Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa
File:                     6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa (raw, json)
Hash identifier:          4r6dPOZjxwjWp8LpEssxMKKSMwBvJXA2XbpgNQo7jNc=
Subject key identifier:   1A:2D:81:81:4F:76:56:75:4B:59:D5:3A:88:B2:E3:36:95:5F:89:CF
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584208182729649F905C92ECE780
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa
Signing time:             Sun 28 May 2023 13:00:19 +0000
ROA not before:           Sun 28 May 2023 13:00:19 +0000
ROA not after:            Sat 26 Aug 2023 13:00:19 +0000
asID:                     399808
IP address blocks:        64.29.128.0/24 maxlen: 24
                          2607:f3a0:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 May 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:08:18:27:29:64:9f:90:5c:92:ec:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: May 28 13:00:19 2023 GMT
            Not After : Aug 26 13:00:19 2023 GMT
        Subject: CN=49d522b0-d970-4f2c-8e60-4ac4e292174c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:95:51:64:e6:3c:2f:9e:41:22:af:70:33:
                    b8:2a:d2:fa:2b:7a:c5:22:ee:fe:c4:d7:cc:af:48:
                    2c:1f:0c:ed:42:bc:9e:87:14:36:79:5b:02:bc:8d:
                    b5:6c:4d:73:d6:b1:76:47:9f:c8:a0:d5:cc:ef:fd:
                    4e:97:32:55:4d:13:78:d2:a9:99:44:1d:ca:ea:6f:
                    af:e0:09:27:6b:cd:d5:12:52:4d:8e:39:11:f4:0a:
                    4d:bb:80:7d:05:57:04:33:9a:e3:05:63:46:21:49:
                    c4:30:92:90:11:da:4a:63:fb:26:cd:74:b4:16:ed:
                    2d:09:ab:9a:0c:85:eb:9c:fb:19:fc:ea:1b:f0:eb:
                    f8:c6:a0:13:8c:21:0f:1b:b0:63:6a:e5:cc:e1:37:
                    30:3c:20:5c:b1:d9:cc:4f:f6:6d:2f:1a:33:55:81:
                    d6:f2:ce:3c:de:4e:37:90:e5:df:2c:2b:71:fb:1f:
                    3c:a9:65:3f:63:c4:52:43:0c:87:bb:85:50:09:b1:
                    37:bc:8f:ca:60:a8:0b:f6:33:16:0f:70:96:4f:ad:
                    9a:a2:6b:31:14:20:a8:b1:c1:36:c7:90:d8:e5:c6:
                    7e:ac:ae:9b:09:1b:fa:bd:ce:b9:40:bf:58:f1:f6:
                    61:39:49:b5:7a:9e:1a:0b:db:12:57:ca:76:6d:a6:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1A:2D:81:81:4F:76:56:75:4B:59:D5:3A:88:B2:E3:36:95:5F:89:CF
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier: 
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.128.0/24
                IPv6:
                  2607:f3a0:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7a:5b:a2:fe:98:b7:d0:e7:48:28:9a:e8:41:d4:fc:c1:18:
         45:ae:e1:9f:b2:d4:34:94:63:09:e4:45:6c:99:3e:70:bb:bc:
         b1:7f:04:ef:dd:4d:7a:37:e8:92:52:a2:03:e8:f8:d1:10:09:
         2d:33:7e:fb:99:10:8e:e8:69:9d:44:2b:6a:19:2a:e1:b1:9e:
         2d:3d:35:4d:5e:df:24:30:67:42:ae:85:7b:d5:49:31:2e:6b:
         e9:fe:f8:b0:4a:9f:78:e2:cd:fe:16:0b:0d:bd:bf:45:6d:3b:
         70:9a:03:8a:50:4b:d4:ab:08:5f:50:13:72:6d:db:5a:2f:a8:
         a7:4b:e0:01:b8:a8:e0:7d:7d:9d:85:70:84:a1:19:6e:16:42:
         4b:be:3e:0c:d4:d6:ba:62:40:a7:2d:73:f7:59:d0:fe:90:3a:
         d9:5a:cc:23:3e:57:49:c1:38:b9:0f:0b:f8:08:09:1a:91:87:
         8b:9c:dd:92:5f:03:a5:47:e6:ed:f0:1f:bd:23:69:d9:ee:12:
         04:01:ea:26:5b:fe:1e:0e:45:fa:20:9d:bb:80:34:b7:55:f1:
         19:e0:79:53:f5:b6:ab:96:5c:a9:14:7f:00:56:26:b8:5e:84:
         12:ab:56:a6:e2:00:af:4f:75:bd:2a:f4:45:2f:15:26:fd:4e:
         82:47:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 28 13:48:49 2023 by rpki-client on console-ams.rpki-client.org