Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa
File:                     6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa (raw, json)
Hash identifier:          y5UG4NBPVrT2zVOzS6DleC2lJpc/8LK1JE0ePbb/5Do=
Subject key identifier:   25:8E:19:9D:0C:E9:55:07:EE:F7:5B:44:57:87:8E:45:7E:8B:AF:B1
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285849D85F90A20049E1B9C8981430
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     29802
IP address blocks:        200.229.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:90:a2:00:49:e1:b9:c8:98:14:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=c85422d9-b0d6-4505-b2ea-47957aec71c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:8b:c5:72:2f:e0:90:21:06:a2:8c:1a:0d:
                    53:6e:03:a7:67:b1:b1:5a:2d:22:b2:63:ae:cb:77:
                    ac:5a:c8:cf:d0:c9:75:75:a2:81:fa:5f:2e:48:8d:
                    47:46:89:ba:3c:ad:32:31:74:a5:cb:14:c9:ea:60:
                    1e:fe:83:0b:87:43:a7:5a:36:76:d1:9f:d1:0b:c3:
                    55:7d:60:76:8b:fd:ba:9f:c9:d8:44:04:d4:ce:f0:
                    67:1c:4b:f0:88:a4:b0:13:af:04:24:24:2b:46:7f:
                    5f:36:9d:d2:dc:b1:45:7d:4b:7e:48:78:34:14:c9:
                    13:9e:35:69:07:94:8c:7b:34:6b:c8:a9:19:16:c8:
                    b1:9e:05:a8:e5:ec:e1:7c:30:74:ab:d2:64:72:ad:
                    38:4c:a1:06:d6:94:e8:ae:41:e1:ff:63:4d:a9:e1:
                    80:e8:2c:c8:73:3e:4a:aa:08:93:bb:a6:99:d4:6f:
                    6d:13:37:43:20:2e:1d:3e:d6:5f:3e:1d:fd:22:94:
                    e5:44:cb:fa:5b:3b:ac:93:38:ea:e8:b6:6b:15:9e:
                    0f:9f:8d:02:26:0d:5c:ba:44:67:41:5d:54:2b:7f:
                    7b:3c:77:d7:10:fe:ad:51:68:7f:b3:b2:ae:ca:85:
                    f9:6e:c3:22:8e:c9:e2:54:6c:57:3b:c6:0f:47:07:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:19:9D:0C:E9:55:07:EE:F7:5B:44:57:87:8E:45:7E:8B:AF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6c7b7e75-549d-32a6-b3e9-18cad91a1484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:24:aa:6c:7f:ab:4f:1a:40:25:69:eb:42:75:76:ce:1d:
         39:97:65:92:05:e6:3b:4c:64:7b:8e:f0:cd:39:77:01:fa:b1:
         df:32:cd:46:10:77:d4:15:84:f7:75:8a:bd:c5:af:a9:55:98:
         ea:7a:92:a6:48:35:49:28:02:0c:ad:14:82:ae:84:be:39:03:
         e4:e4:73:f2:aa:4d:84:a2:e2:60:b2:b1:93:9a:1b:8a:10:94:
         18:96:48:ce:46:ca:47:a3:c2:e1:3e:a8:1d:99:85:ca:fe:a9:
         97:26:7e:2e:66:ba:da:ce:ef:d5:8d:30:bf:1a:ef:14:50:c5:
         b0:c7:1a:87:62:5d:1b:e2:29:78:39:36:ee:ae:14:2b:4f:c2:
         be:16:8a:d5:42:de:36:4d:87:02:70:7a:9e:f4:b4:64:45:4e:
         02:03:42:a7:92:86:31:66:7c:40:92:35:ac:2e:1b:ff:5a:70:
         10:a3:63:11:3f:f3:d0:e0:e1:ba:7f:27:df:25:52:4f:45:44:
         09:73:ff:46:ab:4c:d2:14:a4:6a:9f:69:6e:70:97:33:99:5b:
         0b:85:0a:a5:c0:65:9d:be:15:e6:e9:e0:bb:30:1e:46:64:9c:
         cd:42:e1:9f:45:18:05:4b:b1:16:83:f4:c1:9b:a7:58:a3:37:
         b4:28:69:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5CiAEnhuciYFDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
Yzg1NDIyZDktYjBkNi00NTA1LWIyZWEtNDc5NTdhZWM3MWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZuLxXIv4JAhBqKMGg1TbgOnZ7GxWi0ismOu
y3esWsjP0Ml1daKB+l8uSI1HRom6PK0yMXSlyxTJ6mAe/oMLh0OnWjZ20Z/RC8NV
fWB2i/26n8nYRATUzvBnHEvwiKSwE68EJCQrRn9fNp3S3LFFfUt+SHg0FMkTnjVp
B5SMezRryKkZFsixngWo5ezhfDB0q9Jkcq04TKEG1pTorkHh/2NNqeGA6CzIcz5K
qgiTu6aZ1G9tEzdDIC4dPtZfPh39IpTlRMv6Wzuskzjq6LZrFZ4Pn40CJg1cukRn
QV1UK397PHfXEP6tUWh/s7KuyoX5bsMijsniVGxXO8YPRwdAkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWOGZ0M6VUH7vdbRFeHjkV+i6+xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNmM3YjdlNzUtNTQ5ZC0z
MmE2LWIzZTktMThjYWQ5MWExNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRdJKpsf6tPGkAlaetCdXbOHTmXZZIF5jtMZHuO8M05dwH6sd8yzUYQ
d9QVhPd1ir3Fr6lVmOp6kqZINUkoAgytFIKuhL45A+Tkc/KqTYSi4mCysZOaG4oQ
lBiWSM5GykejwuE+qB2Zhcr+qZcmfi5mutrO79WNML8a7xRQxbDHGodiXRviKXg5
Nu6uFCtPwr4WitVC3jZNhwJwep70tGRFTgIDQqeShjFmfECSNawuG/9acBCjYxE/
89Dg4bp/J98lUk9FRAlz/0arTNIUpGqfaW5wlzOZWwuFCqXAZZ2+Febp4LswHkZk
nM1C4Z9FGAVLsRaD9MGbp1ijN7QoaZ8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:00:39 2025 by rpki-client