Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/ebefaef5-e9fc-3fdb-bc68-06b1347925cd.roa
File:                     ebefaef5-e9fc-3fdb-bc68-06b1347925cd.roa (raw, json)
Hash identifier:          W0+mv4vujuuTrb4FgZ2mVnl3zaRHnVZ+fEoy4+ahCQo=
Subject key identifier:   BD:03:4A:B3:64:F7:31:A8:D6:A0:22:50:E1:81:9C:4C:2C:0B:43:86
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584A0C0560FE885756CA1D098E00
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/ebefaef5-e9fc-3fdb-bc68-06b1347925cd.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     63086
IP address blocks:        43.231.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:60:fe:88:57:56:ca:1d:09:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8b7b2e65-2e7d-4098-a169-6a278cdd13c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2d:33:d0:07:75:fd:fa:99:e6:e1:7d:59:70:
                    c7:31:8b:24:49:44:d3:06:56:a6:24:71:5e:db:76:
                    34:76:ca:a9:cd:24:2b:8b:01:60:5d:e0:db:18:21:
                    aa:b0:27:da:67:84:05:5c:76:f1:b2:09:ca:7e:a5:
                    da:43:b4:a7:da:27:15:a3:f2:68:48:ae:6a:6f:48:
                    7a:55:af:a9:a2:cf:3b:a8:60:0a:69:e5:74:eb:00:
                    f4:f2:c4:40:52:fb:56:1d:95:37:a8:f3:de:c7:65:
                    fe:92:c1:5d:b1:16:fb:35:2f:8e:4f:6f:f7:bb:d9:
                    45:fb:eb:49:ae:3a:68:38:23:30:7c:b4:c2:58:2e:
                    87:18:2e:a0:74:92:21:c6:c0:2d:83:e9:a6:44:c0:
                    88:5e:f0:e8:fd:50:65:d5:8d:d7:58:b8:80:12:54:
                    ea:e2:27:de:8f:5b:5b:25:4b:a2:7d:eb:d9:d1:95:
                    18:4c:b8:e5:e1:be:46:eb:e0:3c:70:e8:70:8a:cb:
                    87:85:47:9e:2d:7c:b2:b9:b5:37:60:bf:0e:82:7b:
                    ff:fd:34:71:e8:be:21:46:68:3d:97:2e:a3:8d:4f:
                    ea:45:9b:c6:62:57:40:e1:69:d6:fe:f9:a2:b4:6d:
                    57:22:44:82:f1:1c:35:9f:de:98:89:27:38:9f:2a:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:03:4A:B3:64:F7:31:A8:D6:A0:22:50:E1:81:9C:4C:2C:0B:43:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/ebefaef5-e9fc-3fdb-bc68-06b1347925cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:10:8a:25:cc:53:0b:32:76:94:5e:16:7f:5c:da:e4:be:28:
         58:0e:1e:35:51:8f:fd:86:7b:a6:3c:c1:a1:d9:d2:64:ef:43:
         ba:f3:3b:63:44:c2:87:e1:0c:1b:37:99:3c:1a:c8:9c:b7:93:
         b1:1d:33:5e:c3:10:ac:f8:0e:f4:c3:81:9e:37:d0:88:df:c6:
         b0:61:d8:95:57:fa:7d:99:a5:49:bd:a8:1a:01:4e:8e:91:75:
         98:f2:b8:70:e9:a5:34:47:06:16:8b:b2:00:6c:22:90:9e:76:
         3e:f5:88:8b:89:86:6f:9e:2a:f5:4c:57:bb:81:33:1e:49:db:
         af:27:87:75:0c:a9:fa:60:38:fa:a0:27:69:a3:83:ed:a3:e1:
         1e:87:a8:3c:51:c3:0d:32:77:18:b5:03:5e:d0:f3:80:36:0b:
         84:1b:61:d2:81:71:4a:db:d1:55:99:16:83:25:23:d9:fe:7e:
         55:bb:d9:85:b6:f8:23:23:f6:99:51:72:95:6d:b8:c4:49:ab:
         67:b4:5a:e6:4b:80:ee:9d:23:20:25:7a:10:b5:da:71:92:19:
         80:f7:3c:ad:e9:fc:d9:3f:42:8f:d8:b4:96:db:6f:b1:aa:c5:
         93:58:d6:5c:1d:49:0e:98:00:b6:72:0a:24:4d:f2:35:f1:d5:
         7a:d8:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:44:11 2025 by rpki-client