Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa
File:                     333e46c8-8ff4-38b8-acdc-10662d117e63.roa (raw, json)
Hash identifier:          Nfl8kQ9gd1DSjZk1LIsi/AWz2ifAM7e8NvbDXHeQGBg=
Subject key identifier:   EC:5E:13:D9:7A:96:B4:16:15:2A:B3:66:63:EB:41:B4:1A:67:44:A8
Certificate issuer:       /CN=7b32f305-4389-4cc7-b146-c144a26b3f4c
Certificate serial:       010D0C9F4328584ED431F23F8951CBD650719674
Authority key identifier: 7C:1C:9F:00:4A:3C:F6:73:0C:CD:C1:FC:5C:23:A9:26:D1:59:EB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     17253
IP address blocks:        2606:8000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/7b32f305-4389-4cc7-b146-c144a26b3f4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/7b32f305-4389-4cc7-b146-c144a26b3f4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f2:3f:89:51:cb:d6:50:71:96:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b32f305-4389-4cc7-b146-c144a26b3f4c
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=2d4c215a-a496-4af2-8d23-214adb68046c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:f3:f0:6e:20:6e:4f:d6:f4:dd:66:ff:b2:
                    75:5a:77:c1:3e:3b:b4:65:4b:6c:7d:8c:6e:19:7b:
                    1c:f2:a4:88:5a:76:d6:58:31:af:0f:ce:ff:61:b1:
                    03:ef:6b:c9:0d:80:18:8a:f9:9e:dd:66:a6:10:62:
                    e9:ef:f5:af:63:79:53:c5:ca:fb:b3:1e:e8:dd:93:
                    56:0b:5b:06:82:85:22:73:10:8a:46:f7:ca:08:e6:
                    df:6a:3f:d6:b2:03:30:cf:1e:e6:1c:25:44:b7:b2:
                    19:ef:a8:78:c8:a5:b9:59:be:5c:24:ac:61:5f:e4:
                    b6:fe:a2:a0:72:91:cc:40:68:8e:10:e1:d1:fe:d4:
                    44:fa:31:c0:ce:07:20:53:79:4a:18:d8:9e:df:34:
                    67:4c:3a:71:60:35:3f:75:b8:4c:13:b6:e4:f8:05:
                    13:f8:40:61:94:4b:cc:e6:78:77:a3:8f:d2:25:70:
                    db:17:c3:6d:14:c3:76:bc:7f:ec:d3:e6:5e:82:b8:
                    80:e6:68:f6:bc:1a:6b:4b:ab:f6:f7:24:2f:c0:d9:
                    c5:31:ec:88:cb:02:d4:91:d8:75:54:76:76:65:4d:
                    85:77:ce:49:a1:d8:cf:e9:0c:91:39:0d:8d:17:74:
                    c6:bb:80:81:53:71:e0:64:24:8f:ab:b8:0a:9d:89:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:13:D9:7A:96:B4:16:15:2A:B3:66:63:EB:41:B4:1A:67:44:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/333e46c8-8ff4-38b8-acdc-10662d117e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c/7b32f305-4389-4cc7-b146-c144a26b3f4c.crl

            X509v3 Authority Key Identifier:
                keyid:7C:1C:9F:00:4A:3C:F6:73:0C:CD:C1:FC:5C:23:A9:26:D1:59:EB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b32f305-4389-4cc7-b146-c144a26b3f4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:68:1e:d7:ee:ff:95:46:b3:83:81:00:a0:86:c1:8c:6d:0e:
