Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e6b644cf-62cc-3ed1-9459-4d6d9551cbfa.roa
File:                     e6b644cf-62cc-3ed1-9459-4d6d9551cbfa.roa (raw, json)
Hash identifier:          lRYJokZ/CZD22TOM3HLTdKWGFUkNCrYJX8v05WR0v1k=
Subject key identifier:   C1:DB:41:34:5D:07:B3:23:37:64:AE:04:5D:6A:8D:7D:8A:8D:15:38
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858498E64899654135D024E0000C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e6b644cf-62cc-3ed1-9459-4d6d9551cbfa.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     212609
IP address blocks:        200.229.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:89:96:54:13:5d:02:4e:00:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=f790306e-17e3-437f-81a5-34efb263c80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:01:e7:ad:5b:30:53:3d:89:ba:3b:ce:4b:
                    24:e2:34:b6:db:b5:71:7b:8e:e4:15:79:95:1a:77:
                    ed:65:99:3b:37:a4:7b:fa:55:d4:79:32:cd:03:50:
                    34:3c:b7:8f:b9:de:63:f3:5c:8a:b0:b4:71:d6:b5:
                    1f:c6:dd:7d:da:33:44:4d:2c:84:31:da:a2:5d:b8:
                    5d:d0:22:8b:88:ee:e4:ae:ca:b6:11:ca:35:90:9c:
                    e8:4c:5f:45:87:59:d3:dd:1a:79:b5:15:b4:9a:7f:
                    c9:71:5c:63:95:bc:4b:bf:83:f6:64:32:f0:d4:a2:
                    d8:c9:ec:f3:72:bc:b6:ba:c9:64:d8:ed:48:d6:04:
                    1a:85:72:5b:d5:f3:0f:4c:ce:0e:fd:91:d7:7e:57:
                    63:71:b9:91:de:01:e3:a6:91:35:a2:21:50:18:d8:
                    97:03:33:51:7b:af:5f:26:04:d8:d1:0f:10:5a:a4:
                    02:59:c9:47:a4:59:82:b2:8b:80:11:e1:5e:a5:c4:
                    54:2c:2f:94:c7:c2:91:62:88:75:3b:9a:d7:a9:ba:
                    f8:3c:08:3b:4c:ca:17:0f:d6:a2:12:03:6a:53:57:
                    c8:48:d0:37:38:fa:a4:c7:59:c4:ed:28:e1:e7:27:
                    3f:05:be:71:30:b2:af:46:7a:f6:e8:b9:02:1b:ef:
                    45:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DB:41:34:5D:07:B3:23:37:64:AE:04:5D:6A:8D:7D:8A:8D:15:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e6b644cf-62cc-3ed1-9459-4d6d9551cbfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:bf:b3:bf:34:74:d5:6b:1f:4d:f3:b4:3a:e3:8b:7c:cc:
         33:63:c3:2e:05:d8:88:a7:4f:84:1c:78:90:1b:52:70:9b:b2:
         4d:b7:0c:81:41:cf:fc:17:7e:fd:13:5b:51:b6:92:66:16:f9:
         37:63:6f:2c:86:37:bc:08:1f:6a:67:73:fa:28:f9:18:8d:6e:
         9e:b8:93:af:50:fc:f0:2c:2f:1d:f9:93:f4:ad:d7:9f:3e:47:
         41:40:4e:38:b1:9d:e3:4c:bf:73:6c:3d:3f:02:cb:c5:a3:3d:
         b0:48:8e:4b:99:32:42:f4:d1:f0:64:d5:d0:d0:9b:1a:e4:a0:
         4e:00:d8:1d:33:cb:80:e0:2b:a6:cf:ea:a3:7b:31:e4:5b:55:
         42:ed:42:07:6e:bc:85:90:d7:ae:06:cb:a7:10:89:3d:98:07:
         39:e3:c9:dd:12:46:70:ee:b6:18:20:57:7a:45:bb:5c:b7:c2:
         7a:ed:17:9f:09:72:25:74:53:7b:9c:2c:f3:b1:82:de:19:07:
         da:61:a9:e3:31:cf:29:db:ed:c1:49:0e:5c:e9:3d:19:f3:7a:
         a7:81:85:91:22:8f:5d:1e:d0:cf:bb:69:52:19:ff:ba:6b:5e:
         3d:1c:d3:e4:df:c5:07:36:d1:84:f9:e3:46:e6:01:72:63:f1:
         32:98:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:11:56 2025 by rpki-client