Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa
File:                     01f758f6-044f-3fd1-9699-892d363d943b.roa (raw, json)
Hash identifier:          /DMRO3OLttmRomhhxrOnAWDRe+VLZYuvqgmvaXoc0sw=
Subject key identifier:   04:51:06:6A:22:4E:09:BE:68:C6:D6:C7:9C:89:40:F9:C7:6A:7D:A9
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584AC876432A4FADBF9753CD5980
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     399816
IP address blocks:        64.29.132.0/24 maxlen: 24
                          2607:f3a0:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:43:2a:4f:ad:bf:97:53:cd:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=5e87c178-367b-4e54-969f-e83cfb94404e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:61:13:1a:d0:ce:5e:f1:89:64:18:de:36:
                    64:97:1c:0d:8a:00:54:af:2f:b2:4f:81:c9:b7:a3:
                    73:11:15:86:7f:75:42:87:dd:ee:06:5c:97:a7:1c:
                    38:79:92:8f:f8:6d:25:41:df:99:14:51:46:d8:48:
                    0c:e6:a3:64:47:7b:20:18:9c:88:7c:cd:99:48:1f:
                    a2:5a:6e:44:46:e4:d8:dd:b7:2a:13:d6:c5:7f:df:
                    f3:16:e1:ae:fc:a6:dc:cb:5a:86:f5:cf:f4:bc:e4:
                    84:65:44:55:5c:01:9b:5b:5e:32:d6:c1:9d:27:aa:
                    eb:b3:a9:e4:9a:35:26:28:a4:2d:88:a4:29:ed:ed:
                    1b:24:be:7d:e7:0f:34:2b:25:c0:53:58:84:b5:0b:
                    70:37:76:09:5b:6a:8c:00:24:d5:6b:7c:2d:31:54:
                    ea:08:62:a8:fa:f1:c0:77:17:02:99:90:93:f2:7a:
                    fa:76:d0:6b:3f:d2:81:d8:c6:bc:d5:3f:ff:f8:cc:
                    4d:47:4c:ce:22:96:1b:51:eb:20:c0:84:b0:2e:ee:
                    86:4f:80:51:71:1d:58:5c:c0:e9:28:1a:06:aa:45:
                    0b:ed:e6:dd:fe:cc:ed:84:0d:37:81:78:67:40:48:
                    e6:01:cf:a0:97:6e:40:4e:0d:dc:af:cd:e1:ac:ed:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:51:06:6A:22:4E:09:BE:68:C6:D6:C7:9C:89:40:F9:C7:6A:7D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/01f758f6-044f-3fd1-9699-892d363d943b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.132.0/24
                IPv6:
                  2607:f3a0:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:e5:8d:e2:84:88:06:8d:be:1d:cf:72:94:17:05:69:86:
         b7:6a:80:b6:e5:10:0f:b7:4a:c4:1c:3f:ac:99:ec:6c:99:7d:
         f2:d2:f6:15:e8:f1:79:55:fa:73:4f:c6:10:e5:0e:3c:77:7d:
         76:ae:c6:a8:50:0f:d7:80:59:22:75:0f:80:02:37:15:10:f9:
         f4:e9:63:cf:a1:fb:dc:88:14:b9:55:90:52:d4:1c:a7:e2:13:
         48:f9:ba:f6:03:56:f4:94:14:c5:e3:58:fb:d1:69:12:7a:0a:
         21:27:ab:3d:a2:90:08:c7:d0:91:89:95:25:e3:48:6b:63:ce:
         0f:30:16:84:98:83:41:87:af:54:80:66:29:96:8c:97:6e:49:
         09:6e:d5:54:a9:65:65:17:da:ff:49:54:0d:ed:50:87:68:60:
         3d:d4:5c:83:b7:86:31:a3:54:9f:46:bc:ec:44:5d:79:5c:71:
         84:d4:68:8b:6a:6d:62:73:6b:1d:47:fd:e3:d6:97:cd:da:8f:
         98:a7:c1:73:f1:75:26:b2:93:ac:c4:65:d4:08:9a:ff:dd:6d:
         65:b6:c0:c6:9b:a7:ec:46:6a:da:d3:d3:7c:aa:f8:30:11:5f:
         f5:52:0d:b3:43:e8:24:92:ec:f8:1c:0d:13:3d:fc:07:8e:14:
         17:94:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:01 2025 by rpki-client