Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa
File:                     6311df43-7573-3728-a24a-2ed5c41a3398.roa (raw, json)
Hash identifier:          4VrvqbJymoxI82/JFmaM+jNeDkc8pYfDu0JAWL49D8o=
Subject key identifier:   0D:14:66:CF:95:52:98:9C:31:27:9B:B2:54:39:06:6A:83:54:FA:A2
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A023FC3D1E51575E8637C8100
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa
Signing time:             Thu 29 May 2025 01:00:50 +0000
ROA not before:           Thu 29 May 2025 01:00:50 +0000
ROA not after:            Wed 27 Aug 2025 01:00:50 +0000
asID:                     272891
IP address blocks:        200.229.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:02:3f:c3:d1:e5:15:75:e8:63:7c:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 29 01:00:50 2025 GMT
            Not After : Aug 27 01:00:50 2025 GMT
        Subject: CN=887e9098-da6c-4c20-8f87-96b90bc6cbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:6d:26:a9:64:5d:2e:af:cc:42:d1:4d:92:
                    89:eb:a9:39:5c:cb:18:da:ea:9e:bf:d4:6c:4d:e6:
                    bd:12:57:a0:18:d2:88:0c:52:08:42:19:7b:7c:b4:
                    16:18:e0:04:8a:3a:a7:a5:b2:83:a5:96:c1:7b:ea:
                    82:e3:a8:24:8c:9c:d7:96:4d:f5:65:9d:32:e9:22:
                    89:fd:2c:c1:e9:22:cd:e9:d1:8b:85:3b:1b:43:53:
                    56:ac:29:57:09:1b:1b:be:0b:47:8a:a6:34:34:97:
                    a8:f0:1a:5b:29:24:d7:20:f9:c0:7a:57:d6:2b:66:
                    ff:cb:9d:35:f1:c4:e6:63:39:e3:a0:2a:1f:6c:b8:
                    a1:59:97:52:ab:34:24:52:0f:ef:6b:e1:2d:5c:d6:
                    b0:a2:10:e2:ef:87:52:89:13:bb:b1:0f:d0:b1:ec:
                    db:73:df:29:cb:b7:d6:c4:5c:ef:84:a5:bb:2e:c2:
                    d0:6b:10:b8:82:2c:1f:df:83:dc:30:91:8d:01:20:
                    fd:7d:1c:15:ac:3c:65:52:56:21:02:ba:80:60:d1:
                    c5:cb:18:11:f7:f8:6e:5b:6b:1a:a2:b4:d0:a1:0e:
                    dd:3e:a9:8a:85:42:e1:5c:13:6d:c5:fa:0c:bb:8a:
                    49:9d:3f:f9:ea:6c:77:18:c7:90:ae:73:ad:0e:3d:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:66:CF:95:52:98:9C:31:27:9B:B2:54:39:06:6A:83:54:FA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6311df43-7573-3728-a24a-2ed5c41a3398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:72:40:fb:75:e5:9b:72:7c:1c:4b:2e:f6:49:61:e0:0f:07:
         a4:39:32:5d:fb:86:fd:5a:27:14:96:ce:b3:11:87:1e:29:41:
         c5:02:2d:b2:b8:2b:f0:b3:88:b7:e7:05:be:95:c9:9f:16:cf:
         76:a2:dd:fc:c2:96:b8:bf:58:62:3c:be:0c:db:55:b2:7c:92:
         89:41:4b:0e:f3:be:91:b8:07:c2:cd:7c:b9:4c:3f:c2:00:f5:
         78:46:27:85:88:6b:5a:50:a0:96:e2:b1:b7:43:0f:2a:e6:5b:
         e0:98:7e:12:4e:a4:2d:4d:ca:f4:2e:d9:93:32:7d:a9:6a:1d:
         72:21:99:22:6c:2f:49:4e:6d:bd:06:5f:62:78:ec:46:fe:cc:
         da:b2:a0:f8:96:8b:3f:6a:4a:5b:48:b4:19:fc:ed:e5:3f:38:
         b7:38:ae:fb:0a:66:ca:ba:c3:ef:94:bf:f0:4e:5e:d4:75:ab:
         37:09:42:41:4d:12:7b:2e:2e:20:db:c5:36:15:2a:4c:bb:2c:
         52:ef:4d:a8:6b:5b:d3:bf:f0:5c:3b:02:dc:73:d8:75:f6:82:
         2c:12:45:b6:01:96:d6:11:2e:8f:28:ae:2f:f8:ff:28:c5:2f:
         12:21:91:4f:d1:db:b5:e2:96:15:aa:9b:07:2f:71:92:b1:f8:
         5c:9e:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:30:37 2025 by rpki-client