Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/35bc6692-7a84-32c8-8b2f-970c13320c0e.roa
File:                     35bc6692-7a84-32c8-8b2f-970c13320c0e.roa (raw, json)
Hash identifier:          qIw6pan1pZBRmjvHcxXDgWK/bx1hQ3UsuahSQLVyKKM=
Subject key identifier:   0B:4A:C0:4B:03:5B:08:38:E8:10:2C:48:AD:C2:C7:5F:53:A3:62:BA
Certificate issuer:       /CN=611dbbed-256e-489b-8656-320fdaca032f
Certificate serial:       010D0C9F4328584AC016341180C35C8703513480
Authority key identifier: 34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/35bc6692-7a84-32c8-8b2f-970c13320c0e.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     11796
IP address blocks:        64.33.128.0/18 maxlen: 18
                          64.33.192.0/20 maxlen: 20
                          67.209.64.0/19 maxlen: 19
                          68.65.32.0/19 maxlen: 19
                          69.4.96.0/19 maxlen: 19
                          69.147.192.0/19 maxlen: 19
                          104.192.160.0/22 maxlen: 22
                          192.253.202.0/23 maxlen: 23
                          208.157.160.0/19 maxlen: 19
                          216.26.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:34:11:80:c3:5c:87:03:51:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611dbbed-256e-489b-8656-320fdaca032f
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=e2f16c94-0f4d-47ac-a430-73b216a9ca08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:86:cb:89:94:f7:c8:7d:6e:10:33:e6:0d:
                    b8:2f:80:25:bf:21:f9:f0:33:93:0f:47:3c:21:be:
                    3b:f5:b9:2a:d3:ed:61:48:7d:9f:04:b6:a1:aa:6d:
                    7b:58:b8:b5:a1:59:b9:8a:e1:bd:8e:00:96:d5:79:
                    d9:ac:2c:3f:f7:9b:c2:09:3d:19:dd:50:5a:92:f9:
                    9a:4a:22:3d:6b:ad:85:8a:7d:47:74:a1:a0:00:50:
                    4c:2d:e4:58:59:2f:b5:90:2a:e2:de:ea:95:2b:f0:
                    34:67:0e:78:3a:d0:88:2a:f2:c2:6a:f7:7c:46:5a:
                    a7:7c:7b:a6:bc:95:22:29:df:56:27:72:30:5d:4a:
                    28:8c:41:98:63:07:c7:f7:e1:19:34:b4:63:94:1d:
                    71:d2:3d:ff:e7:1b:8a:15:48:95:c9:67:8d:94:8b:
                    99:98:e8:dd:de:54:f4:05:a0:66:8f:c6:b7:3f:73:
                    08:04:cc:84:30:61:ce:da:26:b9:77:ac:8f:f1:05:
                    50:38:39:e7:20:d8:12:d5:a2:76:d4:db:25:3f:50:
                    89:72:34:e3:82:fa:e6:99:ac:45:c9:20:8b:be:0d:
                    72:56:f4:77:8c:96:b7:d4:43:92:19:be:c3:0c:46:
                    64:81:33:79:f8:c1:9e:7b:db:f5:f9:ef:af:7f:90:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:C0:4B:03:5B:08:38:E8:10:2C:48:AD:C2:C7:5F:53:A3:62:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/35bc6692-7a84-32c8-8b2f-970c13320c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl

            X509v3 Authority Key Identifier:
                keyid:34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.128.0-64.33.207.255
                  67.209.64.0/19
                  68.65.32.0/19
                  69.4.96.0/19
                  69.147.192.0/19
                  104.192.160.0/22
                  192.253.202.0/23
                  208.157.160.0/19
                  216.26.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:34:39:28:85:7e:bd:d2:6f:25:6f:8f:1e:37:c6:d8:24:c8:
         c8:18:7d:da:6f:10:83:61:90:c9:a4:15:59:72:fd:2f:9a:d4:
         c1:45:12:2c:70:a5:bf:41:cb:40:9b:70:4a:86:db:b9:2c:f9:
         1a:86:2a:1e:e5:8a:00:45:10:95:d3:e9:e1:0e:f0:b2:4b:ab:
         3b:32:2c:7b:f5:40:cc:df:fb:03:ef:4a:db:01:17:ec:50:b6:
         38:31:07:d4:86:d9:97:dc:bb:c0:08:11:73:e2:60:c9:69:6b:
         03:fc:2a:60:ed:9c:8b:63:13:d5:45:82:1b:e6:a3:22:a5:ff:
         b4:ec:41:4e:7e:33:5d:d2:99:6b:ae:0f:86:88:9b:e5:ef:cf:
         a0:25:c2:a7:f5:c8:47:d4:c2:31:02:9c:82:50:84:f0:7d:ed:
         6e:49:62:e1:01:10:3e:47:f3:ff:83:06:29:32:09:cd:9a:23:
         ad:00:6e:a4:6d:3e:3f:41:6c:e4:28:72:95:aa:d6:3a:59:11:
         75:13:8c:e6:7c:7d:29:36:0e:ee:11:a0:d7:ea:55:6f:8a:e4:
         a7:65:33:60:a6:cb:ac:6f:14:0a:7e:fa:91:31:52:ed:a4:22:
         cc:e7:15:c4:ad:3d:22:a1:e7:71:02:82:f5:94:5b:42:52:1a:
         c2:cb:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:10:34 2025 by rpki-client