Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa
File:                     3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa (raw, json)
Hash identifier:          2x3cLsE14tIxSTmNt+YFD+kQtXnB78yoXen8spzkL+w=
Subject key identifier:   34:20:2E:27:8D:3E:9B:8B:48:5A:1F:F8:1C:1A:48:8C:63:21:77:DE
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584A58CB0264C7417CAB7F686E00
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     237
IP address blocks:        35.33.0.0/18 maxlen: 18
                          35.33.5.0/24 maxlen: 24
                          35.33.6.0/24 maxlen: 24
                          35.33.64.0/19 maxlen: 19
                          35.34.0.0/18 maxlen: 18
                          35.34.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:02:64:c7:41:7c:ab:7f:68:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=7f648850-46b0-491d-ae49-db98e9a5365f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8a:3a:ae:96:07:02:2b:2c:97:a2:61:82:52:
                    e1:a1:dc:9f:38:90:5b:81:df:ce:b4:20:9c:a5:58:
                    20:98:06:b2:18:a7:5c:72:e0:0d:4c:af:f8:29:bf:
                    81:1c:82:d6:10:6e:9a:25:69:a9:36:00:98:37:f3:
                    a1:18:03:35:c3:f6:c2:e3:71:af:fd:27:6d:25:29:
                    32:c6:e1:5f:64:c7:d0:2a:a6:37:24:5c:56:6b:09:
                    fc:47:a7:51:d5:f7:1e:b2:a5:a0:0b:96:64:79:01:
                    e4:12:09:b0:84:e9:d8:f9:45:e9:82:bf:cf:83:f2:
                    dc:52:f3:93:dc:45:ef:09:6a:65:a3:7c:f0:33:d0:
                    85:34:f1:7a:d3:cb:63:1d:91:52:ef:33:06:ff:15:
                    e4:01:b7:60:c0:63:27:c8:e7:c2:53:d7:20:6e:fd:
                    2e:c2:b3:db:ed:7e:43:1e:22:ea:de:ac:70:2e:d9:
                    9e:40:60:2e:01:94:6c:f6:a5:7f:32:60:60:7d:ea:
                    8c:b2:6a:a0:0c:e4:85:3c:ae:d3:6c:87:29:40:05:
                    88:8d:1f:b1:d7:1e:fb:cd:05:b3:cb:4d:c4:37:b4:
                    62:d6:41:45:af:9e:93:c3:4b:4d:0b:16:41:39:26:
                    77:e7:70:cb:ee:d2:ac:98:e7:64:c1:a3:2f:3a:c6:
                    32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:20:2E:27:8D:3E:9B:8B:48:5A:1F:F8:1C:1A:48:8C:63:21:77:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/3ec9f34b-009b-39ed-b9a0-5cd58eafbcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.33.0.0-35.33.95.255
                  35.34.0.0-35.34.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:8f:12:f5:5b:9a:3f:31:ac:21:54:84:9f:7b:da:81:45:
         e1:dd:35:d2:6d:77:c2:f6:de:f8:08:8b:7f:b9:c8:91:03:b4:
         61:e8:93:78:cf:f6:41:ed:f8:aa:cb:af:23:ba:c6:6c:4b:37:
         1b:70:7a:65:30:02:b1:97:83:d8:33:ce:23:7b:37:95:a8:da:
         32:6a:b6:a1:ef:da:cf:34:ce:65:1d:08:2d:0b:fe:09:83:6c:
         f2:8b:23:05:64:63:d5:e8:9f:56:b5:c2:d4:29:4a:b8:e6:a5:
         97:49:c3:b0:bb:a0:c8:d6:49:89:65:82:dd:a2:e3:e4:ed:f5:
         b9:17:3f:90:d6:c5:fa:b8:d6:3f:da:c1:90:15:75:8f:00:eb:
         c3:82:ba:f9:a8:01:6e:2a:0b:bb:7f:79:1e:29:73:7b:d9:03:
         ed:b0:a0:a2:fd:82:06:0d:47:ba:e7:da:33:c5:26:0b:09:24:
         fe:ed:27:43:bd:1b:b9:43:f3:4b:24:e8:5e:5e:18:46:66:25:
         cb:b1:d8:35:6f:92:bd:5c:83:f9:af:d9:d4:15:b9:fe:a9:7f:
         39:1b:fe:ec:60:a8:49:fc:4c:8d:8d:2e:02:79:cc:eb:f5:b4:
         d7:2c:ca:40:f4:4a:27:85:a5:e2:13:d4:ec:e2:9d:52:eb:ca:
         f5:b1:3a:df
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEpYywJkx0F8q39obgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk
N2Y2NDg4NTAtNDZiMC00OTFkLWFlNDktZGI5OGU5YTUzNjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYo6rpYHAissl6JhglLhodyfOJBbgd/OtCCc
pVggmAayGKdccuANTK/4Kb+BHILWEG6aJWmpNgCYN/OhGAM1w/bC43Gv/SdtJSky
xuFfZMfQKqY3JFxWawn8R6dR1fcesqWgC5ZkeQHkEgmwhOnY+UXpgr/Pg/LcUvOT
3EXvCWplo3zwM9CFNPF608tjHZFS7zMG/xXkAbdgwGMnyOfCU9cgbv0uwrPb7X5D
HiLq3qxwLtmeQGAuAZRs9qV/MmBgfeqMsmqgDOSFPK7TbIcpQAWIjR+x1x77zQWz
y03EN7Ri1kFFr56Tw0tNCxZBOSZ353DL7tKsmOdkwaMvOsYyxQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFDQgLieNPpuLSFof+BwaSIxjIXfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvM2VjOWYzNGItMDA5Yi0z
OWVkLWI5YTAtNWNkNThlYWZiY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAsDAwAjIQME
BSMhQDALAwMBIyIDBAQjIkAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFByPEvVbmj8xrCFUhJ972oFF4d01
0m13wvbe+AiLf7nIkQO0YeiTeM/2Qe34qsuvI7rGbEs3G3B6ZTACsZeD2DPOI3s3
lajaMmq2oe/azzTOZR0ILQv+CYNs8osjBWRj1eifVrXC1ClKuOall0nDsLugyNZJ
iWWC3aLj5O31uRc/kNbF+rjWP9rBkBV1jwDrw4K6+agBbioLu395Hilze9kD7bCg
ov2CBg1HuufaM8UmCwkk/u0nQ70buUPzSyToXl4YRmYly7HYNW+SvVyD+a/Z1BW5
/ql/ORv+7GCoSfxMjY0uAnnM6/W01yzKQPRKJ4Wl4hPU7OKdUuvK9bE63w==
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:29:10 2025 by rpki-client