Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/27d2967f-4845-347a-ab92-062fc023cdfc.roa
File:                     27d2967f-4845-347a-ab92-062fc023cdfc.roa (raw, json)
Hash identifier:          9XSOZ38SHD9GS6yB5pJjUnkEP2kqyYFIty4+8cbiag8=
Subject key identifier:   C3:7B:C6:60:59:CD:E7:5B:BA:20:4E:8A:5D:62:DF:03:D9:79:38:EE
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584A189541801E78125015745500
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/27d2967f-4845-347a-ab92-062fc023cdfc.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     399811
IP address blocks:        64.29.139.0/24 maxlen: 24
                          2607:f3a0:a00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:41:80:1e:78:12:50:15:74:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=b333a654-6225-46ca-859c-5783e4c99703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:25:4c:3b:2c:67:66:be:f3:da:f5:78:cd:
                    7a:07:05:31:94:1b:7c:bd:d1:ff:02:01:9a:6c:6f:
                    eb:cc:cf:c0:b3:64:f0:f8:43:65:e7:dd:c4:65:f0:
                    fe:0a:ec:ce:95:73:05:0a:3e:32:66:f9:d3:9e:b5:
                    e9:71:3e:a7:4a:fd:0b:5e:76:f3:5a:4b:04:bd:8e:
                    60:06:45:76:9c:12:b5:ff:ac:f4:94:51:1f:15:68:
                    1b:ce:ad:1b:52:0c:c9:7d:fa:d5:06:8e:7f:db:f5:
                    08:b4:1f:30:56:fc:58:23:a3:08:b9:93:cf:33:99:
                    38:cf:a6:c6:70:c4:57:b7:3b:de:9d:03:c3:e4:e4:
                    8c:7a:f4:0b:e1:58:42:fb:43:5e:b7:fd:7c:98:1f:
                    bc:b5:a5:7c:09:a4:26:d6:84:9b:59:e7:00:91:57:
                    76:0b:9d:4a:26:6e:44:79:e7:4d:3d:56:f4:e7:82:
                    7f:23:70:ca:e9:3e:85:68:1f:3e:d6:06:26:ad:96:
                    92:b6:d6:3e:aa:b6:3b:11:58:59:29:1d:95:08:f4:
                    87:dd:be:35:90:92:93:44:c3:ec:6c:a4:60:55:3a:
                    c9:e0:d1:7c:e5:1e:d1:1e:0d:ce:c4:20:ee:f2:9f:
                    3d:1e:a4:bd:65:d7:52:5f:b9:65:d1:5d:a2:db:e9:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7B:C6:60:59:CD:E7:5B:BA:20:4E:8A:5D:62:DF:03:D9:79:38:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/27d2967f-4845-347a-ab92-062fc023cdfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.139.0/24
                IPv6:
                  2607:f3a0:a00b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3c:bc:dd:db:ac:2a:10:32:4d:c2:b5:26:30:09:63:1b:c4:
         6c:62:de:bd:7f:1f:9f:ff:db:30:73:ac:a7:6f:3a:85:36:cd:
         e5:4d:31:29:10:28:71:25:cd:21:fa:a2:60:6e:45:3c:f5:df:
         4e:c4:b4:41:c3:3a:74:7b:3d:16:4f:8a:23:05:5c:37:3c:b5:
         01:8a:cd:c9:e2:ad:56:bc:7c:c1:14:2b:30:a2:78:ea:04:44:
         a6:b1:82:da:80:eb:39:00:35:59:72:2b:a6:53:1a:e7:f9:b0:
         77:ef:63:df:da:c6:4b:d6:bd:f7:fe:12:19:5e:12:de:dc:2b:
         13:62:01:95:b4:73:5a:5a:24:70:19:e2:db:48:ed:4d:1c:46:
         cc:07:c8:a9:17:ee:6e:23:ad:40:fa:cd:0f:83:f7:b5:83:38:
         c8:8b:0e:68:ab:4a:7f:1a:a4:9b:ba:53:dd:87:ed:2c:ee:3b:
         28:04:d1:ed:29:72:73:99:73:cd:11:3d:fc:34:c8:e3:2e:f7:
         f3:16:9e:b7:fc:5a:04:6b:aa:ce:51:22:28:64:6b:5f:38:83:
         23:8d:3d:40:da:ee:e0:06:9c:f8:ee:d7:92:e3:ce:17:a1:3c:
         67:87:8c:98:b9:b5:ee:4c:6d:07:14:ab:af:d6:89:f8:eb:f3:
         d7:5c:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:12 2025 by rpki-client