Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
File:                     286dff2e-c72b-39d5-9019-431053745837.roa (raw, json)
Hash identifier:          Se1dKf7Bjthk/YgR8NHHxTjH4fvWfE4C6O2e4HLOBEc=
Subject key identifier:   09:74:6C:DE:F4:69:C7:41:DF:12:97:86:96:CC:9D:11:40:44:8D:DD
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F432858487FB5E2928864F071C8A4C300
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     400727
IP address blocks:        209.35.100.0/22 maxlen: 22
                          209.35.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e2:92:88:64:f0:71:c8:a4:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=7f13cc78-83c0-49ce-8099-1ff7bb34bbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:bf:02:af:33:ca:75:76:f3:50:74:99:bc:
                    14:2e:67:b1:5a:a4:a9:22:24:04:b7:d5:7c:93:3d:
                    70:85:20:32:31:c4:b9:2f:f6:56:c1:e4:c8:53:a7:
                    80:9a:b8:b0:33:99:de:67:a7:72:7e:43:5a:ca:35:
                    13:50:2e:fa:c2:06:42:2c:0f:65:e5:0c:8c:e5:7f:
                    a3:57:fd:27:a0:f1:0a:c5:92:a4:e9:98:e7:82:20:
                    83:a2:c2:9a:72:f4:dd:40:3a:1f:18:ba:a2:81:54:
                    ea:73:ac:2c:87:92:a2:a6:0d:c3:04:ae:f5:72:9e:
                    7a:95:d5:73:a7:02:2c:e1:d8:fa:0b:f3:84:cf:65:
                    5a:55:9e:e8:4e:ba:a9:e8:b9:63:6c:31:35:0e:c5:
                    40:11:7a:26:d0:7e:a9:a1:50:41:49:3d:98:ef:7e:
                    c2:49:2f:70:2a:37:d9:40:05:55:c0:e5:d2:ec:47:
                    31:17:90:14:bf:f5:08:24:31:50:93:a6:df:98:f6:
                    fe:a5:ca:86:c8:00:70:d3:7b:2f:6b:52:cd:4f:db:
                    76:e0:a9:16:11:04:42:0f:b2:0e:10:c9:42:fd:c3:
                    5c:a8:aa:ad:5a:cd:a7:99:a0:0f:1b:78:30:38:45:
                    bf:8d:88:12:74:04:e3:43:11:93:a4:50:20:9e:36:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:74:6C:DE:F4:69:C7:41:DF:12:97:86:96:CC:9D:11:40:44:8D:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/286dff2e-c72b-39d5-9019-431053745837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.100.0/22
                  209.35.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:83:33:a3:80:6d:05:49:b9:f5:92:b1:be:c4:62:32:d8:
         05:1d:2d:8c:c0:a6:a4:90:29:e9:a1:e0:1b:08:9f:bc:4e:15:
         63:15:77:a9:47:b2:ef:cf:ee:44:6a:de:ba:8d:18:18:98:21:
         60:6d:d9:ea:f1:ae:8c:3f:93:52:43:b0:18:28:a0:b9:d9:15:
         9c:94:3c:36:cb:6d:ca:61:ba:ae:e5:8e:f2:ba:9b:3d:e7:7c:
         fe:0f:0f:a0:7c:b2:3d:b0:07:af:b0:ea:a5:62:79:41:48:9d:
         3d:60:cb:e0:5d:f7:e6:1b:7a:b0:49:62:0e:d4:ef:a5:50:c5:
         41:2a:c9:52:de:0c:63:bb:6e:38:bd:c4:e1:7d:d2:66:60:b7:
         ce:68:c5:be:10:ff:24:4a:0e:8a:47:c9:f3:fd:51:d2:b1:6a:
         54:c5:9f:0e:33:3b:c3:71:1f:27:2a:e5:e6:8a:c1:f3:81:28:
         91:ce:33:20:ee:c0:2e:88:77:ff:62:3f:2e:84:9b:5e:3a:5d:
         61:64:bd:51:73:ae:90:31:72:0b:cb:06:e1:fb:bc:b1:9c:25:
         18:10:d8:4f:ce:58:61:39:da:1d:00:f9:51:8e:a9:1d:78:50:
         84:35:8c:7b:92:de:21:3a:9d:f7:1f:84:6d:98:c2:a8:43:6f:
         ca:33:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:42:19 2025 by rpki-client