Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4bcae706-7d9d-3970-88b8-642d19ac619f.roa
File:                     4bcae706-7d9d-3970-88b8-642d19ac619f.roa (raw, json)
Hash identifier:          wwCF76APZ8GVh4sEqIGt8q12qSIkgPPJmOKdA7NCpIQ=
Subject key identifier:   B6:A0:EF:CC:A9:66:39:3A:B8:75:A4:A8:97:D3:8B:1B:20:22:D4:6E
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858485CD029F08EBBC3B16F3C8F00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4bcae706-7d9d-3970-88b8-642d19ac619f.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     6939
IP address blocks:        200.229.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:29:f0:8e:bb:c3:b1:6f:3c:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=0f19d1cd-7f9b-4541-86f9-6711f10dcd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:76:94:f1:ae:44:b7:8f:5c:8d:6f:e9:63:
                    34:48:96:2c:4b:32:ff:2f:be:78:09:3d:da:67:1f:
                    01:fe:49:2d:6a:f3:cc:42:da:c3:93:2e:42:da:bd:
                    ec:9d:9f:cb:6b:4a:24:90:30:fe:66:0a:03:a2:4e:
                    6f:e1:b4:1c:bd:6e:1a:dd:59:ae:b3:6a:19:2d:80:
                    77:e7:4d:fd:01:0c:47:4e:ca:77:bd:ab:07:8d:5a:
                    d2:e7:fa:ca:bc:36:9d:49:b7:52:17:3b:05:e1:5a:
                    d0:2e:11:75:55:f1:8d:2e:45:44:8a:d1:92:cb:b9:
                    75:e1:44:f9:4f:df:a4:3a:df:54:15:36:00:49:f1:
                    f7:4b:fa:4e:d2:f1:ed:f9:0a:00:13:c1:d7:7e:5e:
                    27:d8:bb:d2:e6:12:99:e7:58:64:68:c0:21:6b:55:
                    e5:7f:b1:7d:e9:fa:37:d5:d3:2d:6c:d7:5e:76:d5:
                    6b:a2:2c:1b:e7:45:89:cc:28:33:3b:10:ea:5f:97:
                    b3:07:87:57:6d:a6:d9:b2:2b:9b:3b:c8:9c:97:18:
                    c5:d8:bf:31:48:f9:58:c0:56:d2:fe:a5:1b:f3:b3:
                    6e:d8:d6:4d:1e:7c:d8:43:a2:56:c4:fa:38:41:86:
                    76:74:b8:5b:cd:ff:8d:04:ce:11:b9:df:37:c5:58:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A0:EF:CC:A9:66:39:3A:B8:75:A4:A8:97:D3:8B:1B:20:22:D4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4bcae706-7d9d-3970-88b8-642d19ac619f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f4:a0:ad:47:f6:96:2d:ae:c6:fc:05:92:1d:50:b8:81:c5:
         c7:8b:2a:71:27:0b:d3:1f:91:c6:07:3d:5f:35:19:7e:f3:3f:
         32:c9:84:33:1c:ab:6b:1c:f0:98:7a:50:d5:1e:8e:fa:a7:00:
         9d:52:aa:b5:d5:2b:4d:c5:fd:70:e2:84:27:00:04:92:60:9b:
         2d:c2:b8:38:e6:aa:75:5c:54:06:22:7a:54:53:41:9f:db:8e:
         ff:b3:38:06:49:a3:d6:bf:6c:6f:85:93:3d:37:47:bb:ce:a2:
         29:69:b0:ad:c0:9e:5c:69:e6:6e:b7:f0:ef:dd:07:0f:4f:d5:
         1c:11:b7:35:6a:86:be:6b:57:82:5f:00:3d:26:59:43:ee:8b:
         34:db:31:89:f4:f9:39:b8:da:da:37:1e:01:0a:6a:87:32:d4:
         88:e1:5c:72:ab:c1:78:89:39:99:53:98:62:ec:2a:f0:1d:4e:
         60:b6:93:25:12:d5:6e:fb:f9:26:54:50:94:f5:7f:ad:43:f3:
         31:49:66:57:fa:e4:34:83:b9:09:8a:8c:12:51:ab:27:db:11:
         35:b2:96:6d:0d:85:01:d0:d3:9c:ac:6d:b0:61:90:13:ca:9a:
         6c:5e:80:21:54:a7:c5:9b:00:01:4f:4f:71:2c:cb:9f:99:bb:
         b9:e8:06:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:47 2025 by rpki-client