Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa
File:                     c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa (raw, json)
Hash identifier:          yac+vcPx8qUaHD9+0UR3WxAS2+lH7f78idVXDWY3Uls=
Subject key identifier:   39:20:A4:01:A1:A7:54:B9:8C:55:44:B3:D2:C6:79:12:90:40:0C:95
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584AC876436BDCCBE60FD1A26AC0
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     399813
IP address blocks:        64.29.135.0/24 maxlen: 24
                          2607:f3a0:a007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:43:6b:dc:cb:e6:0f:d1:a2:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=c85eb529-d47b-44c3-a1ce-55cd03bdd16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:96:b4:05:1c:9c:73:62:ef:02:a7:5c:c9:
                    2f:b1:ad:0a:d5:a4:70:df:03:34:7b:13:82:72:61:
                    6f:4d:6c:9b:a9:29:de:be:75:46:8c:61:46:8c:d1:
                    95:9e:14:da:af:55:69:ee:b4:b2:50:da:0d:1a:15:
                    2d:c2:71:92:71:81:5c:f6:70:ef:6a:16:d6:5e:6d:
                    79:5d:bb:94:68:d2:35:98:10:9e:5d:b4:94:e3:7e:
                    8b:9b:72:19:89:c4:d1:5b:a5:09:5c:fb:6c:8e:65:
                    ea:4f:92:62:62:d1:8c:8d:ae:ba:7d:d4:e8:2b:f2:
                    cc:f8:8b:35:55:bf:68:1e:59:7e:32:f1:47:f6:93:
                    a0:28:38:4c:a9:cb:51:b2:6d:51:64:10:0f:ca:dc:
                    80:23:cc:8a:60:b1:23:97:cf:0b:1e:84:7b:1f:dd:
                    1e:d6:89:41:ea:c3:0f:cb:fd:37:1a:5d:26:31:3f:
                    97:90:09:19:8d:73:50:fe:d4:ba:36:a3:48:98:01:
                    8e:91:d5:9d:06:53:75:85:6f:d8:14:5d:fb:48:1d:
                    60:06:64:f2:e8:52:f0:2f:4f:62:1c:ce:a2:69:f9:
                    9f:c6:ea:1c:20:3a:99:b8:b1:92:6a:6a:a7:f1:22:
                    f2:ed:45:e1:1e:96:62:1d:87:d9:ab:55:79:f0:3f:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:20:A4:01:A1:A7:54:B9:8C:55:44:B3:D2:C6:79:12:90:40:0C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/c8801ec7-10ad-3638-a8b2-90ad8308a92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.135.0/24
                IPv6:
                  2607:f3a0:a007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:ec:d6:58:85:d6:c8:d8:59:6a:46:18:e1:05:c7:bb:e0:
         5b:b0:6b:0c:04:b8:e5:12:ad:5a:f8:2e:66:5c:c8:b8:fd:e2:
         dd:9e:9e:8f:04:41:ed:74:6f:cd:61:f1:a2:0f:e8:90:58:54:
         f9:6d:b5:ce:59:f4:07:36:59:e0:ca:6d:bb:3d:50:40:97:2b:
         31:b4:63:9e:9a:30:7b:c8:88:4d:cd:ea:9c:69:94:ab:83:92:
         cb:b6:45:96:58:8f:2e:48:70:47:26:65:7b:0b:19:41:f7:6e:
         bc:5f:09:c2:c5:45:02:4e:5e:21:90:e8:b8:67:da:33:7f:28:
         6f:b3:f6:a2:9a:56:74:3d:14:6e:f8:02:f0:56:f8:73:82:f7:
         71:b0:4c:a1:8c:35:67:f4:b3:34:d6:12:9e:e6:92:b4:73:85:
         3d:d4:65:5d:c7:e0:52:ad:6e:c2:7c:4c:b3:4f:aa:3d:a8:40:
         9a:b1:6b:f5:5a:08:f5:e7:dc:f4:a9:0e:41:e7:8b:fe:34:2c:
         b7:dd:61:26:a9:4b:5e:f4:79:47:4a:e6:36:a6:f6:cc:ab:09:
         63:0b:e6:3f:96:8a:e8:88:54:80:29:7e:cc:99:5c:8c:3d:8f:
         e1:2e:09:30:3b:d0:93:04:fa:aa:b1:89:9d:ea:55:16:e2:16:
         f7:ec:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:38 2025 by rpki-client