Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
File:                     04a72bfb-6956-393f-affe-ff7db4804d88.roa (raw, json)
Hash identifier:          g2tgGIHjlDblwPHZKeea69wZrV6Xj7rAhc8cABOloNA=
Subject key identifier:   CD:A6:13:26:06:CE:99:E6:2F:BC:FB:CB:8B:D8:B3:81:19:15:16:72
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584780265B6CE56F51564CCB9540
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     33392
IP address blocks:        209.35.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:5b:6c:e5:6f:51:56:4c:cb:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=8797eca3-e54d-403a-a032-4336d14c6323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:e4:a1:0c:ef:ce:2d:bf:eb:99:9d:a6:0d:
                    26:1a:9d:ad:5a:cc:4c:08:68:05:9c:1b:06:fc:bc:
                    de:e8:75:9e:b1:18:c6:f6:f2:be:bc:7b:f0:e5:8c:
                    da:ef:88:ba:62:8a:bc:90:c7:d2:f7:8c:22:4f:42:
                    bb:e0:02:87:4e:3a:b2:e5:f8:f7:1d:dc:e6:f3:fc:
                    8e:ce:40:34:53:6f:8e:8e:e8:66:59:22:3c:18:a8:
                    db:a6:6e:a1:27:b4:49:57:1c:53:b0:f1:66:5b:49:
                    c9:93:43:30:a9:09:66:f5:b4:3c:6a:23:9c:e2:16:
                    19:a0:4c:3f:2d:42:a9:9f:b0:fb:41:a6:59:a1:d0:
                    bd:b6:4a:4f:93:d5:13:f4:c3:62:55:47:8b:58:c1:
                    62:36:77:4a:12:7d:47:6b:9d:7a:e1:52:22:0d:27:
                    af:56:32:e0:cb:a7:14:52:72:fc:94:a7:33:95:03:
                    1e:b8:17:60:c5:5c:87:49:12:43:70:2c:75:31:a2:
                    6c:7b:95:a8:f5:fa:bf:fd:67:a0:6d:31:d9:88:f0:
                    1a:b9:6d:b3:24:73:79:13:5d:cb:a3:c5:c3:71:32:
                    6d:1a:57:65:80:75:0b:3b:27:0d:f1:a1:30:9e:ea:
                    e3:4d:6b:af:25:1d:ac:3f:88:c3:03:ec:d9:17:a1:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:13:26:06:CE:99:E6:2F:BC:FB:CB:8B:D8:B3:81:19:15:16:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6d:f3:62:ac:36:96:cc:cc:4f:a3:62:0d:71:19:bd:32:90:
         9f:54:96:8d:ed:b4:47:fd:84:63:11:dd:0f:9f:53:5f:0a:4d:
         a0:0e:78:47:42:f0:e8:da:9d:4d:55:fa:d1:47:82:f0:4e:b6:
         55:70:e0:5c:69:e5:7a:84:7b:9f:65:43:d4:41:6b:ca:1c:e0:
         30:b1:f5:24:a8:56:47:41:00:17:da:4d:e9:27:5f:4e:3e:8c:
         20:31:c9:ff:56:09:01:76:2b:9d:26:7a:0b:61:3a:ab:51:7c:
         23:1b:1c:ec:0a:05:b5:58:94:f9:53:e4:fb:6c:60:ad:29:d0:
         3d:19:3d:9a:de:7c:96:70:1e:21:9d:a3:c3:5e:c8:f5:e3:7e:
         4e:43:4b:6d:28:85:a7:4e:0e:aa:0c:3d:57:11:35:45:69:3b:
         6f:91:08:27:f7:97:b8:c9:3e:8f:75:81:90:06:38:38:b4:00:
         72:c8:38:51:e5:53:88:7c:30:9a:50:d0:87:21:58:ad:3a:25:
         ea:50:cc:a1:45:7a:4b:11:af:70:c9:8b:e2:ab:e0:43:1b:39:
         c5:c1:1e:1d:e5:d1:c9:f6:f5:31:d8:2d:9a:e3:88:50:9b:0a:
         12:a2:76:22:45:94:61:86:b6:77:1c:1e:7b:1a:91:94:ed:16:
         59:b9:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org