Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa
File:                     11bdd407-5883-3ad2-9117-b645eb104efd.roa (raw, json)
Hash identifier:          nYXH2mxDwpuG5HGD/QzdqSEMlUaovzBPdpfOTO/jO8M=
Subject key identifier:   C7:0D:D8:27:52:69:7A:61:5C:56:74:74:05:36:46:AC:E8:26:53:58
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584DC83045F7373029F2CBD1CB80
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        43.231.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:45:f7:37:30:29:f2:cb:d1:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=7723b3fa-646a-4a9b-ad8f-b5956e1aa610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:fb:26:ab:f4:38:42:db:cc:3a:d7:f9:28:
                    be:1a:12:5e:d0:a1:f2:e0:e6:05:c4:27:32:e7:03:
                    04:63:24:77:64:22:b7:c3:26:ed:58:48:b6:75:1a:
                    c8:b0:72:d0:78:85:57:cd:dc:f2:46:1c:41:72:7a:
                    55:b2:87:1f:87:a5:b1:f3:8c:88:af:2b:05:4a:37:
                    80:bc:15:ef:25:5b:71:9b:3d:e2:50:5c:7d:f5:ab:
                    fb:77:0d:f0:7f:f0:7d:66:0f:13:b9:8f:f6:cd:55:
                    2a:02:9b:c3:81:06:fe:76:63:ec:ec:da:62:31:eb:
                    1d:96:dc:b5:39:19:23:fc:b6:7e:78:0a:b7:18:f1:
                    ae:6b:9a:d3:37:5d:85:d0:8f:d5:e3:80:3c:79:cf:
                    e8:ea:95:6b:c3:5e:24:3d:99:be:92:4a:e0:69:dc:
                    55:03:41:8d:2c:1b:86:87:70:19:f6:60:ff:0e:3e:
                    e4:be:38:3c:ce:b8:a4:0e:29:7b:58:08:7b:b8:12:
                    20:97:9d:da:50:c0:2a:6b:aa:57:52:10:e5:69:01:
                    05:20:d2:14:ec:38:e6:7a:01:e1:a7:7b:11:5c:1f:
                    ee:2d:64:7f:88:db:0b:1c:c0:df:05:d2:e5:2a:a9:
                    d2:02:91:dc:3c:34:a4:19:61:43:e8:56:ac:8f:d1:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0D:D8:27:52:69:7A:61:5C:56:74:74:05:36:46:AC:E8:26:53:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:f2:5a:19:6e:bd:44:17:28:b1:72:56:28:7e:67:5d:61:32:
         4b:90:e5:74:00:1d:53:59:88:5e:d4:6f:ec:a2:da:0c:f4:0b:
         ed:00:2f:b2:74:1e:db:53:14:ee:70:e1:24:7f:eb:88:96:8d:
         97:8b:c7:11:69:52:37:fe:e2:79:04:c9:c9:f3:50:99:0c:21:
         5d:6e:5f:d4:b2:c3:f6:f8:76:17:e4:cb:62:71:ab:2f:14:48:
         fd:57:b3:50:d3:5c:19:41:a0:3f:fe:b6:2f:d5:33:11:25:d4:
         9c:d3:51:18:1e:02:60:73:87:3c:23:50:5d:45:fe:81:21:5a:
         18:39:77:07:9a:97:7f:4b:43:8d:03:6b:57:a2:b9:ff:58:a7:
         85:fd:f0:ba:91:14:e3:6f:2b:13:22:34:bd:a3:6e:64:ce:49:
         8f:5b:18:2e:4c:e7:b4:8e:26:f4:d8:89:f2:95:13:d3:8f:6e:
         b1:52:80:8b:8e:68:a4:91:7c:fe:a9:d5:0b:17:0c:dd:47:7b:
         64:7a:b0:88:c0:dd:c0:28:f5:c1:86:84:54:91:28:b3:a7:f3:
         48:b1:31:56:36:d2:91:3b:98:97:d0:63:ec:ba:47:02:ea:85:
         8f:46:a1:29:35:8b:36:db:f0:ba:4f:bb:d3:81:0c:72:e1:6a:
         71:eb:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:31 2026 by rpki-client