Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/35fc233f-f132-314a-838c-154acd2aea43.roa
File:                     35fc233f-f132-314a-838c-154acd2aea43.roa (raw, json)
Hash identifier:          RGal/Z+R5Q210bzFNwJkt6duFPCe1ESByAWRVKqh5JU=
Subject key identifier:   CE:32:B1:BF:BF:EA:2A:F1:70:2A:CC:7D:E1:50:DB:E6:DD:2D:FE:48
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584F4973AA8809D161D47A6A3060
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/35fc233f-f132-314a-838c-154acd2aea43.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6621
IP address blocks:        174.33.1.0/24 maxlen: 24
                          174.33.2.0/23 maxlen: 23
                          174.33.4.0/22 maxlen: 22
                          174.33.8.0/24 maxlen: 24
                          174.33.10.0/23 maxlen: 23
                          174.33.12.0/22 maxlen: 22
                          174.33.16.0/23 maxlen: 23
                          174.33.43.0/24 maxlen: 24
                          174.33.92.0/23 maxlen: 23
                          174.33.94.0/24 maxlen: 24
                          174.33.106.0/24 maxlen: 24
                          174.33.129.0/24 maxlen: 24
                          174.33.130.0/24 maxlen: 24
                          174.33.131.0/24 maxlen: 24
                          174.33.133.0/24 maxlen: 24
                          174.33.134.0/24 maxlen: 24
                          174.33.135.0/24 maxlen: 24
                          174.33.136.0/24 maxlen: 24
                          174.33.137.0/24 maxlen: 24
                          174.33.138.0/24 maxlen: 24
                          174.33.139.0/24 maxlen: 24
                          174.33.140.0/24 maxlen: 24
                          174.33.141.0/24 maxlen: 24
                          174.33.142.0/24 maxlen: 24
                          174.33.143.0/24 maxlen: 24
                          174.33.176.0/21 maxlen: 21
                          174.33.184.0/21 maxlen: 21
                          174.33.192.0/21 maxlen: 21
                          174.33.200.0/21 maxlen: 21
                          174.33.208.0/21 maxlen: 21
                          174.33.216.0/21 maxlen: 21
                          174.33.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:aa:88:09:d1:61:d4:7a:6a:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ddba3cdd-b14d-4507-b79f-be90c66bb12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:46:cb:97:c6:c1:d7:77:58:ea:17:9f:3c:4c:
                    ee:5c:31:85:6d:67:8b:83:a9:8e:2d:ba:da:3f:9e:
                    b2:6c:ad:62:cd:7b:60:5e:71:4e:c6:66:df:8d:63:
                    dd:33:8f:7c:54:1a:e8:d4:6b:17:75:5b:cc:9f:84:
                    dd:f8:d8:96:b7:d9:97:ff:92:2a:06:89:62:2e:0f:
                    9f:2d:10:be:32:34:a4:47:10:81:1f:e5:28:bf:db:
                    67:d1:00:4f:a1:28:d9:53:85:b9:a0:99:9b:57:65:
                    49:ec:6c:d5:19:a0:eb:43:37:43:8f:41:3e:c9:bc:
                    0d:98:f8:c4:e8:f9:d8:cd:3b:2d:b7:75:0b:9d:25:
                    d8:ec:58:d5:f3:68:a5:fa:49:8d:9b:2d:27:ae:66:
                    46:a2:52:53:bd:e2:e0:1c:c9:8f:74:16:be:b2:21:
                    70:5c:9d:bc:2a:f1:89:5f:f2:51:fd:e6:8c:77:6d:
                    68:b6:04:64:62:f7:c1:0d:f9:bd:54:ce:a6:64:4e:
                    28:95:7c:3f:3b:57:f7:8a:bb:0e:1c:37:92:4e:20:
                    36:8d:49:50:fe:17:2c:0f:85:0b:9e:f7:72:7b:3f:
                    1d:20:db:32:1e:cd:e4:b4:4e:dd:6f:bf:7c:ac:f6:
                    82:c2:b2:30:63:8f:21:ff:c1:47:b5:17:a8:9f:9d:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:32:B1:BF:BF:EA:2A:F1:70:2A:CC:7D:E1:50:DB:E6:DD:2D:FE:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/35fc233f-f132-314a-838c-154acd2aea43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.33.1.0-174.33.8.255
                  174.33.10.0-174.33.17.255
                  174.33.43.0/24
                  174.33.92.0-174.33.94.255
                  174.33.106.0/24
                  174.33.129.0-174.33.131.255
                  174.33.133.0-174.33.143.255
                  174.33.176.0-174.33.231.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4a:11:84:a8:b8:3f:64:47:e4:37:44:3a:5a:75:cf:01:ae:
         ed:ac:07:7f:5d:36:fe:55:1e:51:75:24:ba:b0:d3:a1:94:08:
         2d:65:a9:bf:73:3d:c0:b4:6a:ed:3b:57:30:c3:87:88:b3:96:
         ed:fe:1b:07:eb:83:3a:d9:d5:0a:c5:79:76:fd:ee:d6:f7:c4:
         50:ae:76:a0:c6:b5:3f:30:2d:85:93:43:0b:48:b8:38:b7:ef:
         e4:0d:bb:b7:49:56:04:8a:e4:a8:a3:5f:05:cd:42:a6:a7:c8:
         da:93:09:f3:2d:11:d9:16:77:e3:90:84:7c:c5:bf:19:b6:14:
         15:85:38:ed:40:0b:ed:ca:4f:7b:29:5c:0c:d0:25:3f:1a:a5:
         16:00:b8:81:67:0b:17:ef:6b:03:3c:8a:68:64:b0:4b:b4:07:
         5b:66:d1:7f:24:82:c4:68:56:bc:b2:31:87:f8:35:73:68:60:
         00:0d:3e:5e:99:29:1c:aa:80:00:27:3a:a5:c2:6d:c7:7f:e8:
         c4:67:95:9c:07:83:58:0f:b9:28:99:0d:65:8c:e7:6a:20:a7:
         1e:e6:b4:d3:b8:02:a9:1c:af:dd:ff:3f:a6:a2:d4:45:51:17:
         21:e0:7d:1a:52:49:93:92:48:5b:c5:60:c3:09:d3:12:e7:24:
         c9:e7:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:03:24 2026 by rpki-client