Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
File:                     15f75e85-b2fd-3814-915a-0e36851d49a1.roa (raw, json)
Hash identifier:          wAmK+yujzIXo84FrM/lEr7eynKatffwcx3y+lEgdNXY=
Subject key identifier:   01:7B:18:68:51:B2:43:4E:4E:D1:F0:A9:3B:9E:09:A5:BD:26:E9:3C
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F43285844A79F8038BC8F4AD9715120C0
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa
Signing time:             Wed 24 Jan 2024 02:00:26 +0000
ROA not before:           Wed 24 Jan 2024 02:00:26 +0000
ROA not after:            Tue 23 Apr 2024 01:00:26 +0000
asID:                     399812
IP address blocks:        64.29.136.0/24 maxlen: 24
                          2607:f3a0:a008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a7:9f:80:38:bc:8f:4a:d9:71:51:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Jan 24 02:00:26 2024 GMT
            Not After : Apr 23 01:00:26 2024 GMT
        Subject: CN=36d7bde4-5385-4386-a97b-6315511055f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:d5:e5:50:5e:0d:ee:55:37:45:ba:f9:d8:
                    11:d4:ea:42:88:82:66:89:1d:23:0a:da:b4:88:04:
                    9f:94:8d:ad:1d:5f:f9:18:a5:0d:1c:47:df:7b:5a:
                    c6:4a:84:6f:dd:40:47:36:3d:d7:52:80:a0:96:4f:
                    46:c7:62:19:67:49:6e:bb:16:21:57:27:40:ab:29:
                    cd:8c:fa:70:13:89:4d:89:ae:c2:d0:c2:f7:f1:4f:
                    b8:6f:a7:f8:0e:41:19:d9:26:40:9f:d1:da:45:a9:
                    2d:a0:7e:9d:01:69:5e:40:3e:dc:a1:97:6d:40:b7:
                    fd:8a:8c:fd:4d:b0:73:01:a9:b2:b0:a1:86:90:aa:
                    70:25:79:90:8e:7c:b8:dd:24:84:8f:25:da:12:d2:
                    28:59:fd:48:76:fd:2b:bc:49:14:8c:cf:56:9b:83:
                    4a:5a:e1:f4:85:14:93:e1:f9:31:6c:40:e0:89:ef:
                    5f:73:db:fb:14:f1:f9:95:1b:03:27:95:76:ff:62:
                    ad:70:75:69:9a:b7:f4:bd:a7:c9:55:05:bb:a9:eb:
                    5c:30:e8:db:00:c2:90:b1:b8:a1:e7:b1:41:cb:57:
                    a0:17:60:01:f1:70:d4:e4:2f:40:4c:93:b5:6e:f4:
                    bc:b0:f5:f3:f3:ca:b2:76:10:1f:0e:7d:8b:bf:50:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:18:68:51:B2:43:4E:4E:D1:F0:A9:3B:9E:09:A5:BD:26:E9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/15f75e85-b2fd-3814-915a-0e36851d49a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.136.0/24
                IPv6:
                  2607:f3a0:a008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:8d:82:2e:61:62:18:42:a1:c4:33:d1:85:d6:e6:fb:b5:
         c8:8f:df:0e:94:7e:74:04:68:bf:56:97:31:76:cb:21:dd:c2:
         05:6d:16:9c:34:67:92:02:ed:21:87:3c:ac:91:ce:87:42:bd:
         33:96:c4:d1:37:0b:60:23:78:ff:b4:44:60:71:5a:0f:02:66:
         b2:ec:b4:b0:3e:3e:1c:1f:95:e6:38:24:5b:27:e1:b2:e0:ef:
         da:4c:58:3e:49:fc:7e:23:ba:9f:df:46:15:78:1f:e9:01:f0:
         52:b2:c9:24:2a:0e:ed:55:d5:8a:bc:33:5c:9e:59:f3:7c:40:
         e3:62:af:9b:81:fb:34:49:20:1c:f4:0e:1e:36:a0:0c:bf:0e:
         8f:fe:94:c8:c8:b1:59:43:0f:f6:21:36:67:56:b6:39:4d:2f:
         f0:89:2d:da:8b:e1:72:f6:4a:67:fb:fb:37:77:bc:96:51:07:
         e2:2f:44:29:ca:f5:e0:33:35:dc:fc:11:99:8c:57:07:40:1c:
         b1:6a:c4:11:a9:e5:62:13:17:52:8e:4d:e6:58:d4:17:0a:89:
         ea:d1:c1:68:ca:ad:3d:5b:99:4e:6a:42:dd:40:fd:97:5d:e2:
         2f:93:ae:5c:6a:e9:cd:70:47:2a:98:55:67:14:3b:83:71:25:
         cc:19:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:15:05 2024 by rpki-client on console-fra.rpki-client.org