Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa
File:                     c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa (raw, json)
Hash identifier:          Of2ilrNYbhWkGbpTb8NZz92RQeZOutnJLrJdkixUf58=
Subject key identifier:   45:56:5B:D5:3E:09:21:E6:BD:9E:CF:60:8B:24:7B:89:BD:8A:3E:38
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F43285842081827D2817211D02FE0C9C0
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa
Signing time:             Sun 28 May 2023 13:00:19 +0000
ROA not before:           Sun 28 May 2023 13:00:19 +0000
ROA not after:            Sat 26 Aug 2023 13:00:19 +0000
asID:                     399813
IP address blocks:        64.29.135.0/24 maxlen: 24
                          2607:f3a0:a007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 May 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:08:18:27:d2:81:72:11:d0:2f:e0:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: May 28 13:00:19 2023 GMT
            Not After : Aug 26 13:00:19 2023 GMT
        Subject: CN=7cb3a6ca-c9da-447c-a30e-70dde732bce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:58:d5:cb:54:33:6e:86:38:2e:b2:d3:9d:
                    8e:82:89:99:5f:55:ba:43:8b:e8:b9:be:72:d3:00:
                    46:48:ea:62:24:72:16:cf:b5:2e:ac:fb:ef:fb:19:
                    f8:73:f1:e4:2e:64:f3:19:a9:c5:72:dd:09:4c:7c:
                    53:8a:e3:dd:8b:b5:d2:f3:9e:f1:b9:1e:5e:37:c5:
                    2b:d1:bf:9f:41:35:a3:37:21:de:4a:01:e6:96:6e:
                    ef:76:9f:59:b8:92:45:da:81:f0:7a:c0:f7:94:58:
                    60:71:02:47:78:c2:e4:b3:44:3c:0e:ce:6a:02:38:
                    d0:a9:85:af:49:ae:1e:ec:e1:c7:27:d8:36:3b:73:
                    6a:e6:4e:e5:2a:01:a1:50:0e:d5:ea:a5:4d:2e:f2:
                    cf:6a:44:4c:ae:ac:43:cd:3e:0e:12:58:03:ac:b8:
                    8b:8b:5f:16:77:26:a2:4c:16:8d:56:c8:d2:d1:2c:
                    89:a2:cc:2c:30:6c:a3:11:ad:e3:53:bb:d0:fa:9d:
                    4e:59:e3:c7:15:8f:8b:fa:4c:85:f4:af:0f:d8:aa:
                    56:97:6f:0d:f5:64:99:63:12:ca:4f:d1:c3:42:b9:
                    76:8a:53:18:6a:41:7a:ce:62:e4:69:d4:82:c0:5d:
                    57:31:35:33:99:eb:52:52:9d:dd:e0:17:ec:74:2b:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:56:5B:D5:3E:09:21:E6:BD:9E:CF:60:8B:24:7B:89:BD:8A:3E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.135.0/24
                IPv6:
                  2607:f3a0:a007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:79:3b:ce:3c:95:8b:6f:98:bb:36:17:82:53:bd:21:fc:2d:
         09:09:2f:bd:5a:0a:3f:f5:17:da:d2:60:ba:05:2f:2d:fc:ee:
         7c:ea:c1:f1:4a:ef:b8:70:e4:36:12:da:0d:67:15:e8:53:03:
         ce:56:a9:f2:a5:89:7e:51:fd:ee:3e:d9:05:8b:9e:cf:66:10:
         cc:63:b9:b0:9f:5c:45:41:aa:aa:22:09:29:37:53:a4:52:cf:
         a5:1d:61:12:15:95:eb:3a:d7:f5:65:ad:ab:bf:cc:00:40:ea:
         a2:48:b4:4d:89:f0:05:a6:80:72:6b:85:09:b2:7e:45:c6:bd:
         32:34:10:41:a7:c3:6a:a9:e5:c6:07:b2:f7:2b:9c:98:3e:0b:
         f9:7e:6f:95:9f:2e:28:a1:82:c3:90:02:4b:7c:52:0c:6b:c6:
         e5:2a:f5:14:dc:de:28:95:e8:38:ff:68:40:a3:21:2f:73:2a:
         a5:9e:44:44:7b:bb:9e:af:59:b6:c9:ed:09:45:2c:2a:8f:ff:
         0d:44:ac:75:b2:20:79:04:5b:e3:72:6a:a2:4c:53:38:10:e5:
         14:8d:8a:d5:ad:70:c9:5f:85:e7:47:65:e4:2b:27:ff:38:98:
         6c:b6:e0:9a:3c:a4:c1:a7:4c:01:08:fc:e8:58:0d:fe:21:1b:
         61:f6:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 28 13:40:05 2023 by rpki-client on console-fra.rpki-client.org