Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa
File:                     33cbc354-d185-3748-a67e-8b940dc311d1.roa (raw, json)
Hash identifier:          v5AzRhKE+66gbj7LEzGsBopuidCuXXeaFIvQeMfsINs=
Subject key identifier:   59:28:C2:14:DB:EF:2A:21:CA:02:75:6F:BE:6D:4D:EC:5C:9B:08:7D
Certificate issuer:       /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
Certificate serial:       010D0C9F4328584CA5F7180EF3F8EC80C0AA01F0
Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     46832
IP address blocks:        2610:e0:a000::/36 maxlen: 36
                          2610:e0:a001::/48 maxlen: 48
                          2610:e0:a003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:18:0e:f3:f8:ec:80:c0:aa:01:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=945b35bc-71a9-4a59-ad0b-67dfc5dcc395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:e2:11:be:01:98:c6:b2:15:37:55:86:6e:
                    46:8c:6b:00:82:24:33:fe:0b:f5:7d:1b:55:f8:cc:
                    ff:23:42:3e:59:ab:93:69:2b:ba:c0:b5:03:cd:05:
                    e4:04:e3:b8:22:10:9e:59:96:50:98:78:53:e7:f2:
                    d9:fa:90:b7:7e:cf:30:51:02:a5:9e:ac:d3:c6:bd:
                    14:5c:c1:d4:ca:8f:5b:a2:34:72:0b:4d:4e:00:6a:
                    07:57:2c:fa:11:f9:c2:a4:c7:ae:ad:5c:8c:aa:38:
                    7b:f9:26:07:15:c4:42:2d:d1:b4:a4:43:99:86:5e:
                    92:61:1f:0d:d3:4e:4a:39:87:23:98:12:b0:3f:ff:
                    3b:ef:fe:97:0d:ea:ba:71:37:eb:1a:50:6c:e8:75:
                    98:9d:71:f9:2a:9d:e6:ea:f1:eb:d9:7b:8a:95:ae:
                    d9:fc:a1:9c:f9:7f:22:6f:1b:e9:5b:e6:df:86:c5:
                    ab:46:13:51:3b:33:43:d0:c4:70:a2:e0:d7:d5:00:
                    67:7a:4b:23:0a:e7:81:6b:00:4b:21:12:ca:f3:15:
                    ca:09:79:3b:8c:41:f1:9a:6b:1f:af:28:ab:5c:81:
                    0f:21:09:6d:f4:24:c8:28:ef:1b:bb:0e:06:50:1b:
                    24:19:d1:99:50:22:3e:36:9e:4a:b4:95:8b:22:fa:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:28:C2:14:DB:EF:2A:21:CA:02:75:6F:BE:6D:4D:EC:5C:9B:08:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/33cbc354-d185-3748-a67e-8b940dc311d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl

            X509v3 Authority Key Identifier:
                keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e0:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:d0:64:84:33:ca:66:98:22:71:c3:dc:ee:f7:b8:28:72:
         29:c4:43:31:08:6f:6f:ae:fa:a9:39:48:78:a7:8c:e9:8c:98:
         aa:97:99:9a:57:e6:e9:76:22:61:3f:cf:ee:47:31:4a:cf:d1:
         b5:60:80:61:07:74:8c:29:0d:82:09:15:57:36:f8:53:55:e8:
         7b:ff:34:3e:27:90:ec:ef:e6:d7:b9:ae:c5:e6:de:50:04:af:
         a7:73:70:cd:f0:67:f8:02:bc:c9:fb:1f:67:05:f3:f0:76:82:
         d8:5f:91:2d:c0:1e:ed:d5:93:15:c6:fc:d7:41:bb:ae:e9:7c:
         19:c6:77:c2:72:fc:39:ed:02:09:43:1b:bb:ac:92:4a:24:75:
         4b:b4:40:96:35:81:48:99:9e:35:85:74:56:df:53:b3:e0:e2:
         3c:a7:45:06:b8:b2:4a:9f:ce:ac:67:d2:6e:fa:1e:04:d0:d0:
         96:ba:67:f5:37:91:68:b0:29:c1:54:bf:ac:b6:d8:c1:60:e0:
         96:63:be:99:48:1b:17:60:e3:ef:ca:2e:cd:8e:46:0c:f1:40:
         30:8f:1f:2a:15:ab:04:44:ca:4c:15:47:7e:fe:2f:c5:a4:3e:
         8d:4e:9e:e6:0e:94:69:1a:d1:b1:4f:ac:7f:24:7c:24:9c:9a:
         02:93:66:35
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyl9xgO8/jsgMCqAfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj
N2JlMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk
OTQ1YjM1YmMtNzFhOS00YTU5LWFkMGItNjdkZmM1ZGNjMzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVDiEb4BmMayFTdVhm5GjGsAgiQz/gv1fRtV
+Mz/I0I+WauTaSu6wLUDzQXkBOO4IhCeWZZQmHhT5/LZ+pC3fs8wUQKlnqzTxr0U
XMHUyo9bojRyC01OAGoHVyz6EfnCpMeurVyMqjh7+SYHFcRCLdG0pEOZhl6SYR8N
005KOYcjmBKwP/877/6XDeq6cTfrGlBs6HWYnXH5Kp3m6vHr2XuKla7Z/KGc+X8i
bxvpW+bfhsWrRhNROzND0MRwouDX1QBneksjCueBawBLIRLK8xXKCXk7jEHxmmsf
ryirXIEPIQlt9CTIKO8buw4GUBskGdGZUCI+Np5KtJWLIvoQgwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFkowhTb7yohygJ1b75tTexcmwh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4
Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvMzNjYmMzNTQtZDE4NS0z
NzQ4LWE2N2UtOGI5NDBkYzMxMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm
MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1
YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3
OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJhAA4KAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHMTQZIQzymaYInHD3O73uChyKcRDMQhvb676qTlIeKeM6YyYqpeZ
mlfm6XYiYT/P7kcxSs/RtWCAYQd0jCkNggkVVzb4U1Xoe/80PieQ7O/m17muxebe
UASvp3NwzfBn+AK8yfsfZwXz8HaC2F+RLcAe7dWTFcb810G7rul8GcZ3wnL8Oe0C
CUMbu6ySSiR1S7RAljWBSJmeNYV0Vt9Ts+DiPKdFBriySp/OrGfSbvoeBNDQlrpn
9TeRaLApwVS/rLbYwWDglmO+mUgbF2Dj78ouzY5GDPFAMI8fKhWrBETKTBVHfv4v
xaQ+jU6e5g6UaRrRsU+sfyR8JJyaApNmNQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:22 2026 by rpki-client