Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/31aded7d-bf00-3924-aece-1f4272d4d124.roa
File:                     31aded7d-bf00-3924-aece-1f4272d4d124.roa (raw, json)
Hash identifier:          4ol8pv1RyrDtzE2irakAc/5U99bqzjffgDZfCZLDoNI=
Subject key identifier:   96:68:9B:CB:14:20:EC:45:3F:63:0B:33:E2:BA:27:5A:5C:89:0A:98
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584827C549F0737E2D3EF7603620
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/31aded7d-bf00-3924-aece-1f4272d4d124.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     19437
IP address blocks:        200.229.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:49:f0:73:7e:2d:3e:f7:60:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=befe9ec8-cd9a-4dc6-b81e-66f57a4be103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:9a:0f:b7:e2:a6:e9:69:c7:14:66:b0:d6:
                    89:08:02:c7:3e:52:0a:8e:4e:c2:43:59:b1:2d:2e:
                    77:0c:81:6f:6d:c2:5e:42:c5:44:c6:76:00:bb:97:
                    9f:b3:38:26:bf:6f:cd:3a:64:f8:f7:06:3a:ff:36:
                    24:ac:95:6c:e0:91:ce:b3:1e:31:de:89:ed:b9:00:
                    e9:aa:ab:af:b7:f8:3e:df:e5:35:f3:91:25:f4:a3:
                    39:a4:ed:a2:b7:02:4a:1d:b7:2f:ea:52:6a:1d:11:
                    d6:e5:30:bd:61:9e:f6:f9:8b:8f:5d:36:45:25:32:
                    b4:7d:da:9f:3e:64:60:21:33:ba:fa:4f:6d:ed:54:
                    67:04:a4:4a:7e:56:67:a7:80:ad:5d:8c:50:a5:21:
                    22:84:02:92:83:a5:0d:62:d7:d1:ec:b5:0f:e7:7e:
                    fc:06:65:7a:06:53:78:25:5d:e2:d9:77:f2:b1:76:
                    51:b0:51:0b:de:e0:99:cc:5d:35:8a:ea:99:a4:65:
                    89:30:8b:04:74:01:60:02:25:8d:04:aa:f1:49:cf:
                    6b:b5:ae:cc:73:51:8a:dd:10:b8:4a:3c:a3:62:39:
                    aa:6d:2e:3d:c3:fd:ac:13:ef:03:cd:2e:67:6f:a3:
                    bd:b1:05:a0:19:ef:f3:a8:f2:37:64:c4:82:32:05:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:68:9B:CB:14:20:EC:45:3F:63:0B:33:E2:BA:27:5A:5C:89:0A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/31aded7d-bf00-3924-aece-1f4272d4d124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:54:eb:59:7a:84:0f:1f:55:58:a1:1f:64:e7:33:74:75:75:
         ed:ab:19:9d:83:b5:3f:11:9f:92:28:46:aa:2a:52:9f:db:d0:
         5d:e9:bd:cc:f8:5a:e3:a3:0d:e9:d4:98:fa:1d:89:2d:ee:87:
         7d:2d:f8:d4:6f:b1:32:18:4c:95:75:8f:91:34:78:8c:49:f7:
         a6:aa:7a:1a:ed:cb:2d:48:66:72:fa:36:a6:0b:3f:bb:42:76:
         bd:be:8f:10:fc:89:54:25:a7:30:39:7a:2a:51:dc:55:a5:2d:
         45:3e:13:44:4f:45:e9:12:dd:b8:9b:60:19:1f:82:7f:6d:ad:
         05:94:54:7f:d9:65:28:49:e1:6b:46:b4:f7:96:d5:e3:14:bf:
         10:07:8c:03:0a:23:90:60:9e:6b:ee:5e:62:ee:f1:53:95:c7:
         c0:b6:2a:4f:d2:f1:47:ad:81:96:a9:d8:1b:9d:0a:05:97:a1:
         cd:68:e5:1b:26:d6:94:69:f9:60:6b:e7:eb:4a:9b:39:be:4a:
         c3:3b:89:76:e3:b0:b7:bb:6b:70:4c:58:a8:80:3a:66:f7:8b:
         55:0e:aa:79:01:50:22:ba:01:ee:87:c5:04:6e:e9:f0:a7:8c:
         f8:cf:59:94:11:58:e9:8d:e3:19:bc:41:37:70:28:96:57:f2:
         60:b6:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:23 2025 by rpki-client