Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/32588947-c079-30f2-89f2-26d817c8f9f3.roa
File:                     32588947-c079-30f2-89f2-26d817c8f9f3.roa (raw, json)
Hash identifier:          7bWfGFBgkKAWGrl7oBwymNWl0ZavJGuOF5QSZVinU60=
Subject key identifier:   D4:27:49:D2:AA:81:52:A6:EE:53:9A:DB:64:DF:4B:F2:E2:DD:99:7B
Certificate issuer:       /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Certificate serial:       010D0C9F4328584E253F1E31EF97FEA6656449C0
Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/32588947-c079-30f2-89f2-26d817c8f9f3.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     26337
IP address blocks:        209.17.112.0/22 maxlen: 24
                          209.17.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:1e:31:ef:97:fe:a6:65:64:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=6a55d48a-ac30-4ff0-9a03-cb54102478f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:b0:2e:86:c6:b0:d7:3f:88:c5:ca:f1:15:
                    48:4f:34:37:d8:cd:f5:71:af:6b:90:1c:6a:e4:73:
                    72:1c:e1:74:d0:44:fc:18:3f:40:fa:52:b0:2d:07:
                    9c:87:74:a2:35:6d:a6:da:af:28:6f:c2:e8:fe:24:
                    ca:7c:3a:a0:4d:7d:83:5b:f3:89:b0:37:56:7f:e7:
                    95:c5:61:ed:ed:2b:ec:ed:7d:05:4a:81:6e:54:31:
                    83:25:5b:0e:5f:c8:1f:fd:0b:72:61:d9:e1:76:cf:
                    90:69:73:31:ac:13:41:a3:19:34:f7:80:d4:bb:3e:
                    1b:98:0d:64:1f:8e:c8:dd:30:dd:da:dd:a1:fa:cc:
                    86:a3:2b:8e:1b:1a:6a:9b:7e:ee:45:91:e4:85:2c:
                    be:2a:b2:b0:05:fa:42:3b:f5:00:0e:86:e3:60:7e:
                    d5:f5:ea:4e:9b:58:2d:ff:75:7e:1e:20:3a:5b:f1:
                    b0:74:3a:7f:8b:78:e0:e9:30:14:a5:fe:ab:b1:9a:
                    87:b1:fb:a2:33:9c:3f:84:0d:c2:2e:53:21:70:4a:
                    37:00:e1:f7:58:11:b7:b8:32:72:95:61:a5:10:8f:
                    dc:1a:45:f4:65:5f:58:50:3b:aa:c7:cd:f3:23:76:
                    5e:12:1f:59:90:89:f7:49:d1:d0:e3:22:db:4a:b2:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:27:49:D2:AA:81:52:A6:EE:53:9A:DB:64:DF:4B:F2:E2:DD:99:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/32588947-c079-30f2-89f2-26d817c8f9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl

            X509v3 Authority Key Identifier:
                keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.112.0-209.17.117.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:85:d7:8d:f1:f4:a8:24:a3:72:ab:c7:1c:cb:96:9a:f2:79:
         44:a6:60:65:df:84:da:79:ed:83:f6:e0:4b:46:53:83:08:50:
         fd:da:9a:4f:20:46:5b:86:3f:6b:8f:16:92:91:84:40:37:de:
         08:50:00:eb:2d:58:b4:f0:ab:63:14:71:f7:93:4a:8b:ae:63:
         a5:d2:33:4a:56:82:0b:31:63:48:b1:9a:0a:af:fb:8a:c0:0d:
         70:7c:fc:d5:a2:a9:a4:60:c5:70:19:9f:47:f2:7d:f6:84:89:
         3b:d9:44:3a:e1:62:d3:3e:58:c0:6c:49:9e:ba:3c:6a:97:88:
         d5:28:fb:3e:b5:91:a5:1e:e4:9a:d6:64:82:9c:fe:24:2d:1d:
         e2:ec:58:27:b3:7d:9b:9d:0f:12:b8:cd:8f:b6:84:d0:9c:20:
         e0:df:37:a5:6b:e2:a7:ce:00:f7:a3:90:c9:ef:b4:f5:b8:ac:
         4e:37:9e:7e:49:f4:c4:f1:58:e6:61:bf:93:29:d1:1f:be:68:
         db:72:aa:3e:6f:bd:01:f8:41:3f:62:01:b2:2e:54:b9:c4:b9:
         09:12:9e:32:23:17:e8:23:bf:46:ba:de:f0:89:f3:46:21:91:
         02:60:c4:ce:5c:2d:7c:cb:2b:36:5a:9b:85:18:79:25:f9:cf:
         3d:45:72:8b
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE4lPx4x75f+pmVkScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzMyZDRjMWMtNjhmZC00NmJhLTk0NTAtODQ2OTdmYmU0
YmNiMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
NmE1NWQ0OGEtYWMzMC00ZmYwLTlhMDMtY2I1NDEwMjQ3OGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt2wLobGsNc/iMXK8RVITzQ32M31ca9rkBxq
5HNyHOF00ET8GD9A+lKwLQech3SiNW2m2q8ob8Lo/iTKfDqgTX2DW/OJsDdWf+eV
xWHt7Svs7X0FSoFuVDGDJVsOX8gf/QtyYdnhds+QaXMxrBNBoxk094DUuz4bmA1k
H47I3TDd2t2h+syGoyuOGxpqm37uRZHkhSy+KrKwBfpCO/UADobjYH7V9epOm1gt
/3V+HiA6W/GwdDp/i3jg6TAUpf6rsZqHsfuiM5w/hA3CLlMhcEo3AOH3WBG3uDJy
lWGlEI/cGkX0ZV9YUDuqx83zI3ZeEh9ZkIn3SdHQ4yLbSrLwmwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFNQnSdKqgVKm7lOa22TfS/Li3Zl7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJk
NGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2ZiZTRiY2IvMzI1ODg5NDctYzA3OS0z
MGYyLTg5ZjItMjZkODE3YzhmOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzMyZDRjMWMtNjhmZC00NmJhLTk0
NTAtODQ2OTdmYmU0YmNiLzMzMmQ0YzFjLTY4ZmQtNDZiYS05NDUwLTg0Njk3ZmJl
NGJjYi5jcmwwHwYDVR0jBBgwFoAUBNJQfOBV9FoaAnDShIJDzDB5ccYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5
N2ZiZTRiY2IuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATREXAD
BAHREXQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAV4XXjfH0qCSjcqvHHMuWmvJ5RKZgZd+E2nntg/bgS0ZT
gwhQ/dqaTyBGW4Y/a48WkpGEQDfeCFAA6y1YtPCrYxRx95NKi65jpdIzSlaCCzFj
SLGaCq/7isANcHz81aKppGDFcBmfR/J99oSJO9lEOuFi0z5YwGxJnro8apeI1Sj7
PrWRpR7kmtZkgpz+JC0d4uxYJ7N9m50PErjNj7aE0Jwg4N83pWvip84A96OQye+0
9bisTjeefkn0xPFY5mG/kynRH75o23KqPm+9AfhBP2IBsi5UucS5CRKeMiMX6CO/
Rrre8InzRiGRAmDEzlwtfMsrNlqbhRh5JfnPPUVyiw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:31:55 2026 by rpki-client