         a3:38:3a:b5:cd:84:f0:bf:b3:c2:2c:fa:2b:f5:13:e9:4c:34:
         6d:06:b2:ea:3f:10:94:13:e6:c3:ca:67:28:20:a5:5c:f5:b1:
         bf:4e:93:b4:e2:ae:02:59:26:c6:8b:91:04:62:2e:31:cd:c1:
         7f:49:50:55:79:05:2a:b0:4e:3e:df:3b:05:ed:bf:ff:bf:0e:
         31:05:1f:c9:ab:01:e5:96:74:03:10:b9:32:02:ab:c6:7e:f1:
         35:63:be:b1:6a:14:2c:cf:79:64:4a:1a:f3:b0:5a:6d:9d:c3:
         24:5d:47:ac:09:79:2a:df:78:b0:6c:1f:25:74:39:88:e5:5d:
         33:be:78:ae:e5:c0:35:d6:b8:bc:98:13:b0:2a:f2:d4:10:6b:
         38:86:bc:08:cc:e1:43:57:b8:58:db:73:aa:84:d2:4b:73:b7:
         23:cf:fb:79:66:4a:3e:39:69:36:49:ef:7a:c2:9e:a2:27:60:
         d6:85:9e:d6:92:b0:f3:71:1d:c2:61:bd:5f:57:a8:16:f1:0d:
         3a:d7:af:a6:6e:ec:d5:d7:96:8d:aa:bd:b9:78:ea:ce:32:2f:
         52:df:9a:7d:96:17:57:9a:9c:df:e0:1c:e4:76:dd:6e:4a:5c:
         7f:40:81:f7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7UMfI/iVHL1lBxlnQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzMmYzMDUtNDM4OS00Y2M3LWIxNDYtYzE0NGEyNmIz
ZjRjMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MmQ0YzIxNWEtYTQ5Ni00YWYyLThkMjMtMjE0YWRiNjgwNDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ/z8G4gbk/W9N1m/7J1WnfBPju0ZUtsfYxu
GXsc8qSIWnbWWDGvD87/YbED72vJDYAYivme3WamEGLp7/WvY3lTxcr7sx7o3ZNW
C1sGgoUicxCKRvfKCObfaj/WsgMwzx7mHCVEt7IZ76h4yKW5Wb5cJKxhX+S2/qKg
cpHMQGiOEOHR/tRE+jHAzgcgU3lKGNie3zRnTDpxYDU/dbhME7bk+AUT+EBhlEvM
5nh3o4/SJXDbF8NtFMN2vH/s0+ZegriA5mj2vBprS6v29yQvwNnFMeyIywLUkdh1
VHZ2ZU2Fd85JodjP6QyROQ2NF3TGu4CBU3HgZCSPq7gKnYnemQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOxeE9l6lrQWFSqzZmPrQbQaZ0SoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83YjMy
ZjMwNS00Mzg5LTRjYzctYjE0Ni1jMTQ0YTI2YjNmNGMvMzMzZTQ2YzgtOGZmNC0z
OGI4LWFjZGMtMTA2NjJkMTE3ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2IzMmYzMDUtNDM4OS00Y2M3LWIx
NDYtYzE0NGEyNmIzZjRjLzdiMzJmMzA1LTQzODktNGNjNy1iMTQ2LWMxNDRhMjZi
M2Y0Yy5jcmwwHwYDVR0jBBgwFoAUfByfAEo89nMMzcH8XCOpJtFZ62YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83YjMyZjMwNS00Mzg5LTRjYzctYjE0Ni1jMTQ0
YTI2YjNmNGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaAADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYaB7X7v+VRrODgQCghsGMbQ6jODq1zYTwv7PCLPor9RPpTDRtBrLq
PxCUE+bDymcoIKVc9bG/TpO04q4CWSbGi5EEYi4xzcF/SVBVeQUqsE4+3zsF7b//
vw4xBR/JqwHllnQDELkyAqvGfvE1Y76xahQsz3lkShrzsFptncMkXUesCXkq33iw
bB8ldDmI5V0zvniu5cA11ri8mBOwKvLUEGs4hrwIzOFDV7hY23OqhNJLc7cjz/t5
Zko+OWk2Se96wp6iJ2DWhZ7WkrDzcR3CYb1fV6gW8Q0616+mbuzV15aNqr25eOrO
Mi9S35p9lhdXmpzf4Bzkdt1uSlx/QIH3
-----END CERTIFICATE-----
Generated at Sun Sep 13 11:43:22 2026 by rpki-client