Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa
File:                     01f758f6-044f-3fd1-9699-892d363d943b.roa (raw, json)
Hash identifier:          RxLrJAGLWPJdQAVycR62bEEqGPQmmlJe0jooRpu7fO8=
Subject key identifier:   63:75:8A:5D:A0:F9:61:E8:E8:E3:77:84:AF:27:9A:C0:8C:18:2E:BB
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F43285849088166A1B7E23029FB6AEF80
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     399816
IP address blocks:        64.29.132.0/24 maxlen: 24
                          2607:f3a0:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:66:a1:b7:e2:30:29:fb:6a:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=09475832-d7a7-4898-955c-eefd83c36dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:0a:e7:74:47:e9:d9:04:e1:47:67:a0:69:
                    dd:a9:71:5c:cc:d1:ac:6f:e8:9d:e1:7d:3b:2a:f5:
                    b0:e7:74:11:06:d6:3f:25:e9:7f:82:e8:9c:2c:fc:
                    cc:4c:87:8e:8c:d8:14:64:c2:f3:f8:1a:37:8e:9f:
                    4e:8c:ae:6d:29:3a:a5:b7:4b:12:b7:b2:14:18:a6:
                    87:bd:6f:23:85:c8:88:3a:6a:2c:28:2d:87:eb:3c:
                    75:9c:c5:d8:ab:1b:12:da:3f:09:22:37:f0:35:41:
                    32:2f:94:2b:c7:d3:d9:76:7d:44:ee:b3:6b:95:31:
                    cb:96:f0:9b:af:dd:62:97:18:cc:8a:08:dc:ea:c0:
                    0e:b9:4f:c0:38:b4:de:d0:d7:31:6a:04:44:53:81:
                    1b:8b:84:12:c3:e5:e9:44:f8:f7:65:42:15:40:44:
                    4e:49:cf:bf:d8:ee:c8:2e:42:28:8f:e8:24:01:0c:
                    fa:22:81:47:13:40:47:1f:48:92:78:44:d7:5b:04:
                    7c:88:cc:c5:6a:01:18:05:25:df:4e:86:43:ee:27:
                    e8:85:84:19:a4:a0:ba:2d:cd:13:fd:36:64:5b:9b:
                    1d:ae:73:b0:04:5a:80:35:ca:2e:10:03:55:9c:77:
                    b2:18:d3:7d:16:fd:bc:26:b2:10:00:82:51:bd:72:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:75:8A:5D:A0:F9:61:E8:E8:E3:77:84:AF:27:9A:C0:8C:18:2E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.132.0/24
                IPv6:
                  2607:f3a0:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f4:d4:75:cf:67:19:6f:35:8d:2f:89:f9:4e:18:6c:e9:f2:
         94:6f:0c:5c:84:a0:64:39:00:75:3d:43:cd:ce:2c:8b:ad:91:
         af:7c:60:40:be:d6:65:56:d9:08:5c:71:40:6b:37:76:58:52:
         37:f1:7a:25:98:2d:74:ab:a4:ba:3e:94:02:46:55:e2:ce:45:
         47:fa:87:4c:eb:e1:71:81:35:7c:4d:a2:cd:99:19:75:00:bb:
         ba:74:d7:e6:c3:79:5d:27:91:7a:e3:73:49:7e:a8:75:30:49:
         ba:49:9a:62:0a:ee:60:9b:6d:2a:30:07:01:9a:e2:23:99:9d:
         7e:c8:da:d0:e1:6c:f4:30:16:73:c7:8e:4e:d7:d7:12:3f:ab:
         3b:72:95:c9:e1:03:c6:dc:ea:68:fe:ea:d4:ab:a1:f7:7b:65:
         bb:fc:ac:09:57:e6:09:5d:a3:73:13:6e:bd:ee:26:04:80:24:
         4e:a4:4c:00:6d:a9:40:81:ee:eb:c3:3b:94:fc:8a:e2:c7:e9:
         f6:69:58:9f:30:58:f7:44:0a:ab:ec:16:49:84:43:1d:1d:bc:
         7d:a2:c6:ed:ae:7e:fe:f8:db:fb:49:83:32:0b:7f:55:be:bf:
         cb:18:b5:06:69:47:69:e5:38:10:31:e2:9c:84:06:a5:ec:d3:
         09:53:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:42:59 2025 by rpki-client