Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
File:                     79569488-5c69-30a4-ba69-3e3e08449c39.roa (raw, json)
Hash identifier:          FF2SzrbnpK51Y9xxvA07TPIf0cYnJlQ+JtvCm997mI8=
Subject key identifier:   81:0A:83:12:6E:99:14:A6:1F:8F:E4:6C:71:39:DE:60:A3:FC:AC:E3
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584774FB909DD39D9F3308D6B940
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     36511
IP address blocks:        209.35.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:90:9d:d3:9d:9f:33:08:d6:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=e1ef558f-bdda-4761-a05e-1326f3c0bccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:0e:cf:b3:92:1e:34:cf:3c:89:c3:b3:c2:
                    c9:f8:f2:f7:08:8a:0a:44:b0:fc:a1:12:78:0f:86:
                    27:a1:cf:78:ad:59:63:89:2e:5a:42:7a:e0:21:1d:
                    95:06:8b:9a:b1:e1:31:1d:2a:e8:16:78:bb:6a:bd:
                    18:ad:46:5a:b3:14:83:8c:9a:24:2f:a3:0d:e7:22:
                    6c:59:6f:99:ba:da:35:bc:f1:cd:f9:c5:3a:f0:6f:
                    29:fc:87:10:57:bc:3e:96:32:88:77:a4:66:02:11:
                    95:0a:1f:64:a3:0b:c6:9a:e4:73:31:a8:d1:11:2b:
                    d4:34:72:55:65:3c:9f:18:85:ed:e4:60:76:7e:38:
                    5c:0d:d9:23:c4:7f:87:1c:72:28:ab:ce:63:ae:49:
                    b0:aa:96:a2:84:8b:75:e8:75:77:52:5c:2a:d3:8b:
                    f3:72:70:3f:5e:30:93:11:87:9b:b8:55:61:d5:36:
                    62:0d:6c:0d:3a:f3:f3:c2:70:57:9d:48:e3:a7:a9:
                    7b:82:2b:89:81:3f:3f:1c:70:72:28:f8:8e:77:6d:
                    31:a5:7b:60:e3:a5:f8:fb:19:bc:02:d5:e4:3a:96:
                    b7:15:4a:63:0e:de:ea:f1:6e:0d:d3:d1:74:7a:d8:
                    85:73:aa:a9:98:c9:08:0e:4b:de:be:b3:bd:03:e0:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0A:83:12:6E:99:14:A6:1F:8F:E4:6C:71:39:DE:60:A3:FC:AC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:f4:11:a2:5f:dd:e0:14:67:0b:47:65:f7:18:e2:54:c0:
         91:1d:ba:82:25:a6:a9:81:29:ce:6f:14:cf:0a:66:bc:fc:7a:
         d2:d6:de:6e:40:a2:83:85:b1:a6:7b:cc:a5:80:8f:ec:19:5c:
         5c:70:55:1d:a5:2e:e1:b7:ad:92:60:93:3e:b8:95:db:dc:c6:
         36:21:a4:5d:0a:a2:3c:ba:67:81:5a:90:82:e6:9e:77:71:aa:
         ec:66:3d:99:02:0e:f6:f6:88:57:ce:c7:06:74:68:50:aa:14:
         62:d5:6a:57:ac:80:60:48:e5:7a:b1:cf:bb:35:1e:1e:85:82:
         4b:4a:60:e5:e3:4d:70:d8:d5:f1:02:9c:5e:9b:7e:88:af:fd:
         a8:7b:f1:24:17:80:3d:de:ff:4b:72:fe:78:13:ad:ec:45:99:
         60:1e:af:8e:a2:1a:a4:26:a2:60:73:13:d2:e3:2f:72:7a:08:
         0f:95:42:fa:55:3f:4e:98:4d:98:9a:ab:8b:cb:ce:9c:4e:23:
         1b:e8:2b:b6:2e:af:25:ee:6e:31:2d:e5:be:58:33:d5:33:39:
         42:fe:76:d8:70:47:df:51:35:b6:c8:58:dd:9d:dd:bd:33:83:
         a5:74:e9:02:9e:b9:af:4a:0c:da:ff:60:75:2b:4f:d1:76:bc:
         50:d4:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:12 2024 by rpki-client on console-fra.rpki-client.org