Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8c42da48-bc86-38b7-88da-8e28821e0519.roa
File:                     8c42da48-bc86-38b7-88da-8e28821e0519.roa (raw, json)
Hash identifier:          2dY7F9xoZ50CHTipATG7BAGkWpFsHlKEQ8InH1cahX8=
Subject key identifier:   BD:81:31:7E:E7:0E:62:D4:EE:14:BD:5B:64:9D:19:E5:DE:77:9B:89
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B63DEEB581AC6CAA193032D00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8c42da48-bc86-38b7-88da-8e28821e0519.roa
Signing time:             Thu 02 Oct 2025 17:01:53 +0000
ROA not before:           Thu 02 Oct 2025 17:01:53 +0000
ROA not after:            Wed 31 Dec 2025 18:01:53 +0000
asID:                     834
IP address blocks:        200.229.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:de:eb:58:1a:c6:ca:a1:93:03:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  2 17:01:53 2025 GMT
            Not After : Dec 31 18:01:53 2025 GMT
        Subject: CN=c120cc64-44e2-4a69-a12c-8dbbff02b6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:26:90:d6:e9:27:6c:83:39:24:ec:be:9d:
                    b9:14:b5:25:44:4f:2c:24:f7:dc:bd:5b:11:9f:dc:
                    e6:d2:cf:e9:53:97:c7:75:b6:50:95:0a:69:57:d7:
                    86:0b:9f:ce:35:71:a2:a1:2d:ac:2c:6c:9e:d2:30:
                    05:fd:54:ea:47:2d:4a:2d:4f:e7:bb:51:95:38:a2:
                    8d:9f:b9:1b:d5:b0:06:70:01:64:6a:f3:e5:b1:21:
                    31:4a:00:7e:58:68:55:84:f4:c8:86:26:ae:fa:26:
                    c7:cd:bd:73:62:d5:3e:d3:38:5c:f3:52:ec:e4:de:
                    17:15:99:ab:c1:c8:d6:4b:be:07:0f:72:4d:72:31:
                    ad:f0:39:ef:38:fe:dc:05:74:74:a3:1c:58:17:aa:
                    28:2c:0a:7b:cd:e3:d8:e8:a3:79:4c:0a:18:81:47:
                    ba:64:8c:15:e6:a4:25:aa:15:47:43:c7:80:33:bf:
                    cc:08:69:56:d6:a2:18:f5:de:74:9d:61:30:24:e3:
                    5c:29:0c:4e:6e:ca:27:71:dd:6d:53:92:b5:d9:b8:
                    cd:7b:4d:29:7b:0b:2d:5f:fb:05:00:c7:52:1f:26:
                    26:31:8a:6c:ec:6f:a8:6e:59:d0:1e:82:1c:68:4c:
                    af:95:96:a5:4a:b9:73:7a:ce:c2:cf:b5:c4:dc:46:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:81:31:7E:E7:0E:62:D4:EE:14:BD:5B:64:9D:19:E5:DE:77:9B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8c42da48-bc86-38b7-88da-8e28821e0519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:52:15:35:7a:b4:ba:5e:9d:7e:a9:35:78:e9:3b:bc:9f:
         0b:c3:ef:31:76:be:4f:29:75:72:df:03:58:b4:70:e1:28:79:
         79:aa:e0:af:74:2d:a5:2f:84:06:f8:2e:40:09:71:42:e2:1f:
         83:8b:0c:cf:d5:dd:fd:fc:a2:6c:01:b2:ec:90:51:32:96:bb:
         f0:88:7d:b1:f3:50:6e:9c:26:3f:64:ee:46:0c:ab:d9:5d:a9:
         ff:2e:25:9e:0b:70:e6:06:82:a1:d7:4f:6a:4b:8c:fe:b5:fe:
         32:7d:92:2c:40:2d:37:5b:c4:4e:33:f7:77:0f:fc:db:13:df:
         79:6d:1c:35:0d:e6:da:fe:a5:47:ca:23:93:1c:b4:ae:60:db:
         94:80:64:b7:0d:45:34:d0:77:6d:c8:7a:7f:21:34:cc:6c:21:
         43:c1:d0:2d:ca:26:d5:ed:25:46:dc:f7:f7:cb:66:56:89:6f:
         e5:e7:ed:a0:e4:39:57:40:f3:5b:42:bf:d6:74:ba:d8:27:a6:
         d7:d4:77:0b:21:1e:45:43:5f:67:2d:e5:a4:4c:14:52:23:9e:
         85:a7:88:ff:51:d9:39:a8:7f:59:04:ad:e9:ab:46:18:e4:ab:
         41:80:34:89:cc:44:1d:ab:e6:2e:63:61:e5:d1:fa:bd:86:13:
         58:51:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:18 2025 by rpki-client