Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7a9fcbe6-76f9-3aea-97f4-79ceac655dc1.roa
File:                     7a9fcbe6-76f9-3aea-97f4-79ceac655dc1.roa (raw, json)
Hash identifier:          jEhrtDC4dWiNc1UxoCGk1cFY9G1oOpOPuRWtKr2z9vc=
Subject key identifier:   54:0F:02:3C:62:B1:FF:AE:A7:86:67:2D:41:46:F0:8E:6F:A5:7A:E2
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285849E7BA831549E779CFC86E7D80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7a9fcbe6-76f9-3aea-97f4-79ceac655dc1.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     19437
IP address blocks:        200.229.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:83:15:49:e7:79:cf:c8:6e:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=5bfce557-8720-4262-be38-49d53333d891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:1f:19:81:a3:92:8c:fa:05:59:87:94:55:
                    e7:ab:27:4c:d1:8f:ed:ce:e6:aa:0f:8e:5e:c0:6b:
                    7a:65:dc:dd:21:38:3e:e6:50:25:7c:73:c8:9e:fd:
                    ab:17:4e:0f:f6:31:dc:8d:d4:1e:c9:6f:fd:87:bf:
                    ce:4e:9f:95:df:79:ce:b3:4c:e0:f9:12:61:29:da:
                    02:31:ad:9f:b6:8e:ef:0a:3a:60:88:dc:e8:c4:a6:
                    c7:90:79:1e:45:be:94:00:ba:3a:75:45:a0:f0:50:
                    ee:a2:01:88:62:e5:71:22:c4:9e:72:ba:2f:f5:52:
                    c6:60:9a:04:fb:2e:2e:ea:0c:45:7e:d0:0c:db:85:
                    c5:15:fb:d8:dd:f5:15:1c:38:a4:42:7a:93:f6:52:
                    08:28:cd:44:6d:6a:f6:20:a5:e0:03:34:f5:43:7d:
                    25:f8:31:6d:37:6e:e1:50:0d:d3:a4:40:e3:cf:4b:
                    f7:9d:71:6b:cc:70:4e:e5:d8:54:ec:41:bb:81:0a:
                    bd:8d:33:2a:0a:ae:d1:2d:14:62:6e:55:b0:c2:81:
                    0d:1d:aa:e8:8f:41:34:4c:8c:8f:8f:d9:7c:7a:b0:
                    60:f4:88:e1:3c:3b:d1:65:8e:6d:2f:37:ed:78:78:
                    c1:bc:ad:c6:93:d8:5f:9e:ea:9b:eb:eb:cf:e6:22:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0F:02:3C:62:B1:FF:AE:A7:86:67:2D:41:46:F0:8E:6F:A5:7A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7a9fcbe6-76f9-3aea-97f4-79ceac655dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7b:67:e6:8d:96:0f:5d:94:e1:7e:7d:18:2d:d4:f8:c7:3d:
         f8:af:21:86:c2:93:44:20:cd:69:c1:d3:3b:dd:1e:1a:25:b9:
         76:4d:25:bf:aa:5d:0b:6a:7d:12:11:d2:e9:68:0b:45:bb:cc:
         36:1e:12:a7:b2:70:ca:6d:83:3f:d2:53:3b:45:be:06:95:fb:
         49:35:9a:d1:35:4d:4b:c1:62:da:dd:c1:d8:da:de:da:f3:df:
         1c:5c:d4:36:b0:e4:9e:09:91:6b:12:d6:18:24:fa:8e:b5:05:
         ea:51:99:37:31:ab:11:ab:ab:b1:1b:b1:02:e8:aa:01:d8:31:
         71:04:81:a6:12:3f:f9:d7:7b:06:86:ae:77:df:32:a9:e2:2a:
         e8:ac:12:38:fc:a4:b0:66:2f:34:bc:88:22:04:ed:3f:de:72:
         45:a5:33:2a:57:c0:6d:8d:38:53:48:c5:74:51:92:6e:20:fb:
         db:05:ca:c5:bd:14:72:24:5b:90:60:92:2a:c3:3d:9f:65:7c:
         8c:6d:16:e1:92:ec:13:8c:8a:09:93:f2:3e:46:a2:ad:de:d0:
         fe:5e:35:7e:f3:ca:c2:80:9d:db:e5:c6:a1:cd:1e:c8:b5:e8:
         64:9e:03:35:3d:a6:f3:44:b0:e7:46:ef:43:f2:54:c9:7c:b0:
         aa:0e:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:05:12 2025 by rpki-client