Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa
File:                     33cbc354-d185-3748-a67e-8b940dc311d1.roa (raw, json)
Hash identifier:          VWLgemTUa3fHlJ671PayuAipn6UQjQ0nPQ37Cq8xNzo=
Subject key identifier:   6B:10:D8:33:4D:38:73:85:C7:27:73:B5:10:04:EC:3A:FE:92:8C:4C
Certificate issuer:       /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
Certificate serial:       010D0C9F4328584F093CF176336F70A6BEE52800
Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     46832
IP address blocks:        2610:e0:a000::/36 maxlen: 36
                          2610:e0:a001::/48 maxlen: 48
                          2610:e0:a003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f1:76:33:6f:70:a6:be:e5:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=7f18935d-fb54-4573-a3c8-cebb8ca218c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:63:16:1e:27:54:a1:d8:53:12:6f:3e:dc:
                    6a:80:7e:63:b7:da:11:71:e5:d2:c8:3f:fb:b4:74:
                    e4:45:a3:4f:3b:87:11:a9:a3:2f:82:88:6c:4e:4d:
                    a2:ca:6e:37:8c:04:3b:27:d3:71:c0:4d:ac:fa:01:
                    a3:0f:b0:5f:78:db:d9:e6:56:1c:36:2b:f6:b9:38:
                    b7:78:d2:25:b7:78:e1:c7:ab:02:10:c3:d3:a3:5a:
                    e6:80:c7:47:20:ac:0d:f0:39:d1:d0:04:b2:60:be:
                    c4:ca:f0:13:3e:cc:1d:65:8e:db:53:60:57:c1:4b:
                    2e:ec:bd:ed:c9:13:13:94:c6:c6:16:94:1f:f6:0d:
                    e7:0c:dd:e5:26:21:4e:0b:fa:c0:1b:53:54:49:32:
                    a9:15:02:85:a0:6f:f6:c0:90:8c:03:85:45:8a:ea:
                    ad:a0:8a:c9:87:df:1f:b2:d5:85:d3:26:89:e8:53:
                    48:6b:00:a3:ee:4b:c5:ce:3b:cb:33:4c:22:29:f7:
                    30:98:9f:c2:05:b2:bc:fb:fd:68:86:3c:cb:1a:bb:
                    a9:67:07:c0:79:7b:2e:d4:24:93:93:2e:30:d1:26:
                    28:0c:f5:70:0b:bb:9b:1a:41:96:a6:42:12:77:96:
                    59:d6:ca:e0:0b:12:30:fc:39:33:80:59:76:04:5b:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:10:D8:33:4D:38:73:85:C7:27:73:B5:10:04:EC:3A:FE:92:8C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl

            X509v3 Authority Key Identifier:
                keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e0:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:17:6b:30:7c:cd:6e:42:1e:b0:f2:57:69:3d:15:5f:6f:77:
         44:10:a6:f1:e7:c8:65:e0:6c:27:b1:90:05:29:41:9a:5a:62:
         6d:0f:b9:59:d2:3c:82:6e:6c:9d:da:7b:b7:e7:dc:23:82:76:
         f5:11:2d:2c:05:41:9c:96:ef:98:73:93:52:1a:ac:63:0c:12:
         87:90:0a:a1:4b:4a:7f:1c:f2:a6:61:2d:39:4e:ee:5c:8f:a4:
         ea:5c:91:94:c2:af:40:52:84:7b:fd:54:1a:df:54:c9:3f:13:
         9a:82:5f:57:40:52:2c:9e:40:bd:20:dc:1e:17:0d:06:ab:8c:
         e5:ce:51:4e:c0:11:21:03:57:fb:2b:82:4d:2c:bb:97:a0:63:
         33:38:22:4a:02:57:dd:b8:08:b3:56:96:06:9f:c6:f0:5e:9e:
         fe:02:59:7a:df:18:22:3e:8a:83:c7:02:c6:4f:5e:ad:71:a0:
         5e:92:26:74:3d:00:ca:b9:69:6c:3c:ed:41:37:6b:1e:53:0e:
         87:37:44:20:4f:13:54:26:ce:e9:64:17:69:45:51:65:d1:3a:
         65:d5:38:0e:ab:30:8b:55:2b:54:89:7f:2b:f4:9c:22:b6:94:
         25:5d:91:e6:07:a5:2a:70:d3:a0:e9:17:ba:62:7b:1e:e1:07:
         07:76:cd:08
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPPF2M29wpr7lKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj
N2JlMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
N2YxODkzNWQtZmI1NC00NTczLWEzYzgtY2ViYjhjYTIxOGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPFjFh4nVKHYUxJvPtxqgH5jt9oRceXSyD/7
tHTkRaNPO4cRqaMvgohsTk2iym43jAQ7J9NxwE2s+gGjD7BfeNvZ5lYcNiv2uTi3
eNIlt3jhx6sCEMPTo1rmgMdHIKwN8DnR0ASyYL7EyvATPswdZY7bU2BXwUsu7L3t
yRMTlMbGFpQf9g3nDN3lJiFOC/rAG1NUSTKpFQKFoG/2wJCMA4VFiuqtoIrJh98f
stWF0yaJ6FNIawCj7kvFzjvLM0wiKfcwmJ/CBbK8+/1ohjzLGrupZwfAeXsu1CST
ky4w0SYoDPVwC7ubGkGWpkISd5ZZ1srgCxIw/DkzgFl2BFsRRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGsQ2DNNOHOFxydztRAE7Dr+koxMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4
Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvMzNjYmMzNTQtZDE4NS0z
NzQ4LWE2N2UtOGI5NDBkYzMxMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm
MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1
YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3
OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJhAA4KAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIBdrMHzNbkIesPJXaT0VX293RBCm8efIZeBsJ7GQBSlBmlpibQ+5
WdI8gm5sndp7t+fcI4J29REtLAVBnJbvmHOTUhqsYwwSh5AKoUtKfxzypmEtOU7u
XI+k6lyRlMKvQFKEe/1UGt9UyT8TmoJfV0BSLJ5AvSDcHhcNBquM5c5RTsARIQNX
+yuCTSy7l6BjMzgiSgJX3bgIs1aWBp/G8F6e/gJZet8YIj6Kg8cCxk9erXGgXpIm
dD0AyrlpbDztQTdrHlMOhzdEIE8TVCbO6WQXaUVRZdE6ZdU4Dqswi1UrVIl/K/Sc
IraUJV2R5gelKnDToOkXumJ7HuEHB3bNCA==
-----END CERTIFICATE-----
Generated at Sun Sep 13 12:06:42 2026 by rpki-client