Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b1b5442a-d5ba-3d1f-907c-d3be7cd1e2ff.roa
File:                     b1b5442a-d5ba-3d1f-907c-d3be7cd1e2ff.roa (raw, json)
Hash identifier:          /dFkNpJnaytMHy13kkckSNzSyJIMmMdJQ378LL6ITts=
Subject key identifier:   97:89:AB:C4:E9:E8:A8:0F:D6:93:9B:58:8A:2A:42:D2:93:8C:96:A9
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584AD3A112220734A5809E92EB00
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b1b5442a-d5ba-3d1f-907c-d3be7cd1e2ff.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     31898
IP address blocks:        43.231.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:12:22:07:34:a5:80:9e:92:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=94735764-b4f1-455c-892d-43d42cdb35f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:ee:69:71:48:7b:7a:d2:06:1b:62:3d:6a:
                    53:66:22:4e:4f:2b:d7:44:91:4f:20:93:aa:d6:06:
                    15:21:df:4b:e2:d6:07:18:8e:68:b3:b1:ac:af:1e:
                    75:03:2a:9e:14:d6:21:8d:da:42:34:ad:b6:c1:62:
                    56:95:93:11:12:9a:11:c1:af:2b:b0:07:ba:78:96:
                    58:0d:07:73:ea:83:7c:a4:11:f5:9a:e2:24:8a:8b:
                    6f:b2:29:0d:ae:99:9d:d3:75:e2:a9:ab:ba:bf:b4:
                    4d:87:92:17:4b:88:f0:6e:5c:ec:29:5c:bc:40:3e:
                    80:7a:5a:88:43:7e:80:47:b6:03:f1:e3:85:50:d8:
                    3c:4c:67:60:72:2d:b6:bc:19:fd:84:0b:90:cd:7a:
                    36:ca:32:65:b0:ec:3b:de:97:04:04:f3:66:86:52:
                    cf:5e:cc:66:a0:49:b3:31:a8:0f:ac:24:c6:58:4e:
                    21:4e:af:21:0c:19:09:ee:f2:11:b0:28:3d:db:b2:
                    ba:d9:ca:13:bf:b3:0a:af:ef:53:9f:f9:b2:2f:84:
                    85:d7:35:e2:91:14:53:3c:47:bc:5f:e7:8a:e6:2d:
                    dc:d5:d3:4e:17:5d:79:c5:85:8e:fd:0d:79:ff:5a:
                    73:3f:fc:a8:64:03:45:3f:b1:4b:ad:5e:3d:11:42:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:89:AB:C4:E9:E8:A8:0F:D6:93:9B:58:8A:2A:42:D2:93:8C:96:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b1b5442a-d5ba-3d1f-907c-d3be7cd1e2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:94:69:ab:20:f1:4b:78:eb:1f:44:7a:59:1a:c0:a2:8b:
         a2:a6:27:1b:e8:67:c6:89:b7:14:71:c1:3c:4d:3b:21:f0:b7:
         10:2d:0e:7c:36:c9:27:88:eb:f8:1b:42:9b:5c:e0:a3:6e:f0:
         94:3c:43:8b:1d:8e:56:2e:23:81:9b:ab:31:67:22:91:23:43:
         64:43:a1:0c:e3:1c:c0:6b:a7:73:40:51:f5:38:d7:e9:89:88:
         81:a3:f5:94:a7:73:40:9e:88:2a:93:88:99:07:6b:9e:c0:8f:
         c0:31:9f:14:5a:a2:14:f8:47:70:eb:ee:e9:9f:a5:e4:a7:76:
         a0:de:9c:44:c2:b8:07:a6:84:f1:50:44:8f:4f:d0:f4:27:3f:
         a0:78:b0:d3:d3:5d:61:ab:5f:43:0a:c6:7e:66:0d:1e:3f:2f:
         5a:59:b8:46:57:d7:e6:49:c8:6e:d5:7c:ba:93:37:41:e6:87:
         e2:73:f1:29:8b:2c:c3:8f:64:2a:0c:bb:84:22:89:54:9e:29:
         18:23:22:a3:59:26:c8:c5:23:36:26:b6:67:f4:88:ad:5d:8d:
         56:68:51:80:db:14:26:ef:a0:df:fa:d4:14:14:69:58:a8:a2:
         15:d8:ba:87:03:6c:66:d3:25:83:da:91:4a:7a:c6:d7:7e:de:
         ed:f1:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:55 2025 by rpki-client