Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
File:                     04a72bfb-6956-393f-affe-ff7db4804d88.roa (raw, json)
Hash identifier:          wDv2P+Pa02mf0OR7ngqEZ8JIUz6SB9PtzxKwn9UoiOM=
Subject key identifier:   5B:CA:7C:64:16:6D:DD:55:19:0C:25:E9:25:13:58:83:C9:76:FC:5B
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584A1F90236D37025DB9FAB96880
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     33392
IP address blocks:        209.35.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:23:6d:37:02:5d:b9:fa:b9:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=6de54492-e314-4c65-bf13-6c881526a00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:6f:f7:c4:b3:8e:ff:8b:3a:42:e0:ca:bc:
                    1a:df:0d:fb:aa:06:86:d9:78:88:70:36:d2:ea:85:
                    5e:70:5d:8a:a1:92:96:fa:dd:00:06:37:3a:e6:a3:
                    65:c1:9d:4c:9a:bc:29:c3:bc:d8:2b:7e:21:6b:7f:
                    e4:ff:4e:e1:0a:15:dd:03:4f:c9:5e:cf:bd:7e:5f:
                    14:a2:4b:dd:71:09:ad:05:f7:2f:64:a5:02:7a:af:
                    9c:a4:c5:c6:cf:e5:f2:be:9b:4a:97:1f:4c:0b:4e:
                    d9:3e:cc:0c:3c:42:6f:f4:75:5c:9a:be:bb:0c:13:
                    13:70:8a:80:2a:73:47:e9:5a:c0:fe:14:bc:2b:a3:
                    de:5c:e8:eb:3e:fe:29:c3:6e:7b:54:c0:a5:f3:f1:
                    c1:7f:87:46:6c:34:1c:51:ca:c3:14:13:3b:d6:9c:
                    a6:ca:e5:50:32:4c:9c:e4:e6:43:e8:6f:97:54:51:
                    40:53:86:cb:b1:7e:ae:0c:ea:33:9d:43:b4:fa:0d:
                    0c:a5:74:86:df:4f:34:cb:43:17:95:fb:f9:da:54:
                    d8:f4:35:7a:bb:91:1e:e9:20:1b:0e:19:ca:42:70:
                    58:62:18:68:e9:f8:51:39:59:6a:73:c0:2f:41:d5:
                    96:be:c1:84:70:d0:66:92:b4:59:db:cd:9e:ff:9a:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CA:7C:64:16:6D:DD:55:19:0C:25:E9:25:13:58:83:C9:76:FC:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:0d:e1:f6:0e:3a:c4:cb:12:81:2a:d9:10:33:05:30:b5:
         80:a1:04:ec:91:ec:7f:d0:f1:2a:89:43:57:fc:1b:b9:f8:1e:
         87:e1:2b:0c:fc:64:86:16:93:e4:8b:de:ef:e1:1e:7a:47:bb:
         71:24:86:04:18:81:50:8a:8b:36:13:83:b7:b0:d8:e9:9e:d2:
         34:f9:e9:7b:ff:5f:0c:2d:17:94:7b:66:f1:19:ef:dd:73:68:
         9e:e3:be:c5:9e:93:f9:9d:2a:2c:7b:eb:39:18:6f:07:9b:f4:
         ef:30:6b:04:d5:9f:c0:13:66:15:68:86:9b:91:d7:c3:b2:8c:
         77:97:c4:b8:e7:73:15:a7:86:92:9b:5c:88:2f:69:df:08:a4:
         bd:d6:70:d7:a3:bc:a6:82:94:00:db:0d:ac:3e:4f:48:fa:90:
         56:1f:0e:82:b1:1d:13:15:9c:fc:70:21:cd:96:94:29:13:fd:
         e6:75:ab:ad:09:a0:ec:60:c4:d3:72:9a:9c:a8:35:4a:fc:51:
         aa:8f:ea:39:b6:44:4f:7b:8f:47:6f:ec:f3:73:25:d3:34:15:
         b4:53:7e:35:fb:c9:fe:75:35:b4:c2:09:ee:59:69:30:9f:c5:
         42:b5:33:9b:13:66:ab:29:ea:0f:b5:7a:3e:0d:f9:4e:7c:0f:
         5e:3c:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:10:33 2025 by rpki-client