Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa
File:                     6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa (raw, json)
Hash identifier:          6HnmjCkjt3ok6ZKBMtQk9CdGkr6C+F2vVz6zVJ27YNI=
Subject key identifier:   BE:A4:BB:23:26:78:C4:5D:9B:C6:3D:0A:0C:A9:8F:D6:CE:EC:57:39
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584827C536BB15AA94747BC46280
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     399808
IP address blocks:        64.29.128.0/24 maxlen: 24
                          2607:f3a0:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:36:bb:15:aa:94:74:7b:c4:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=db538d70-d700-44f6-9a21-a9f03317ce69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:52:74:eb:fe:5d:51:45:b1:6b:a9:b2:78:
                    7c:a3:3c:d8:fe:97:e8:ed:5e:30:c8:76:4a:f9:d5:
                    1c:19:ee:81:db:2b:d8:48:f1:94:93:c6:98:9e:da:
                    cd:2e:a6:d9:5a:7e:d2:f7:3f:75:8e:66:52:f1:0d:
                    03:1d:8e:37:5e:c1:19:1d:ea:b0:23:2b:36:1a:d9:
                    fc:98:74:fb:fe:52:45:5a:00:a5:0f:3c:4c:7b:44:
                    cb:2c:9a:c2:07:48:ac:8f:22:bc:4e:65:c3:11:95:
                    24:13:90:ff:19:25:03:eb:52:d7:05:44:43:85:f8:
                    b5:e1:82:95:a2:38:6c:85:2e:c5:b7:a8:a1:64:ba:
                    45:f3:c4:8a:d1:2b:b5:7c:5c:ce:3f:5b:d8:6b:f4:
                    03:15:32:ef:07:c6:32:e4:0d:0e:ac:dd:0a:7e:0e:
                    f5:30:bf:d2:9b:a1:bd:f9:cf:ed:55:c9:0a:ab:41:
                    2b:84:b1:17:c1:eb:33:39:e0:e3:da:e5:74:a4:f5:
                    f1:ad:b4:a6:c3:76:7b:25:c5:97:3b:60:7f:dc:8e:
                    62:9a:8f:1e:85:bc:8f:49:bb:42:0c:b0:95:ba:b2:
                    3f:24:ee:15:26:8b:63:09:09:6f:1b:83:ba:cd:92:
                    62:f2:cf:0a:16:6a:56:5f:10:e0:20:ef:38:4b:87:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:BB:23:26:78:C4:5D:9B:C6:3D:0A:0C:A9:8F:D6:CE:EC:57:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.128.0/24
                IPv6:
                  2607:f3a0:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:d5:d2:74:3c:82:74:a6:82:09:52:b6:1d:07:78:f6:5a:
         63:e5:9e:c5:05:82:31:c7:54:20:1b:f9:8c:82:88:88:88:7e:
         a4:6c:1c:c0:d6:b5:70:f8:a0:e5:42:8b:f5:02:25:ff:e1:0f:
         d5:05:fe:34:e3:08:dc:a4:62:ab:a8:9f:11:b6:96:65:64:59:
         07:d9:ba:25:60:cb:cf:fd:e6:72:87:17:5c:7a:32:63:06:f4:
         05:db:2d:87:99:f1:ad:94:e1:56:ee:18:94:3a:67:33:cd:66:
         58:dc:6c:92:44:10:d1:97:67:1a:c5:19:5e:14:58:44:a4:56:
         47:26:fa:03:b9:97:8e:81:9f:06:ea:7f:50:67:77:6a:82:66:
         8f:79:e7:16:5b:91:7a:40:55:56:03:2f:a5:39:d4:dc:30:8e:
         77:45:9f:2b:7c:a6:28:30:b0:c2:43:ae:61:60:f6:86:e8:ea:
         83:29:a4:8a:2f:de:ab:e3:0b:43:f2:80:68:5f:65:40:2e:42:
         12:d5:22:2c:ff:d5:78:9f:86:d0:2c:68:58:43:c3:bd:0d:36:
         30:f4:d3:21:79:05:54:7c:25:2c:6f:01:e9:e1:72:85:26:3d:
         83:f5:85:a8:34:75:56:a5:28:c1:a2:36:3e:6a:b7:7f:b1:28:
         da:7a:04:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:49 2025 by rpki-client