Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/35fc233f-f132-314a-838c-154acd2aea43.roa
File:                     35fc233f-f132-314a-838c-154acd2aea43.roa (raw, json)
Hash identifier:          84t/LbE44mLq1vmjzH8YnGiFQO4AhP9RTw0cupSrkhw=
Subject key identifier:   A3:19:55:B4:94:6A:AE:9F:94:27:56:0E:C3:95:1C:2E:E0:6E:2F:DB
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F432858489340A337A69422A68F469080
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/35fc233f-f132-314a-838c-154acd2aea43.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     6621
IP address blocks:        174.33.1.0/24 maxlen: 24
                          174.33.2.0/23 maxlen: 23
                          174.33.4.0/22 maxlen: 22
                          174.33.8.0/24 maxlen: 24
                          174.33.10.0/23 maxlen: 23
                          174.33.12.0/22 maxlen: 22
                          174.33.16.0/23 maxlen: 23
                          174.33.43.0/24 maxlen: 24
                          174.33.92.0/23 maxlen: 23
                          174.33.94.0/24 maxlen: 24
                          174.33.106.0/24 maxlen: 24
                          174.33.129.0/24 maxlen: 24
                          174.33.130.0/24 maxlen: 24
                          174.33.131.0/24 maxlen: 24
                          174.33.133.0/24 maxlen: 24
                          174.33.134.0/24 maxlen: 24
                          174.33.135.0/24 maxlen: 24
                          174.33.136.0/24 maxlen: 24
                          174.33.137.0/24 maxlen: 24
                          174.33.138.0/24 maxlen: 24
                          174.33.139.0/24 maxlen: 24
                          174.33.140.0/24 maxlen: 24
                          174.33.141.0/24 maxlen: 24
                          174.33.142.0/24 maxlen: 24
                          174.33.143.0/24 maxlen: 24
                          174.33.176.0/21 maxlen: 21
                          174.33.184.0/21 maxlen: 21
                          174.33.192.0/21 maxlen: 21
                          174.33.200.0/21 maxlen: 21
                          174.33.208.0/21 maxlen: 21
                          174.33.216.0/21 maxlen: 21
                          174.33.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a3:37:a6:94:22:a6:8f:46:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=5778a7b4-afe9-401e-ace3-078de59ed269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:63:12:be:73:26:8a:8e:d3:d5:aa:29:31:
                    5c:78:65:9e:fe:c1:e4:9b:1d:3f:68:a0:52:a2:d4:
                    81:5d:49:d8:79:81:c6:e4:a3:1d:dd:8c:f2:a5:a5:
                    86:c7:1b:ff:2d:3a:0b:aa:c1:e5:9f:9f:e6:90:a6:
                    1a:48:5d:d7:4a:81:3f:cd:34:d4:84:ec:2e:69:e8:
                    4b:61:31:a0:11:9b:10:c4:ff:60:2e:45:bd:37:53:
                    ac:c3:90:cd:16:de:18:c0:98:69:3c:ba:0d:ed:ff:
                    51:0a:b7:24:2e:51:2a:4a:5f:a3:e6:d4:89:ee:ae:
                    d1:d3:be:c8:e5:c1:07:b3:9a:d7:ca:af:6f:2e:29:
                    af:ad:d1:e8:46:a0:62:65:bb:91:c2:8f:dc:7b:04:
                    43:3d:f3:6a:04:52:49:dc:eb:9f:45:fa:f1:51:17:
                    65:69:4c:0a:ba:9a:5c:98:32:06:d5:06:d3:08:9f:
                    01:1c:82:b1:54:8d:73:db:de:0d:47:78:bd:2b:66:
                    22:27:b8:6f:e3:ce:5f:0c:8c:62:5d:01:67:bd:2c:
                    6f:e8:3c:23:ab:c5:3d:56:4e:cc:66:ed:e1:6b:7d:
                    8b:c0:b0:fe:74:36:16:13:17:7b:0c:a3:52:44:1b:
                    e7:db:9b:a8:50:c0:8b:42:04:bb:f7:3d:01:b6:78:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:19:55:B4:94:6A:AE:9F:94:27:56:0E:C3:95:1C:2E:E0:6E:2F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/35fc233f-f132-314a-838c-154acd2aea43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.33.1.0-174.33.8.255
                  174.33.10.0-174.33.17.255
                  174.33.43.0/24
                  174.33.92.0-174.33.94.255
                  174.33.106.0/24
                  174.33.129.0-174.33.131.255
                  174.33.133.0-174.33.143.255
                  174.33.176.0-174.33.231.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:7a:6f:22:71:f8:0f:69:4d:52:c0:10:df:94:d1:ae:d7:
         e6:3d:80:bb:73:6a:f4:1a:64:ca:d8:ac:fa:74:95:3f:95:a4:
         36:67:b7:4e:1d:a0:19:eb:b8:61:55:b6:5b:8b:c0:35:d3:10:
         c7:6f:19:22:71:11:49:ae:6e:46:79:c7:26:43:ce:b7:7a:3e:
         74:35:5a:6e:df:4f:5a:4c:d9:aa:41:c0:5b:b0:49:54:c6:7e:
         e7:26:56:ca:ae:a0:dc:cb:0e:e6:14:26:8b:66:0d:01:11:9d:
         33:4b:13:ec:cb:8c:9a:d6:96:31:cd:f9:68:17:51:35:6d:19:
         50:ba:9f:25:55:19:25:5e:7a:f6:9e:c0:31:79:7b:4d:9f:fb:
         35:4e:62:f0:66:b8:66:eb:f8:be:28:7d:52:08:34:f6:0d:49:
         a4:cd:38:3d:6b:cf:fe:b5:e4:4f:5a:58:48:01:63:bc:8b:e7:
         a7:1a:5f:8c:52:ec:77:cf:5f:1e:a7:0a:b6:2f:72:4c:7f:da:
         02:b1:ad:72:fb:1d:b8:55:95:95:40:f7:47:de:ad:46:b8:22:
         9c:66:83:11:1b:76:f3:3f:57:2b:49:1c:08:44:9a:57:51:c2:
         0f:02:41:04:20:07:7d:b3:4e:8e:8c:07:31:0a:97:c4:44:01:
         25:e7:88:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:47 2025 by rpki-client