Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa
File:                     11bdd407-5883-3ad2-9117-b645eb104efd.roa (raw, json)
Hash identifier:          Y4zR9qpZBfwvV4dAC6EVVMLp5xms2vBlecRfjnqap2Y=
Subject key identifier:   07:01:59:EB:5F:1A:E9:35:77:A0:FB:49:56:3D:B5:8D:B3:63:1E:40
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584B27617B1D1A86A8E822DD5400
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     31898
IP address blocks:        43.231.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:7b:1d:1a:86:a8:e8:22:dd:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=39010f10-6554-4319-9671-01bed88406ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:ee:c7:98:be:fc:60:34:14:be:74:67:07:
                    23:a1:eb:cb:c6:20:6b:78:f1:a1:aa:f0:d3:e1:f8:
                    0d:6d:df:fa:e0:b0:be:cc:ba:d0:bc:20:46:bc:0c:
                    7c:d3:6c:9e:f7:d0:91:8f:41:4c:75:db:ec:dc:f7:
                    96:4d:b7:23:8f:90:0a:36:5f:97:36:0b:96:8a:92:
                    15:93:ca:8a:3c:2b:2d:2a:76:c2:7b:2b:58:13:90:
                    2e:a1:8a:6a:f1:65:87:dd:51:54:7b:5a:56:42:b9:
                    b0:fe:8d:65:4d:85:66:a1:33:a4:7b:12:a5:1a:b7:
                    0f:58:ab:ed:08:07:bb:7f:08:bf:9f:50:fc:4f:d7:
                    1e:65:3b:c3:21:2a:f1:4e:57:68:e3:d1:ea:ec:de:
                    96:01:69:30:6c:3b:82:96:56:ab:a0:a6:0b:42:1c:
                    c9:81:f3:e2:6b:5c:f1:f0:7d:a8:de:6a:39:cb:1d:
                    b4:8d:88:84:31:40:c0:0e:d7:d1:42:2d:1e:01:60:
                    9b:3d:25:de:2b:be:5b:2a:8a:59:0c:cd:2b:95:bb:
                    95:df:70:31:40:02:27:1c:0a:a5:99:c6:98:21:a7:
                    f9:c7:fd:55:92:4f:f4:3d:e0:54:95:f4:ca:7a:d0:
                    04:81:20:b1:3d:b9:75:8f:80:68:63:75:ce:fc:9a:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:01:59:EB:5F:1A:E9:35:77:A0:FB:49:56:3D:B5:8D:B3:63:1E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:01:60:bc:26:ba:73:e3:12:1d:b2:6f:1d:c7:e8:8a:df:61:
         b8:65:6c:8a:bd:b6:9c:83:63:63:d4:2c:69:63:f8:c9:3f:af:
         9c:e2:7e:51:40:39:6c:fd:41:06:b0:8f:29:2c:61:97:22:c9:
         75:74:dd:60:bd:8f:74:82:e2:12:1c:e7:bb:91:34:06:60:f6:
         eb:af:2d:c0:26:e2:9a:39:3e:cd:fc:e4:ae:99:cb:6a:a8:97:
         ba:01:b9:3b:91:06:05:ce:e7:84:35:e3:aa:71:a1:15:77:e7:
         22:cf:d0:bb:b8:25:99:b5:e6:82:6b:14:14:a9:ac:5d:37:93:
         eb:37:bb:64:c2:a6:e7:7c:cc:77:ae:9f:51:cf:ac:7e:86:69:
         8b:48:79:82:e3:24:45:27:f9:ef:d5:a1:ae:48:6c:f9:80:89:
         99:a9:e3:3d:d1:df:d5:ef:14:f6:73:80:20:31:0d:ab:26:22:
         c1:2a:89:cc:ab:64:61:cb:4f:f3:60:5b:b3:11:3e:da:be:f7:
         1b:2f:fe:a5:24:b8:f1:d1:22:70:e7:f8:37:7f:89:0f:3e:0a:
         01:ee:4c:f5:1e:1e:04:80:ad:af:c9:98:c4:74:5b:2b:3f:e0:
         fa:fd:e7:46:7a:d1:21:eb:6e:73:ad:7a:9a:8d:3d:6f:e5:18:
         1e:1e:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:23:51 2025 by rpki-client