Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa
File:                     01f758f6-044f-3fd1-9699-892d363d943b.roa (raw, json)
Hash identifier:          O1upGNz0CTOQjBSlLdVXPaYZdko5cUh5LCZHBbAkYJs=
Subject key identifier:   98:0E:CA:94:65:28:11:A8:CB:79:A2:27:4A:D8:5E:AC:04:17:2B:A9
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F43285845883DDD1E3755E7E2F0D3CE00
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     399816
IP address blocks:        64.29.132.0/24 maxlen: 24
                          2607:f3a0:a004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:dd:1e:37:55:e7:e2:f0:d3:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=4af1182a-642a-4843-bd06-6aa6b0955686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:e1:4c:bc:cb:5d:96:16:5e:4c:cf:de:2b:
                    c2:34:fc:03:7e:44:dc:cf:28:80:69:8c:15:11:05:
                    bb:36:5d:f3:7f:b0:c2:31:d7:c1:6c:80:f3:b5:0e:
                    f3:c6:ff:5b:a8:af:33:62:a7:4e:72:a4:b4:cd:4c:
                    a4:b9:27:23:4b:e3:87:bf:41:44:e9:4f:08:c0:0f:
                    c9:c3:ff:3f:55:d8:ff:cb:3d:da:83:0f:43:e6:b8:
                    a9:a7:93:73:e0:82:59:9b:b6:4d:c3:c4:22:eb:f3:
                    8a:fa:9d:91:a9:44:84:5b:46:29:3e:62:31:85:41:
                    3e:30:3e:04:e3:fb:d8:6f:92:19:38:96:27:f5:ef:
                    84:28:cd:61:12:41:d0:d7:39:9f:92:9e:f0:9b:30:
                    a9:be:81:72:42:35:0e:85:67:01:95:61:0b:a0:f7:
                    ad:38:f6:c0:78:c0:28:b2:bf:42:a2:67:9b:00:f7:
                    7a:4a:c2:be:12:06:3b:a3:94:22:7a:53:71:fd:64:
                    8d:a0:73:bc:53:22:52:f6:cc:ab:39:a3:3f:03:f7:
                    6c:47:da:90:55:07:d3:e9:8d:12:6a:5b:59:cf:85:
                    2c:7d:76:fa:25:cd:71:f1:bf:16:e5:1a:c7:03:74:
                    6c:4b:6d:6d:09:49:51:34:a9:42:82:e7:b4:33:a3:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0E:CA:94:65:28:11:A8:CB:79:A2:27:4A:D8:5E:AC:04:17:2B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.132.0/24
                IPv6:
                  2607:f3a0:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ce:f3:7d:96:77:b8:fa:e4:66:5b:a1:32:9f:7a:27:37:59:
         04:ec:1d:d7:51:a8:a8:88:3a:06:9c:82:2c:9e:9b:b8:2e:27:
         7d:fa:33:90:3c:83:e7:87:1e:ff:be:5a:7e:f9:66:de:f0:5b:
         57:9c:be:58:ed:47:54:cc:4b:1e:15:aa:cd:80:7b:57:9b:b1:
         0a:fe:fc:40:6d:e4:29:86:5b:eb:35:c7:28:f9:10:9d:7d:dd:
         32:9c:b6:c6:72:da:1e:2c:7e:c6:f0:66:6f:7a:37:0f:c3:74:
         53:71:7f:44:9f:cb:e0:2e:4a:69:28:93:4a:85:78:8d:75:2a:
         59:c3:43:45:47:2a:80:b7:05:09:17:5e:1c:81:bd:45:f2:1e:
         14:92:ae:8c:59:96:fc:6a:ee:a0:3e:4b:16:9c:18:1d:ed:ad:
         fc:eb:b1:69:74:ec:ed:18:63:1f:73:c7:ba:58:b3:c5:d8:bb:
         f4:0c:99:06:41:05:44:33:af:fc:cb:37:32:1c:bc:0f:72:51:
         7d:c4:cf:e4:c5:a7:8c:54:6b:9f:e3:90:ec:92:de:27:09:af:
         18:96:30:77:75:3a:6f:26:8f:a8:90:95:8c:80:3c:b8:52:1b:
         f3:9b:b9:97:5d:16:59:3c:ca:52:5f:0e:92:80:dd:c8:38:44:
         d7:b5:9d:86
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEWIPd0eN1Xn4vDTzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0
YjczMB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk
NGFmMTE4MmEtNjQyYS00ODQzLWJkMDYtNmFhNmIwOTU1Njg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh97hTLzLXZYWXkzP3ivCNPwDfkTczyiAaYwV
EQW7Nl3zf7DCMdfBbIDztQ7zxv9bqK8zYqdOcqS0zUykuScjS+OHv0FE6U8IwA/J
w/8/Vdj/yz3agw9D5ripp5Nz4IJZm7ZNw8Qi6/OK+p2RqUSEW0YpPmIxhUE+MD4E
4/vYb5IZOJYn9e+EKM1hEkHQ1zmfkp7wmzCpvoFyQjUOhWcBlWELoPetOPbAeMAo
sr9ComebAPd6SsK+EgY7o5QielNx/WSNoHO8UyJS9syrOaM/A/dsR9qQVQfT6Y0S
altZz4UsfXb6Jc1x8b8W5RrHA3RsS21tCUlRNKlCgue0M6Po0QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJgOypRlKBGoy3miJ0rYXqwEFyupMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3
MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvMDFmNzU4ZjYtMDQ0Zi0z
ZmQxLTk2OTktODkyZDM2M2Q5NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy
NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh
NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi
MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2EMA8E
AgACMAkDBwAmB/OgoAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbs7zfZZ3uPrkZluhMp96JzdZBOwd11Go
qIg6BpyCLJ6buC4nffozkDyD54ce/75afvlm3vBbV5y+WO1HVMxLHhWqzYB7V5ux
Cv78QG3kKYZb6zXHKPkQnX3dMpy2xnLaHix+xvBmb3o3D8N0U3F/RJ/L4C5KaSiT
SoV4jXUqWcNDRUcqgLcFCRdeHIG9RfIeFJKujFmW/GruoD5LFpwYHe2t/OuxaXTs
7RhjH3PHulizxdi79AyZBkEFRDOv/Ms3Mhy8D3JRfcTP5MWnjFRrn+OQ7JLeJwmv
GJYwd3U6byaPqJCVjIA8uFIb85u5l10WWTzKUl8OkoDdyDhE17Wdhg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:17 2024 by rpki-client on console-fra.rpki-client.org