Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/67390976-543e-35d6-9389-90fdf9426597.roa
File:                     67390976-543e-35d6-9389-90fdf9426597.roa (raw, json)
Hash identifier:          zthN1UmTwrWegcXcgSZiv9BLzeqU+gEgesXhGrO086c=
Subject key identifier:   6D:A3:DD:70:F1:4F:EA:1E:A0:C3:45:9D:3B:0C:32:7C:42:73:AB:88
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584B5DEDA418A8648F559C82C900
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/67390976-543e-35d6-9389-90fdf9426597.roa
Signing time:             Tue 30 Sep 2025 13:56:42 +0000
ROA not before:           Tue 30 Sep 2025 13:56:42 +0000
ROA not after:            Mon 29 Dec 2025 14:56:42 +0000
asID:                     33659
IP address blocks:        45.58.208.0/24 maxlen: 24
                          45.58.210.0/23 maxlen: 23
                          45.58.212.0/22 maxlen: 22
                          45.58.240.0/22 maxlen: 22
                          45.58.245.0/24 maxlen: 24
                          45.58.250.0/24 maxlen: 24
                          45.58.252.0/22 maxlen: 22
                          149.143.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:ed:a4:18:a8:64:8f:55:9c:82:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 30 13:56:42 2025 GMT
            Not After : Dec 29 14:56:42 2025 GMT
        Subject: CN=73160448-04a4-4b5b-89f4-971538441905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:29:97:12:09:c8:6a:1e:fd:64:d8:ca:c0:
                    75:77:e3:bb:1c:65:19:2f:0a:c4:d2:d5:27:73:8e:
                    09:64:9e:83:25:c6:38:50:84:53:eb:39:01:8a:66:
                    2b:09:f5:69:36:6a:0c:07:37:67:11:51:8c:64:68:
                    ee:da:1c:ea:44:67:46:78:9f:74:b0:bb:af:91:2e:
                    20:a6:b5:fb:e2:1a:e8:4a:71:5b:83:7e:59:3c:c0:
                    d2:2c:d5:a2:ae:17:b6:b0:fe:68:d3:69:9d:a9:1d:
                    18:c7:72:c6:64:d8:35:dd:18:22:f6:26:b3:c9:0e:
                    f4:e8:fa:3f:80:49:19:ee:09:65:4c:b7:88:c7:55:
                    cb:47:b3:d2:7a:59:13:96:e1:73:59:df:d9:14:ae:
                    e1:91:d0:66:cd:1b:37:bb:06:4e:7b:3a:ec:20:7e:
                    33:0c:22:51:65:a8:e2:29:67:f8:07:ee:d1:c0:06:
                    5a:3e:ab:3d:75:49:59:45:8d:10:d9:70:28:4c:ef:
                    16:cb:76:59:05:9f:be:07:b5:a9:1a:f4:0e:c9:78:
                    89:2b:c8:4a:f2:af:96:d3:55:5a:43:c4:b6:37:37:
                    55:e6:d2:ed:f2:c2:d6:03:c1:28:d2:1c:07:b7:a7:
                    66:96:43:cc:c8:ca:ee:dc:fd:8c:20:c2:0e:88:fd:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A3:DD:70:F1:4F:EA:1E:A0:C3:45:9D:3B:0C:32:7C:42:73:AB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/67390976-543e-35d6-9389-90fdf9426597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.208.0/24
                  45.58.210.0-45.58.215.255
                  45.58.240.0/22
                  45.58.245.0/24
                  45.58.250.0/24
                  45.58.252.0/22
                  149.143.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:f3:04:5b:73:18:6f:a5:2e:b3:bc:96:df:0e:92:0e:9a:
         0c:00:ea:22:f8:ad:3b:10:6f:28:39:d6:ce:f9:da:27:b6:48:
         71:84:bd:27:03:65:cc:f6:fa:06:b9:5a:66:a9:1f:31:3c:e4:
         f0:4a:63:a5:be:56:36:76:ba:8e:bb:2f:f7:aa:71:de:58:da:
         88:67:a1:8d:ca:1d:48:f7:fd:b3:11:ee:ec:62:5b:70:39:e4:
         fa:97:50:72:3a:68:49:4a:ff:28:44:69:73:52:84:28:e6:e8:
         53:e2:ac:b4:e8:e2:65:77:dd:97:1a:e1:8f:6e:16:69:e7:f9:
         51:22:e4:19:15:eb:67:61:70:a1:a4:13:8f:89:b0:76:87:5e:
         33:a4:cd:89:98:83:ba:f2:86:73:69:c5:2c:db:e1:ca:0f:e4:
         b0:ab:f1:10:15:54:46:64:01:3b:c9:03:03:63:4e:42:37:c9:
         94:26:9e:3c:cc:6a:02:31:a9:c6:4f:7c:33:14:7d:4d:15:6b:
         49:b2:5a:5e:fd:2e:32:6e:20:f5:00:9e:d6:9f:7b:fc:14:4b:
         58:75:e4:04:62:bf:35:7e:3d:f2:c0:cc:5d:d3:10:80:54:0e:
         d3:95:cd:13:49:56:d5:a1:70:d0:7a:32:c3:5a:29:91:70:5b:
         77:9f:78:84
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEtd7aQYqGSPVZyCyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MDkzMDEzNTY0MloXDTI1MTIyOTE0NTY0MlowLzEtMCsGA1UEAxMk
NzMxNjA0NDgtMDRhNC00YjViLTg5ZjQtOTcxNTM4NDQxOTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTsplxIJyGoe/WTYysB1d+O7HGUZLwrE0tUn
c44JZJ6DJcY4UIRT6zkBimYrCfVpNmoMBzdnEVGMZGju2hzqRGdGeJ90sLuvkS4g
prX74hroSnFbg35ZPMDSLNWirhe2sP5o02mdqR0Yx3LGZNg13Rgi9iazyQ706Po/
gEkZ7gllTLeIx1XLR7PSelkTluFzWd/ZFK7hkdBmzRs3uwZOezrsIH4zDCJRZaji
KWf4B+7RwAZaPqs9dUlZRY0Q2XAoTO8Wy3ZZBZ++B7WpGvQOyXiJK8hK8q+W01Va
Q8S2NzdV5tLt8sLWA8Eo0hwHt6dmlkPMyMru3P2MIMIOiP2tnwIDAQABo4IDgTCC
A30wHQYDVR0OBBYEFG2j3XDxT+oeoMNFnTsMMnxCc6uIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjczOTA5NzYtNTQzZS0z
NWQ2LTkzODktOTBmZGY5NDI2NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQALTrQMAwD
BAEtOtIDBAMtOtADBAItOvADBAAtOvUDBAAtOvoDBAItOvwDBAKVj7gwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEANrPzBFtzGG+lLrO8lt8Okg6aDADqIvitOxBvKDnWzvnaJ7ZIcYS9JwNlzPb6
BrlaZqkfMTzk8Epjpb5WNna6jrsv96px3ljaiGehjcodSPf9sxHu7GJbcDnk+pdQ
cjpoSUr/KERpc1KEKOboU+KstOjiZXfdlxrhj24Waef5USLkGRXrZ2FwoaQTj4mw
dodeM6TNiZiDuvKGc2nFLNvhyg/ksKvxEBVURmQBO8kDA2NOQjfJlCaePMxqAjGp
xk98MxR9TRVrSbJaXv0uMm4g9QCe1p97/BRLWHXkBGK/NX498sDMXdMQgFQO05XN
E0lW1aFw0Hoyw1opkXBbd594hA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 18:34:38 2025 by rpki-client