Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa
File:                     d5978de5-de11-363c-8105-0036b6008ff2.roa (raw, json)
Hash identifier:          cZ75Jt2mvjEt9ty/g8phJPErc9P+cyiPVw+nIp2pPDA=
Subject key identifier:   21:1D:55:7A:02:4C:53:3D:63:54:27:3B:C4:DD:8A:EF:F4:A2:6E:48
Certificate issuer:       /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial:       010D0C9F432858499C59E163485B032FE05CBD80
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     11878
IP address blocks:        68.235.32.0/24 maxlen: 32
                          68.235.33.0/24 maxlen: 32
                          68.235.34.0/24 maxlen: 32
                          68.235.35.0/24 maxlen: 32
                          68.235.36.0/24 maxlen: 32
                          68.235.37.0/24 maxlen: 32
                          68.235.38.0/24 maxlen: 32
                          68.235.39.0/24 maxlen: 32
                          68.235.40.0/24 maxlen: 32
                          68.235.41.0/24 maxlen: 32
                          68.235.42.0/24 maxlen: 32
                          68.235.43.0/24 maxlen: 32
                          68.235.44.0/24 maxlen: 32
                          68.235.45.0/24 maxlen: 32
                          68.235.46.0/24 maxlen: 32
                          68.235.47.0/24 maxlen: 32
                          68.235.48.0/24 maxlen: 32
                          68.235.49.0/24 maxlen: 32
                          68.235.50.0/24 maxlen: 32
                          68.235.51.0/24 maxlen: 32
                          68.235.52.0/24 maxlen: 32
                          68.235.53.0/24 maxlen: 32
                          68.235.54.0/24 maxlen: 32
                          68.235.55.0/24 maxlen: 32
                          68.235.56.0/24 maxlen: 32
                          68.235.57.0/24 maxlen: 32
                          68.235.58.0/24 maxlen: 32
                          68.235.59.0/24 maxlen: 32
                          68.235.60.0/24 maxlen: 32
                          68.235.61.0/24 maxlen: 32
                          68.235.62.0/24 maxlen: 32
                          68.235.63.0/24 maxlen: 32
                          208.77.16.0/24 maxlen: 32
                          208.77.17.0/24 maxlen: 32
                          208.77.18.0/24 maxlen: 32
                          208.77.19.0/24 maxlen: 32
                          208.77.20.0/24 maxlen: 32
                          208.77.21.0/24 maxlen: 32
                          208.77.22.0/24 maxlen: 32
                          208.77.23.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e1:63:48:5b:03:2f:e0:5c:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=bcabbc63-f619-42ac-9dc5-92dfa875204a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:6b:f2:df:d2:e2:eb:49:1b:ff:dd:38:c6:
                    2b:5a:d4:f5:7b:f7:20:cf:ea:83:22:5d:b0:03:50:
                    79:5c:eb:3a:07:3b:b6:34:c9:54:93:72:82:7b:6b:
                    e6:93:85:dc:bb:83:27:25:56:29:b5:90:8f:b8:e5:
                    aa:8f:b6:6b:a7:53:ea:93:76:36:69:c9:9e:af:5f:
                    45:a7:b8:f2:5a:ac:8e:78:83:42:ed:50:f4:00:b7:
                    43:fb:60:33:a5:a3:bc:a9:8b:99:3a:5a:c8:eb:9c:
                    6c:66:79:fb:cb:f3:62:45:b2:09:fe:2a:69:b3:b6:
                    ba:29:9a:85:d3:38:df:82:0a:49:70:a6:d7:82:2c:
                    69:11:90:52:9c:8d:34:08:8a:ce:8a:7d:71:2b:a1:
                    3e:82:34:5a:28:41:de:83:43:49:01:58:1e:ae:be:
                    39:19:e6:73:53:35:6f:38:31:48:5b:24:6f:3e:87:
                    48:ad:62:5e:4d:10:bb:10:46:78:c5:86:50:3c:03:
                    aa:50:27:35:e3:cd:60:60:c6:29:af:21:4a:21:32:
                    ff:d9:bd:db:15:55:38:22:a5:3d:77:95:52:db:38:
                    ad:82:21:3a:85:31:56:b0:a3:92:18:2c:ea:87:07:
                    15:86:ea:39:bf:7f:c9:b1:0f:70:23:1e:98:08:8e:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:55:7A:02:4C:53:3D:63:54:27:3B:C4:DD:8A:EF:F4:A2:6E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl

            X509v3 Authority Key Identifier:
                keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.32.0/19
                  208.77.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3c:d0:0f:38:32:14:41:f5:e4:68:7d:d6:4e:b0:63:79:8d:
         47:c5:a9:13:94:5e:96:4b:f2:75:a7:e1:1a:2d:6b:9f:47:e9:
         80:c5:d2:a1:55:68:a7:2c:58:a4:cd:2c:cc:65:17:e1:aa:c1:
         19:08:be:f1:73:56:37:5c:29:2c:ef:62:4a:b8:ee:28:fe:cb:
         bd:7e:28:44:99:20:0e:db:e6:0e:97:df:b4:82:e1:f1:59:5f:
         ea:f6:77:04:65:46:9e:e8:66:0d:3b:1e:65:c1:ae:a9:38:50:
         27:5f:83:16:54:8e:95:85:37:f3:17:0a:3c:92:82:2b:76:53:
         c5:cb:4d:78:80:38:e5:4b:d9:a5:56:95:03:95:7d:f1:59:1b:
         8a:e9:f6:07:95:52:fa:08:0e:47:e2:e5:0d:b9:5f:cc:eb:83:
         59:7a:87:28:67:09:7c:88:18:d4:ff:25:b1:28:d8:67:34:27:
         51:fd:e2:37:dc:5e:96:65:d1:d5:c0:9e:9b:14:2e:3d:e3:15:
         0c:38:35:dc:09:10:69:be:55:77:d2:6a:4e:98:82:ee:0b:6b:
         7e:5f:7e:41:44:26:cb:96:1f:b7:5f:bc:d4:7d:38:a3:5a:b4:
         5f:e3:26:04:40:e1:ff:07:fc:e8:15:3e:c5:21:1e:4d:45:a2:
         a9:58:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:44:43 2025 by rpki-client