Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa
File:                     3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa (raw, json)
Hash identifier:          ud2lkSYq0aINvVhdqEVO25Snz+Op2whwbzpLOiV4fmI=
Subject key identifier:   E2:ED:94:1A:45:29:2F:60:92:C7:E9:1C:45:D2:53:1B:B1:73:F4:9B
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A74B5E38D7315D0987833F138
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     14315
IP address blocks:        200.229.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:e3:8d:73:15:d0:98:78:33:f1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=4abb55fd-c6ce-40b5-a3b8-846bbc3c1012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:93:8d:59:da:79:5c:02:b8:b2:b4:3d:8e:
                    3d:00:3b:7f:e2:9e:3a:43:48:e1:45:c0:dd:dd:6a:
                    ee:86:8c:cf:51:ac:c4:a6:f6:8f:bd:e5:fd:71:a6:
                    57:49:ef:28:6a:18:55:f8:06:c1:bb:d5:5a:22:9e:
                    93:ed:45:a3:44:a6:de:55:72:64:c7:4c:42:f3:74:
                    d7:83:53:97:c6:a5:bb:ae:ce:f0:c6:20:b9:8b:1a:
                    c5:77:e3:c4:77:82:ba:d6:ed:1d:5a:c0:46:f9:9d:
                    3d:94:05:cc:09:e5:ce:88:52:1d:9d:39:7a:52:26:
                    0e:18:f1:27:89:fc:f4:0b:ea:ef:f7:e4:c1:5b:f4:
                    21:64:3b:57:5d:c7:32:f2:5a:3e:41:2d:cf:af:07:
                    b8:ba:05:18:26:b5:a3:bb:15:95:3f:20:7f:db:bc:
                    b8:f4:29:f1:9e:15:34:3f:8d:5e:a2:f1:a7:c0:47:
                    bf:7e:ff:32:25:00:c8:13:7f:e8:4e:99:93:5b:5a:
                    20:c5:f8:b4:b1:39:35:24:3a:fa:28:f7:83:76:6e:
                    54:92:9f:b2:14:1d:23:a8:32:a7:5f:3f:73:fc:f4:
                    0b:00:4a:db:09:ed:85:78:4e:5b:58:87:82:7a:98:
                    d2:87:c7:b5:52:40:6b:be:34:6d:41:dc:75:cf:59:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:ED:94:1A:45:29:2F:60:92:C7:E9:1C:45:D2:53:1B:B1:73:F4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:03:6d:eb:6f:f0:95:3c:6a:94:ac:85:a9:0b:d4:8c:64:
         26:38:90:4d:53:84:24:d0:0e:1f:95:55:7e:1d:54:e0:39:93:
         eb:15:03:25:86:64:22:b8:ab:0b:1e:32:c1:87:79:05:a2:7d:
         d5:78:ef:18:6f:f8:8d:1c:5f:fb:01:df:3e:41:80:99:e7:03:
         02:27:78:fa:6f:3f:43:c4:16:59:1c:0a:2d:a0:7d:b8:22:c8:
         88:82:96:c5:28:0c:56:de:67:68:ad:3e:7b:55:b5:79:de:bc:
         c7:60:cf:3e:c3:d6:27:8c:6a:1a:9a:2d:c1:6b:7e:97:ba:37:
         81:a2:2d:8c:e6:5d:4d:ed:07:e0:2f:64:d8:fa:81:b9:26:c2:
         f4:20:2b:20:41:17:23:50:9d:d4:ae:1d:42:fc:f6:0d:18:ad:
         fa:4a:e9:76:fc:d9:8a:74:7e:12:43:2e:43:f5:74:ba:50:d6:
         31:c8:c3:90:c4:f3:5e:36:34:c9:24:fc:47:33:76:8e:09:a5:
         bb:73:12:63:4d:c7:76:f1:ab:ac:53:c5:8c:06:27:0a:07:a3:
         4e:97:2d:87:e3:ed:af:a9:5a:f3:c0:85:1c:ab:e7:bd:28:02:
         5d:11:42:98:ae:ba:73:58:64:d7:d6:7a:6d:55:e1:ce:8d:db:
         56:f3:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:54:32 2025 by rpki-client