Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa
File:                     3a3e578e-9cda-3397-800c-e3cbde377721.roa (raw, json)
Hash identifier:          QJSKLKwwcE0XVfDZf6+UTNDBNHEbxRMRumpfkYKHcqk=
Subject key identifier:   41:5C:05:BF:77:DF:14:4E:A0:48:F3:A5:37:F4:A8:8B:E2:E2:EB:C0
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584F42781DB76A36EC2F8D298300
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2607:dd40:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:1d:b7:6a:36:ec:2f:8d:29:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=39b1e926-59ec-4bb5-bd34-8581b3740d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bd:6f:91:b3:72:de:8d:4c:c4:4c:73:96:bd:
                    4e:5a:0f:26:bb:24:d5:b4:dc:4e:8d:73:99:b4:a3:
                    58:5f:c4:f4:72:b5:87:7b:c1:27:f2:0a:c3:cc:36:
                    d4:c1:7e:68:ca:06:63:5c:01:08:79:29:b6:be:34:
                    0e:58:aa:bb:9d:c0:1b:fa:fb:c9:aa:86:44:b7:35:
                    d7:cd:f0:30:1c:c2:1e:72:c5:8f:e1:00:19:6f:cc:
                    cc:16:f2:d1:71:12:f4:a5:2e:3d:71:74:b2:e9:bc:
                    12:67:5c:1f:f5:18:fd:02:da:37:ff:93:3b:2c:d9:
                    37:f9:3b:4e:ee:aa:fc:38:2b:0d:7b:44:bc:7c:e9:
                    10:cd:60:6d:7f:e1:51:5a:d1:ee:02:a0:2c:e6:2d:
                    29:d0:57:4d:38:97:f7:28:87:28:24:04:dd:58:b8:
                    b6:c7:fb:4e:17:8e:84:fc:9b:38:b1:e4:fc:63:13:
                    ef:4b:a8:da:b4:4c:03:44:38:1c:99:25:98:7a:fe:
                    50:08:20:09:ee:fd:93:0b:41:7a:ba:18:f7:23:ff:
                    76:76:01:5d:8e:dd:65:76:58:7f:de:4f:b9:43:8d:
                    ed:5c:13:aa:ab:d5:85:3a:26:be:ed:0c:62:29:4d:
                    7f:2a:d7:c0:f9:ed:f1:b5:b0:a7:81:3e:c9:9d:62:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5C:05:BF:77:DF:14:4E:A0:48:F3:A5:37:F4:A8:8B:E2:E2:EB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dd40:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ac:f1:27:6a:be:22:9f:00:ed:57:fb:c9:bf:77:53:7c:4b:
         69:51:d4:22:4e:53:78:c4:b9:08:e2:16:57:1b:16:64:4a:d6:
         ac:74:1b:1a:03:28:68:eb:b0:93:e2:b9:37:e2:2d:55:cd:c4:
         0a:a2:67:7a:2a:a7:49:d2:61:9a:3c:fb:56:4c:84:8e:43:25:
         2b:4e:17:7c:e3:50:a0:e9:ee:5a:16:3e:a4:75:f4:e8:18:e8:
         6f:96:42:df:fa:38:08:ab:ed:d2:80:76:5e:c7:ec:51:91:d4:
         93:8d:0f:b1:2a:ed:95:8d:00:d6:ec:7f:34:f4:9a:b6:75:af:
         c3:3e:96:1b:4f:18:52:09:f8:22:09:34:4c:2b:5c:63:71:18:
         4f:2c:f4:57:7e:6c:c2:6e:0b:ed:e3:36:df:f0:dd:42:c6:df:
         04:a1:6c:c0:be:03:61:aa:cb:0e:0c:38:75:f7:f4:ef:74:8f:
         0f:9c:42:67:c8:50:34:00:86:93:43:93:09:0e:92:f6:b8:19:
         13:31:fa:47:da:73:0d:57:86:e9:f9:7d:47:01:f5:6e:8a:90:
         9b:41:93:a5:fd:94:d1:b2:43:ec:85:3d:3b:5e:83:e1:84:d0:
         ae:63:18:7b:db:36:0e:79:a9:f0:07:59:09:ce:fa:8b:f4:ca:
         2f:75:06:2b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9CeB23ajbsL40pgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi
YzczMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk
MzliMWU5MjYtNTllYy00YmI1LWJkMzQtODU4MWIzNzQwZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL1vkbNy3o1MxExzlr1OWg8muyTVtNxOjXOZ
tKNYX8T0crWHe8En8grDzDbUwX5oygZjXAEIeSm2vjQOWKq7ncAb+vvJqoZEtzXX
zfAwHMIecsWP4QAZb8zMFvLRcRL0pS49cXSy6bwSZ1wf9Rj9Ato3/5M7LNk3+TtO
7qr8OCsNe0S8fOkQzWBtf+FRWtHuAqAs5i0p0FdNOJf3KIcoJATdWLi2x/tOF46E
/Js4seT8YxPvS6jatEwDRDgcmSWYev5QCCAJ7v2TC0F6uhj3I/92dgFdjt1ldlh/
3k+5Q43tXBOqq9WFOia+7QxiKU1/KtfA+e3xtbCngT7JnWIxawIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEFcBb933xROoEjzpTf0qIvi4uvAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz
YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvM2EzZTU3OGUtOWNkYS0z
Mzk3LTgwMGMtZTNjYmRlMzc3NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl
ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj
YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1
MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmKzxJ2q+Ip8A7Vf7yb93U3xLaVHUIk5TeMS5COIWVxsWZErWrHQb
GgMoaOuwk+K5N+ItVc3ECqJneiqnSdJhmjz7VkyEjkMlK04XfONQoOnuWhY+pHX0
6Bjob5ZC3/o4CKvt0oB2XsfsUZHUk40PsSrtlY0A1ux/NPSatnWvwz6WG08YUgn4
Igk0TCtcY3EYTyz0V35swm4L7eM23/DdQsbfBKFswL4DYarLDgw4dff073SPD5xC
Z8hQNACGk0OTCQ6S9rgZEzH6R9pzDVeG6fl9RwH1boqQm0GTpf2U0bJD7IU9O16D
4YTQrmMYe9s2Dnmp8AdZCc76i/TKL3UGKw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:44:59 2026 by rpki-client