Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
File:                     a64918a4-9404-3759-bfe5-583ac62a247a.roa (raw, json)
Hash identifier:          mb2Am6wSFpsKNev72xFwqYdDNGm+nMhNDj80Njffv8g=
Subject key identifier:   45:41:16:E0:86:82:DE:49:55:EB:66:23:B3:EF:BB:DE:26:F4:F4:FB
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F43285849E7BA766F53BD0362A23A6580
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     399810
IP address blocks:        64.29.137.0/24 maxlen: 24
                          2607:f3a0:a009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:76:6f:53:bd:03:62:a2:3a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=cce75c23-5812-49d6-a793-591103a11391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cf:27:46:7e:86:1a:a4:8e:6c:d9:7f:68:6a:
                    34:e4:23:d3:ae:96:27:6a:6e:1c:3c:95:58:7a:4f:
                    aa:a9:ac:82:14:e7:74:b8:6c:7e:a4:ec:b3:65:6c:
                    e2:6c:14:c0:c4:18:48:ad:b5:08:65:96:54:15:8c:
                    75:8c:0f:17:a5:97:7a:f3:a5:8a:a9:b5:5e:d8:f6:
                    cc:a3:59:73:3c:df:25:b6:7a:1b:00:fb:85:8d:11:
                    cf:5a:66:f7:34:eb:bd:c7:e6:78:9b:47:4b:fe:74:
                    a0:4b:a6:ef:11:24:87:5b:2e:8e:32:57:3f:d0:2e:
                    66:48:ac:41:4a:82:32:16:e6:94:40:01:3d:0f:af:
                    09:6a:6d:36:9a:f9:bd:63:3c:f9:55:99:3f:db:40:
                    23:65:d6:21:41:cb:7a:e6:a4:07:1d:87:73:be:c7:
                    78:df:17:1e:df:09:6c:57:6a:e5:2e:eb:e6:69:ea:
                    18:b8:33:b8:33:ef:a9:58:14:f5:4a:aa:e5:76:6f:
                    d6:50:9a:06:ce:a2:5d:d7:87:d6:04:5e:43:38:e1:
                    08:09:b5:59:57:13:d5:23:6d:fa:c7:55:85:98:5c:
                    a2:a2:5c:67:51:d2:91:8a:3a:18:cd:fc:b5:8a:22:
                    fa:1b:2c:4b:74:07:f0:32:91:29:e9:5e:cb:e4:cd:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:16:E0:86:82:DE:49:55:EB:66:23:B3:EF:BB:DE:26:F4:F4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.137.0/24
                IPv6:
                  2607:f3a0:a009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c0:d9:3d:03:0e:95:47:32:87:46:4b:3f:da:8d:f9:b2:cb:
         be:5e:93:73:5f:45:bc:86:e0:91:d4:27:c3:d9:07:53:1c:04:
         4a:00:17:4c:44:6e:f8:69:94:97:3d:f9:61:d1:74:d3:b5:1a:
         85:bb:59:b2:85:97:88:36:b5:fc:5a:13:fe:71:c8:f2:2d:0f:
         94:49:46:5c:52:26:2b:f3:77:cc:3c:71:79:19:5c:c9:9b:8a:
         23:fa:12:63:fc:27:b0:43:b3:1a:00:8f:b6:42:8f:a9:41:56:
         a0:1d:9f:bd:9d:76:fb:f5:77:c7:9f:a2:ac:5a:59:6a:24:cc:
         d5:55:3d:2d:bf:f3:c8:80:14:4e:34:6e:d5:6f:e0:ab:80:e3:
         8a:c7:1b:b2:15:42:ac:59:91:73:ac:77:4e:a9:02:5a:4f:68:
         d6:e0:cf:a7:90:86:ed:c1:42:55:7b:72:ab:18:fa:9b:44:6a:
         ae:ce:31:80:14:dc:8c:c2:46:f6:07:e1:66:f6:a1:49:b1:89:
         37:6b:b3:36:1a:57:cc:b4:9a:dd:2c:74:9e:ab:41:1e:7c:f6:
         cc:0b:00:a0:11:87:88:c5:24:3b:68:09:bc:92:de:51:8b:7e:
         ec:81:11:72:10:c3:42:e5:3c:c2:d8:01:24:13:4a:cc:2c:89:
         42:ee:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:25 2025 by rpki-client