Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/92c0924c-f1c7-3b7e-914a-6e2ec23a0fa0.roa
File:                     92c0924c-f1c7-3b7e-914a-6e2ec23a0fa0.roa (raw, json)
Hash identifier:          wnAmhwhSKsSxdGOV2+iEMSEq8WK3kJ4qXyuP3SrSF5Q=
Subject key identifier:   67:83:1A:7B:15:06:80:45:3E:D9:BC:42:DD:3D:CA:CF:D8:E7:C2:8C
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F43285844F19AA8B9A6D52ACA42282400
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/92c0924c-f1c7-3b7e-914a-6e2ec23a0fa0.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     62815
IP address blocks:        64.29.140.0/24 maxlen: 24
                          2607:f3a0:a00c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:a8:b9:a6:d5:2a:ca:42:28:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=66cd3727-2fb2-4d72-ba79-402fcb8c30cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:b4:a9:d3:fd:a1:61:fe:a6:14:c9:70:c8:
                    1e:1c:87:ec:8b:e7:ad:7c:e5:b3:83:dc:03:68:f5:
                    ec:4d:0b:a5:0c:b1:4a:0c:30:c0:42:c4:ca:df:3a:
                    29:fb:d4:7f:08:ef:f1:0b:fc:64:29:bd:53:25:56:
                    d6:00:d0:ac:e0:bf:e1:d2:51:af:c0:32:7d:44:ee:
                    d2:f1:1a:e2:53:dd:a7:81:57:e0:45:a0:b1:55:46:
                    de:31:ab:7c:a5:b3:60:07:71:57:a6:84:2b:d5:4b:
                    58:51:50:a3:74:b3:c5:5f:f5:c4:9f:e2:18:86:1e:
                    61:55:6b:5b:f9:51:1c:0d:7d:de:21:9f:29:0c:97:
                    d3:0c:a7:1c:24:24:31:d1:83:08:69:12:69:cd:ba:
                    f1:1d:48:37:5f:d8:b2:2d:bf:ed:9f:79:b9:61:a4:
                    75:e0:ac:6d:fb:09:56:14:99:77:04:89:36:bf:22:
                    a5:af:97:fc:8f:f4:8c:8a:be:e5:86:47:93:32:b9:
                    d7:9e:cd:19:a0:b5:3b:a4:14:3c:ca:f3:1d:ee:a6:
                    fa:bb:3b:fe:bb:c1:96:ac:0a:40:48:e9:0b:c4:c0:
                    74:99:2f:36:f1:6b:46:90:c8:b1:5e:ad:84:b5:a4:
                    35:fa:1e:09:c1:8a:09:7b:d9:df:d6:5f:4f:bb:5a:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:83:1A:7B:15:06:80:45:3E:D9:BC:42:DD:3D:CA:CF:D8:E7:C2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/92c0924c-f1c7-3b7e-914a-6e2ec23a0fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.140.0/24
                IPv6:
                  2607:f3a0:a00c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:29:7b:22:0d:25:47:cc:9c:c4:b5:f6:71:a6:25:a5:bb:
         d9:6e:ca:5a:b4:e2:81:31:1b:18:5b:0f:b9:12:6e:ee:91:ad:
         0d:6c:6e:58:92:17:4a:b0:41:25:1d:80:1d:3f:9d:56:69:ff:
         36:25:ce:f2:8c:8f:d5:55:03:7e:41:a2:f0:52:dc:1a:02:3e:
         48:4c:a7:eb:18:54:b3:5e:a4:17:38:20:53:d2:19:aa:f6:11:
         85:b3:d6:ec:60:7c:92:98:ae:34:41:f9:19:8e:c5:36:1c:54:
         c1:1d:e4:3c:87:15:8d:6a:96:c7:81:4b:b5:56:0d:3c:10:55:
         cb:c4:76:b4:2f:c7:3a:5a:de:12:52:cc:56:01:bd:3f:2a:7f:
         ae:07:79:9c:d7:58:51:73:11:8f:1a:d4:90:4a:61:fc:93:f4:
         6e:c3:12:a9:6e:99:6d:a0:7e:af:93:1e:69:26:3d:07:ed:ae:
         e7:b9:81:f1:cc:89:bb:e1:13:fa:6d:76:e3:37:d2:2f:1c:62:
         4d:1f:30:38:f3:0e:d5:4e:70:c4:b3:dd:29:9e:7e:b1:88:75:
         d1:51:9a:40:34:6e:80:10:cf:63:f9:f4:d6:43:28:42:01:df:
         96:8c:2d:81:70:e8:c1:8a:63:c9:e9:87:0e:d3:ae:c9:5b:7a:
         fa:1f:45:15
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWETxmqi5ptUqykIoJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0
YjczMB4XDTI0MDIxOTE0MDAzMVoXDTI0MDUxOTEzMDAzMVowLzEtMCsGA1UEAxMk
NjZjZDM3MjctMmZiMi00ZDcyLWJhNzktNDAyZmNiOGMzMGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr20qdP9oWH+phTJcMgeHIfsi+etfOWzg9wD
aPXsTQulDLFKDDDAQsTK3zop+9R/CO/xC/xkKb1TJVbWANCs4L/h0lGvwDJ9RO7S
8RriU92ngVfgRaCxVUbeMat8pbNgB3FXpoQr1UtYUVCjdLPFX/XEn+IYhh5hVWtb
+VEcDX3eIZ8pDJfTDKccJCQx0YMIaRJpzbrxHUg3X9iyLb/tn3m5YaR14Kxt+wlW
FJl3BIk2vyKlr5f8j/SMir7lhkeTMrnXns0ZoLU7pBQ8yvMd7qb6uzv+u8GWrApA
SOkLxMB0mS828WtGkMixXq2EtaQ1+h4JwYoJe9nf1l9Pu1rz0QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFGeDGnsVBoBFPtm8Qt09ys/Y58KMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3
MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvOTJjMDkyNGMtZjFjNy0z
YjdlLTkxNGEtNmUyZWMyM2EwZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy
NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh
NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi
MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2MMA8E
AgACMAkDBwAmB/OgoAwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGvcpeyINJUfMnMS19nGmJaW72W7KWrTi
gTEbGFsPuRJu7pGtDWxuWJIXSrBBJR2AHT+dVmn/NiXO8oyP1VUDfkGi8FLcGgI+
SEyn6xhUs16kFzggU9IZqvYRhbPW7GB8kpiuNEH5GY7FNhxUwR3kPIcVjWqWx4FL
tVYNPBBVy8R2tC/HOlreElLMVgG9Pyp/rgd5nNdYUXMRjxrUkEph/JP0bsMSqW6Z
baB+r5MeaSY9B+2u57mB8cyJu+ET+m124zfSLxxiTR8wOPMO1U5wxLPdKZ5+sYh1
0VGaQDRugBDPY/n01kMoQgHflowtgXDowYpjyemHDtOuyVt6+h9FFQ==
-----END CERTIFICATE-----
Generated at Wed May 1 16:33:00 2024 by rpki-client on console-fra.rpki-client.org