Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa
File:                     c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa (raw, json)
Hash identifier:          ExdMzU8IXeOHyFgbLANQHO/WA+coPq7QgeDD4hODBaE=
Subject key identifier:   75:DC:87:DE:E9:DC:AF:94:C2:75:05:BA:75:C5:65:AD:DE:F2:47:A5
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F43285849E7BA764FDF9B23E73210CE00
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     399813
IP address blocks:        64.29.135.0/24 maxlen: 24
                          2607:f3a0:a007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:76:4f:df:9b:23:e7:32:10:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=dc12f425-87cb-4e28-b537-cfdc0ed00815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9b:c6:f7:7d:3c:e4:b4:b5:8c:73:a7:70:b6:
                    12:53:f1:71:c8:e9:af:7e:09:96:f1:5f:b9:70:ec:
                    81:a5:2e:a8:b2:40:c4:c1:3b:b0:b9:b8:2d:b3:9f:
                    4a:aa:e8:42:4a:2d:fc:a2:cf:06:fb:2a:f2:92:4f:
                    33:35:a2:db:75:8c:0c:51:a6:04:c9:b6:7c:a3:e6:
                    8c:50:4e:64:5b:6b:c1:61:6b:ba:7e:ee:11:64:f2:
                    0a:c1:fb:28:88:db:d1:3b:84:ab:2e:4c:d9:bd:c5:
                    09:7e:25:ab:2e:2f:35:5c:cb:98:ad:2c:09:43:7f:
                    c9:1c:bb:59:9f:c2:0e:a2:cc:13:fe:ea:70:ea:e2:
                    4c:00:04:00:ba:39:b1:01:49:bd:cf:81:7c:c0:18:
                    d9:3a:47:2f:b2:c8:25:de:17:90:e0:e2:fc:72:e2:
                    0f:f7:03:7e:32:35:75:6a:4d:60:7b:d7:de:77:68:
                    84:85:ec:7d:a0:49:cf:e6:38:a3:95:a6:76:82:ec:
                    25:0f:72:b0:3b:bb:3a:0d:58:b4:5c:4f:ff:9f:3f:
                    5d:b7:11:d2:7e:3b:23:71:2b:2d:1b:1a:53:e7:36:
                    e7:e3:3c:27:19:e0:f6:80:96:17:a3:52:1c:b2:96:
                    0a:ea:c2:19:9c:92:20:3a:3e:c0:e9:c6:ff:95:50:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DC:87:DE:E9:DC:AF:94:C2:75:05:BA:75:C5:65:AD:DE:F2:47:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.135.0/24
                IPv6:
                  2607:f3a0:a007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c7:db:8c:ac:a2:31:ce:60:4a:5c:bb:d4:6e:40:fd:0b:e6:
         1d:fb:87:0b:40:68:8b:47:89:e0:a8:7a:9f:77:88:1e:d1:6b:
         3c:ae:26:cc:22:de:8d:a3:7a:f7:b1:ca:84:56:c1:0c:d4:5a:
         14:7c:be:0c:fa:e5:4e:1d:d7:41:a0:81:17:74:e6:f0:ba:a7:
         c4:21:c5:0c:a8:3a:26:03:e8:f0:91:fc:97:20:4d:5a:df:1a:
         67:97:fa:be:d5:cf:c8:6b:56:e0:19:f9:f8:bd:61:93:8e:ce:
         63:58:6c:04:b3:43:fc:22:1b:63:77:2f:86:ba:76:fd:61:62:
         ad:4c:2e:11:f1:60:3c:d4:2f:b4:72:bf:ff:3f:49:65:d4:69:
         ea:25:7a:e4:45:f3:b7:2a:d9:fb:ca:70:91:60:00:d7:52:a7:
         ce:b3:d8:b8:86:7d:3f:5e:67:4d:7b:66:22:30:85:75:14:0f:
         c8:c9:1d:db:8c:a7:65:f5:c1:ef:17:90:24:59:70:bc:db:42:
         5e:91:17:84:d4:ab:93:9b:1b:e1:0b:f1:02:33:42:9f:6e:51:
         b1:ff:ca:64:e6:00:2f:8c:4a:2f:98:f7:61:cb:00:02:e1:a4:
         a8:85:ce:df:78:97:c4:80:8e:a5:38:9a:25:fa:ad:1b:b8:da:
         8e:1e:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:46:06 2025 by rpki-client