Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/35bc6692-7a84-32c8-8b2f-970c13320c0e.roa
File:                     35bc6692-7a84-32c8-8b2f-970c13320c0e.roa (raw, json)
Hash identifier:          Og4Ua8RJmLxAzUBKlsvHvPgHjt00fRT7PsGG/6rChq0=
Subject key identifier:   5A:21:B1:44:35:2F:F9:56:A0:CE:6F:E2:D3:61:C6:3C:3F:8F:54:8D
Certificate issuer:       /CN=611dbbed-256e-489b-8656-320fdaca032f
Certificate serial:       010D0C9F43285849DF5A67DA46874C56F25BD600
Authority key identifier: 34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/35bc6692-7a84-32c8-8b2f-970c13320c0e.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     11796
IP address blocks:        64.33.128.0/18 maxlen: 18
                          64.33.192.0/20 maxlen: 20
                          67.209.64.0/19 maxlen: 19
                          68.65.32.0/19 maxlen: 19
                          69.4.96.0/19 maxlen: 19
                          69.147.192.0/19 maxlen: 19
                          104.192.160.0/22 maxlen: 22
                          192.253.202.0/23 maxlen: 23
                          208.157.160.0/19 maxlen: 19
                          216.26.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:67:da:46:87:4c:56:f2:5b:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611dbbed-256e-489b-8656-320fdaca032f
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=0127451e-77f1-43f1-b5d8-2b94960271ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:e7:8c:8f:f5:83:c4:17:15:91:e8:f9:33:
                    2b:06:89:e6:8d:4b:f8:81:3a:c4:00:b2:ed:80:28:
                    2e:dc:7a:f9:08:57:65:f0:8d:9c:7d:91:3c:e5:da:
                    53:e0:01:44:48:ce:d4:e3:5f:73:2e:dc:8f:c6:2b:
                    48:73:71:e3:39:3f:a0:d5:7f:e0:17:59:e4:f2:da:
                    bd:91:22:0d:a2:36:d6:ca:4e:8c:dd:74:d9:06:81:
                    20:49:c3:80:34:41:e1:f1:62:73:64:0d:17:18:c8:
                    ac:fd:3a:e7:98:1a:72:85:b4:59:af:2d:ef:75:17:
                    b9:80:fa:75:76:84:25:7c:be:f0:2f:79:2d:bd:c4:
                    74:ef:05:30:14:15:a4:81:a3:c2:b5:d3:7e:72:30:
                    ec:99:eb:20:1a:54:8b:9e:4a:43:d8:0b:46:14:c8:
                    9d:3e:0b:40:ca:16:6a:16:47:26:1c:bb:44:a4:d6:
                    1b:0c:f3:58:18:11:06:1b:05:3b:08:00:21:cc:06:
                    9e:5e:b2:ec:30:b9:6b:2e:d1:95:41:a0:21:0a:48:
                    fb:df:fb:cd:72:a8:b7:3f:84:8f:e8:75:d2:fc:6f:
                    7b:dd:6d:92:f2:dc:86:5f:14:9c:58:98:6f:55:0c:
                    82:b2:f2:48:b2:5e:0a:42:d6:b1:60:00:5c:22:88:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:21:B1:44:35:2F:F9:56:A0:CE:6F:E2:D3:61:C6:3C:3F:8F:54:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/35bc6692-7a84-32c8-8b2f-970c13320c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl

            X509v3 Authority Key Identifier:
                keyid:34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.128.0-64.33.207.255
                  67.209.64.0/19
                  68.65.32.0/19
                  69.4.96.0/19
                  69.147.192.0/19
                  104.192.160.0/22
                  192.253.202.0/23
                  208.157.160.0/19
                  216.26.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e3:83:d7:79:e5:cb:c4:04:b4:d5:be:6f:cf:e1:5d:15:e3:
         10:b4:72:9c:b4:97:ce:a1:b1:ec:97:f6:3e:ff:18:9c:14:87:
         ba:06:d8:59:22:68:19:17:fd:6f:56:06:37:09:35:b8:73:3e:
         fb:d0:3e:f1:54:d1:33:d2:d2:fa:7f:82:7d:ac:a8:bc:51:ba:
         44:c0:46:2e:dd:6c:67:55:d2:69:e2:03:51:8a:08:f2:2b:f8:
         33:12:17:8c:67:5a:25:0b:cf:6e:5b:6e:c1:7d:1c:68:54:12:
         69:5b:1b:76:16:c4:44:bd:68:5c:cb:e1:de:97:d5:01:d1:03:
         6f:ec:11:44:00:5b:44:58:e9:b1:5b:66:98:81:99:e5:c1:1d:
         e4:f3:da:7f:a1:48:e3:e5:a8:09:78:ff:69:51:2d:4f:af:e5:
         ec:3d:ba:5f:6e:4e:3c:36:a2:77:85:14:8c:11:61:e6:e1:85:
         96:d5:9f:61:65:3c:75:f8:a1:2e:e2:70:60:99:81:15:06:7f:
         62:ab:9e:50:30:91:13:a2:37:ad:b0:ac:ad:b9:96:b5:27:28:
         97:a4:fe:b2:c8:8e:61:a6:1a:da:bd:a0:c4:10:0a:bf:fc:bd:
         9a:fd:d8:55:5b:fc:4c:fb:f9:91:e4:c5:6f:ee:d4:19:eb:3e:
         e3:57:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:35:41 2025 by rpki-client