Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
File:                     79569488-5c69-30a4-ba69-3e3e08449c39.roa (raw, json)
Hash identifier:          CjjZmvpHnglorZ2K9WeWawRnT0qRaQ4bj+rn1PiDYfw=
Subject key identifier:   D9:83:F5:F3:05:16:74:11:9D:A8:90:9E:F6:24:E6:83:0A:15:03:0D
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584AF52147BAA7B72E9C00560440
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     36511
IP address blocks:        209.35.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:47:ba:a7:b7:2e:9c:00:56:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=ebdf1d86-0ec0-409a-9621-dc3040d822d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:78:f1:30:6a:0a:34:d6:bc:4a:57:c0:03:
                    0f:8a:65:c3:35:61:93:bf:14:37:ae:25:32:dc:24:
                    70:08:02:e4:7e:53:6e:1a:25:e2:06:78:b0:b3:2d:
                    b5:9f:bc:1b:29:a0:6f:96:9c:45:9a:4f:27:44:7d:
                    0b:c3:a7:ab:6b:55:28:5c:02:de:c5:38:7f:44:ae:
                    37:9e:53:ff:98:91:2f:88:2d:7e:b6:73:b7:af:ae:
                    1b:5a:6c:22:55:b7:81:78:17:16:5e:b2:99:b0:b2:
                    fc:23:68:4c:55:46:b4:fe:e0:96:7a:a6:15:dc:8a:
                    87:cc:4a:de:6d:cf:24:5e:31:aa:69:8a:ea:c1:67:
                    35:fb:ec:01:aa:78:db:50:7b:fa:df:88:50:13:d7:
                    93:11:28:55:d8:78:32:e6:2c:02:74:07:ce:f2:0e:
                    5f:86:ae:d8:4b:ab:8a:f9:cb:50:13:5a:fa:4c:86:
                    aa:cb:c9:69:d5:d6:e8:e4:05:ee:a5:a0:7b:10:8d:
                    70:36:ba:49:bf:be:21:47:cd:5f:72:76:e7:89:36:
                    29:05:04:6e:40:c2:9c:87:bf:1b:1c:66:b7:ec:75:
                    9a:11:00:7b:e5:bf:25:55:be:58:1c:93:f3:03:e3:
                    ae:3e:a5:97:c1:be:7f:a3:56:6f:9d:61:17:4e:6f:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:83:F5:F3:05:16:74:11:9D:A8:90:9E:F6:24:E6:83:0A:15:03:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:d3:bf:46:02:aa:4b:8e:7b:ea:c7:55:6a:6f:1f:39:a8:
         bd:37:72:72:63:74:b5:e9:b4:eb:87:c4:a9:cf:f4:22:58:26:
         cd:ef:ae:4d:e1:ad:14:91:ef:df:ca:60:23:1e:fa:fa:d1:ee:
         a3:97:7e:44:90:a3:4c:be:7a:9e:fb:be:85:87:8b:7e:cb:3e:
         13:95:19:7f:ef:1f:af:1c:7a:65:6e:4e:29:8c:7a:d7:45:b6:
         9e:5b:83:e3:d9:97:27:1a:ca:cf:7b:14:2a:de:92:54:73:84:
         18:ff:a0:d8:98:53:ec:0a:55:a2:b2:e0:8e:a5:92:31:b1:55:
         0d:e8:b4:cf:12:dc:10:d3:e3:22:81:68:29:4e:7e:ab:85:a6:
         0a:22:5b:09:09:1d:72:fe:d1:ab:a8:63:3f:3d:50:bf:2e:a4:
         10:36:7d:3d:9d:52:a4:6b:d2:36:18:8a:a8:91:77:7d:65:24:
         73:35:0c:40:69:3f:a3:bb:9f:d9:05:63:dc:10:7f:75:24:ad:
         a9:c5:39:c4:af:7c:f7:2f:d7:11:11:88:31:6e:67:b7:07:6a:
         93:d2:f1:c2:f3:90:7f:fb:38:d0:0d:13:15:d7:97:34:ff:5a:
         bf:ac:17:6a:8f:44:f9:c4:11:24:09:33:b6:d6:6b:31:f7:01:
         25:7c:e3:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUe6p7cunABWBEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZWJkZjFkODYtMGVjMC00MDlhLTk2MjEtZGMzMDQwZDgyMmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEN48TBqCjTWvEpXwAMPimXDNWGTvxQ3riUy
3CRwCALkflNuGiXiBniwsy21n7wbKaBvlpxFmk8nRH0Lw6era1UoXALexTh/RK43
nlP/mJEviC1+tnO3r64bWmwiVbeBeBcWXrKZsLL8I2hMVUa0/uCWeqYV3IqHzEre
bc8kXjGqaYrqwWc1++wBqnjbUHv634hQE9eTEShV2Hgy5iwCdAfO8g5fhq7YS6uK
+ctQE1r6TIaqy8lp1dbo5AXupaB7EI1wNrpJv74hR81fcnbniTYpBQRuQMKch78b
HGa37HWaEQB75b8lVb5YHJPzA+OuPqWXwb5/o1ZvnWEXTm8kxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmD9fMFFnQRnaiQnvYk5oMKFQMNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNzk1Njk0ODgtNWM2OS0z
MGE0LWJhNjktM2UzZTA4NDQ5YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+3079GAqpLjnvqx1Vqbx85qL03cnJjdLXptOuHxKnP9CJYJs3vrk3h
rRSR79/KYCMe+vrR7qOXfkSQo0y+ep77voWHi37LPhOVGX/vH68cemVuTimMetdF
tp5bg+PZlycays97FCreklRzhBj/oNiYU+wKVaKy4I6lkjGxVQ3otM8S3BDT4yKB
aClOfquFpgoiWwkJHXL+0auoYz89UL8upBA2fT2dUqRr0jYYiqiRd31lJHM1DEBp
P6O7n9kFY9wQf3UkranFOcSvfPcv1xERiDFuZ7cHapPS8cLzkH/7ONANExXXlzT/
Wr+sF2qPRPnEESQJM7bWazH3ASV843U=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:19 2025 by rpki-client