWVl
NGQyOS5jcmwwHwYDVR0jBBgwFoAU3K4MmZpEhmZapzo6SV+9KrNYIcQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC84NDFkM2NlOC1kMjlmLTQwYWYtYjg4My0yZjEx
NGFlZTRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfhADAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAc9ZXxx51Uu4eE48irKXpOBX5PWJX/ZRukRtM8m+vKdTCgf6J7f7u
fod9Mrkgnq3VrEgxNbcC6nCWOGn0oybDW9GCk8aiuqXW9voulO4cdeegqJyGEECd
OLBa3GHYcj28SN95uZ4i1i+i4yMboMQE6x23hIjtAUGIf40pT8qDW+Bu+0GmSagu
+rJRqjchukIkzldpQJv1Fv+WeaXT1n1Iew9SKFOcFP13xToMtsi4s9+hLfJ4ThMb
cSeKL4+Hhu3vCYrXDvM8Bp2COpbRXJU/V3uRFqTcdhNK91B3FzQjS2L6JJNXWqKb
6tmi941iOJ0tiitQqJjxYMfDXbzLmCeaMA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:44 2026 by rpki-client