Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa
File:                     012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa (raw, json)
Hash identifier:          zp18s2bJEhwpn/nzm+tGXEWuNcl7+gkhh/Tzs6QlFzI=
Subject key identifier:   60:17:10:2B:16:62:D2:E6:F3:00:46:1B:9E:81:93:8E:24:BF:20:7B
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F432858494303F3E60B503840AA13DA00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa
Signing time:             Fri 21 Mar 2025 13:00:50 +0000
ROA not before:           Fri 21 Mar 2025 13:00:50 +0000
ROA not after:            Thu 19 Jun 2025 13:00:50 +0000
asID:                     33392
IP address blocks:        209.35.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:03:f3:e6:0b:50:38:40:aa:13:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Mar 21 13:00:50 2025 GMT
            Not After : Jun 19 13:00:50 2025 GMT
        Subject: CN=78410d4d-ec89-4c31-8c05-6e8737f1e9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:ea:6b:02:43:97:33:32:65:d0:4a:a7:51:
                    76:1f:22:8d:ea:68:2d:df:75:58:03:bb:42:09:52:
                    cf:be:2f:e2:fb:27:d4:5d:34:47:c0:71:fa:ef:3a:
                    56:ab:48:b7:30:8a:01:33:a9:da:b6:f1:b5:50:4a:
                    61:f1:7d:9e:fd:35:90:fd:e1:a3:81:e3:d1:75:03:
                    5d:c4:72:a6:ba:65:d9:fb:5e:69:0a:38:0d:21:4c:
                    e5:d8:e3:ad:a6:e1:df:32:b1:ad:7a:20:c6:ad:04:
                    b6:df:8a:13:18:0d:72:2d:92:9b:71:41:be:82:8a:
                    5f:ef:88:f3:b6:84:7a:ff:44:78:93:d0:de:e1:d2:
                    74:55:96:90:42:14:e1:6a:9b:e4:26:a3:ba:ca:bc:
                    80:1f:f9:9a:67:80:cc:26:90:42:78:8c:ac:b6:5e:
                    ab:2b:0f:a9:61:33:15:01:86:10:55:61:ba:9b:6f:
                    f7:e9:87:48:c0:77:c5:46:04:2b:51:2e:b8:f3:b6:
                    e1:82:2c:14:94:6f:4f:c9:7d:b8:c6:b9:9f:ae:82:
                    3d:82:f4:48:7c:46:5b:d9:f8:0c:69:73:14:66:9b:
                    b9:36:4a:0e:0e:01:96:17:99:29:30:dd:28:22:56:
                    14:97:69:af:b3:7c:4a:61:dd:d3:d6:73:08:17:44:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:17:10:2B:16:62:D2:E6:F3:00:46:1B:9E:81:93:8E:24:BF:20:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:92:14:49:00:14:b5:0e:26:02:0c:95:a4:33:8d:a6:95:14:
         0f:09:ff:27:96:76:13:53:3e:b8:26:c0:35:93:af:e8:ac:17:
         d2:d0:e0:ae:60:bb:c3:6b:73:51:cf:e1:54:21:61:23:e3:94:
         ea:40:59:27:20:e5:61:85:d6:64:4a:44:3d:65:08:dd:bd:a7:
         8a:27:f0:5f:fb:a1:55:c8:9d:14:c6:49:66:b3:7f:71:8f:89:
         49:a4:d7:ae:a4:a0:90:54:0f:f4:f6:30:54:cf:43:ac:a7:61:
         64:58:44:88:0f:99:ed:6c:32:10:c1:4d:f1:82:24:18:06:14:
         18:8b:da:ba:52:9d:1f:1c:07:f9:e1:44:13:7f:e5:1b:33:b9:
         ca:3b:fa:5c:b0:d2:82:90:0f:33:f3:89:9f:72:c4:93:0b:b9:
         96:8e:59:e0:65:60:a0:e9:8b:4b:af:bc:aa:e6:f9:47:8a:be:
         01:86:db:96:8e:c7:27:2f:cf:48:ef:33:91:de:23:97:5e:07:
         20:83:de:69:9e:85:e0:30:6e:ba:15:bd:6c:e2:f1:0e:8b:14:
         76:72:23:f9:f0:ea:cf:d8:79:4e:a6:e2:00:57:ac:c7:0a:b5:
         4c:ab:8c:df:a2:2d:ad:d9:10:8d:b9:bb:47:e1:98:07:51:72:
         cb:80:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:04 2025 by rpki-client