Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa
File:                     01f758f6-044f-3fd1-9699-892d363d943b.roa (raw, json)
Hash identifier:          UHuPcMPzkADptYBwk23fYa11qBQW8uCtkpoV1w51S2g=
Subject key identifier:   39:21:9A:CD:57:DF:31:8B:BD:16:5E:0A:F3:BB:15:3A:5F:58:A2:99
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584827C53EBDDB86B47F5705AB00
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     399816
IP address blocks:        64.29.132.0/24 maxlen: 24
                          2607:f3a0:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:3e:bd:db:86:b4:7f:57:05:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=f0e368de-dc85-4b8a-aba7-30f70b11743f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:92:66:b4:1a:d2:6f:01:01:6c:bd:a0:f3:
                    04:33:20:66:f6:8e:6e:39:9a:c6:a5:61:bf:a4:a0:
                    48:4f:04:c9:dd:9d:63:08:f8:24:c7:ab:9c:fc:15:
                    56:e1:f6:bb:c4:a7:19:40:4d:48:f7:d6:e0:7b:7c:
                    96:6e:4c:bb:c8:41:a6:00:94:e5:93:52:8c:de:99:
                    05:9b:7b:a9:ac:c5:f2:53:21:08:e2:42:90:16:8c:
                    35:76:43:4e:6d:d7:a8:86:ff:2d:f3:70:03:3b:2f:
                    87:5d:df:5b:40:75:37:60:59:f2:f9:11:99:09:78:
                    58:26:dc:d3:b6:c6:50:90:96:7e:21:4d:b8:34:02:
                    39:2c:75:b5:b7:25:ac:81:08:1d:11:9e:31:17:46:
                    8a:52:58:1d:82:ad:55:d7:d3:ed:75:15:7e:5a:3a:
                    c8:1b:7e:11:27:7b:71:64:78:d1:d6:4e:a3:c0:8f:
                    6a:3e:ef:9c:d3:ea:5e:09:d2:02:f8:5d:68:6b:67:
                    b9:82:b3:36:9e:b7:8e:09:ef:0e:c1:79:64:40:7f:
                    3e:05:b0:89:b8:1c:a2:7f:ea:33:81:5b:c2:de:ec:
                    76:c9:1b:fb:9a:7f:42:5e:3d:5f:eb:4d:71:5f:51:
                    30:42:43:ef:a6:1b:da:80:57:36:86:bd:45:76:4f:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:9A:CD:57:DF:31:8B:BD:16:5E:0A:F3:BB:15:3A:5F:58:A2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.132.0/24
                IPv6:
                  2607:f3a0:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:72:29:1a:7e:8b:e1:6b:d5:ae:71:e0:69:bd:31:fd:e5:74:
         a0:15:22:18:f3:52:47:aa:32:8e:e5:36:91:7b:93:c2:eb:5a:
         83:4c:9f:32:f8:ae:23:14:c5:06:eb:ae:f7:e9:02:1e:cc:6d:
         ac:79:32:ec:21:33:8d:e1:1c:f3:b3:4d:21:16:fb:8d:1e:c4:
         87:24:4d:fa:7d:79:8a:6d:67:4c:2a:3d:72:96:20:da:63:b2:
         3f:bc:e3:45:d0:44:cf:a2:8f:41:f7:16:a1:8d:7a:80:8f:51:
         d8:c4:20:ab:bb:5b:2b:79:ea:53:3c:c2:e7:e8:f6:f6:41:f3:
         9c:6d:a8:68:44:27:d3:d2:d0:a5:7d:88:ed:be:83:70:b4:2d:
         af:f4:10:21:95:18:32:f9:09:da:b9:40:5c:2a:4d:06:43:2c:
         b3:b2:1b:f7:a6:b2:67:a9:bb:87:14:53:eb:14:ae:ff:43:4e:
         5a:55:f6:d2:fa:54:c6:46:71:1e:70:b7:d7:ef:05:d8:c7:29:
         d9:d8:05:a8:0b:6c:8a:ad:6d:1f:b0:63:9a:62:3e:9c:0b:f7:
         11:69:73:17:af:83:26:e5:e0:7d:a8:21:e5:39:70:a1:7e:3f:
         f3:c7:fb:22:b9:60:fc:ba:c7:47:94:23:17:05:c4:7c:14:6f:
         b1:89:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:25 2025 by rpki-client