Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa
File:                     6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa (raw, json)
Hash identifier:          MwXo4jxYH/0uR1p3BDQ7DKx0wzyU0yVP0h+BX5ro+EA=
Subject key identifier:   C3:93:7E:0A:86:4D:5A:7F:0A:4B:01:8C:D0:DF:9C:D5:F3:5D:DC:C6
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285848F926A5833ECC7130BCB4CB00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     29802
IP address blocks:        200.229.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a5:83:3e:cc:71:30:bc:b4:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=d5651ff7-2bf6-4cb6-8b06-e85b23ef9343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:a9:9d:c7:66:d6:15:04:51:ac:a8:0d:bc:
                    4e:79:f3:d3:89:19:d9:63:d3:9f:61:24:21:34:21:
                    b1:0c:fa:86:61:57:52:2d:71:ea:89:d3:d9:31:9a:
                    16:c0:ee:3f:5f:4e:7a:d2:74:e8:97:77:b3:29:6e:
                    f8:81:aa:1d:0b:c4:a1:ce:6c:f7:7d:3b:34:db:73:
                    c1:16:aa:c9:13:6d:bd:df:85:0f:6c:36:c8:ca:55:
                    74:90:58:29:e9:c3:56:ef:31:bd:85:b7:f5:14:02:
                    f1:3e:d4:d7:1c:bf:82:0f:80:cd:98:74:bc:6d:6a:
                    84:a0:81:3d:6e:b0:0a:f7:f8:8d:5f:f8:d0:5a:34:
                    e4:fc:01:f1:d7:7e:4b:c6:47:eb:e9:9b:de:26:dc:
                    d8:76:62:c6:8c:fe:47:88:37:35:43:3a:7a:d7:e8:
                    8e:46:b9:dd:c7:a9:24:8b:d8:a3:02:96:2c:2c:03:
                    6b:e0:bc:57:9a:f9:fc:da:2f:b8:c6:06:3d:02:34:
                    8e:14:16:fc:dc:df:72:9b:f0:23:c3:8d:72:d6:37:
                    4b:ec:cd:a6:b2:ad:d1:65:c0:85:18:4a:da:c6:d8:
                    e7:a2:a9:43:1e:17:f8:a7:17:ce:a6:3e:8f:50:5e:
                    cc:b3:97:0c:0d:04:1c:6c:16:fc:c2:b5:36:86:6c:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:7E:0A:86:4D:5A:7F:0A:4B:01:8C:D0:DF:9C:D5:F3:5D:DC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:01:f3:eb:eb:49:a6:67:ad:04:24:e5:bd:d7:b7:49:2b:
         47:76:54:f3:3a:05:5b:43:f3:70:40:f8:7d:21:06:26:32:f5:
         84:f2:ee:d8:7d:36:c3:dd:30:42:da:d6:c8:10:36:84:f2:cb:
         a6:67:a1:cc:b9:76:d3:1a:aa:6e:3c:f6:7e:d1:52:ee:26:0f:
         76:2e:a2:bd:61:f1:03:e8:b5:fe:29:1f:4a:9b:74:6f:1b:17:
         f9:cb:4a:b4:5b:a3:87:c9:77:3d:0e:15:64:b9:9a:d9:32:1c:
         65:23:0a:62:3f:50:d5:3e:52:34:3f:0f:c3:49:92:00:e8:1c:
         20:fe:cc:8a:a9:b9:64:0e:ed:c9:b6:70:d3:fa:a2:50:1f:ce:
         59:95:bd:d7:8a:e5:64:73:15:3d:e8:e8:49:c6:07:45:e0:e8:
         ed:78:35:08:f4:fd:67:8b:d4:f1:4e:5c:11:b6:00:5b:38:64:
         15:4e:0c:2d:f0:2f:69:e3:b8:f5:0c:80:ee:d9:27:bd:71:2e:
         03:76:86:68:82:a5:8a:ee:e5:04:03:0c:c3:a9:d4:fd:8c:a9:
         a1:bf:5c:80:b6:3b:ab:ed:93:9d:f3:78:ef:7c:d8:23:02:16:
         41:23:27:65:55:d2:0b:99:c8:81:68:06:93:1d:59:3d:c8:63:
         0c:2a:f0:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqWDPsxxMLy0ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZDU2NTFmZjctMmJmNi00Y2I2LThiMDYtZTg1YjIzZWY5MzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj2pncdm1hUEUayoDbxOefPTiRnZY9OfYSQh
NCGxDPqGYVdSLXHqidPZMZoWwO4/X0560nTol3ezKW74gaodC8Shzmz3fTs023PB
FqrJE22934UPbDbIylV0kFgp6cNW7zG9hbf1FALxPtTXHL+CD4DNmHS8bWqEoIE9
brAK9/iNX/jQWjTk/AHx135Lxkfr6ZveJtzYdmLGjP5HiDc1Qzp61+iORrndx6kk
i9ijApYsLANr4LxXmvn82i+4xgY9AjSOFBb83N9ym/Ajw41y1jdL7M2msq3RZcCF
GEraxtjnoqlDHhf4pxfOpj6PUF7Ms5cMDQQcbBb8wrU2hmx/3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOTfgqGTVp/CksBjNDfnNXzXdzGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNmM3YjdlNzUtNTQ5ZC0z
MmE2LWIzZTktMThjYWQ5MWExNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8fAfPr60mmZ60EJOW917dJK0d2VPM6BVtD83BA+H0hBiYy9YTy7th9
NsPdMELa1sgQNoTyy6Znocy5dtMaqm489n7RUu4mD3Yuor1h8QPotf4pH0qbdG8b
F/nLSrRbo4fJdz0OFWS5mtkyHGUjCmI/UNU+UjQ/D8NJkgDoHCD+zIqpuWQO7cm2
cNP6olAfzlmVvdeK5WRzFT3o6EnGB0Xg6O14NQj0/WeL1PFOXBG2AFs4ZBVODC3w
L2njuPUMgO7ZJ71xLgN2hmiCpYru5QQDDMOp1P2MqaG/XIC2O6vtk53zeO982CMC
FkEjJ2VV0guZyIFoBpMdWT3IYwwq8MI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:49:57 2025 by rpki-client