Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1af17c71-11f5-35e8-b4c1-fc8b513c67aa.roa
File:                     1af17c71-11f5-35e8-b4c1-fc8b513c67aa.roa (raw, json)
Hash identifier:          wJW87mFQVf+emA0uab1PlCZFZ7a+KZ8jQW72HMTq2+w=
Subject key identifier:   DB:1D:44:8A:67:D4:E4:B5:5B:58:3A:8B:67:CA:A5:44:97:B7:35:6B
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584A0C0560EDB5504E0DF9210098
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1af17c71-11f5-35e8-b4c1-fc8b513c67aa.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     63086
IP address blocks:        43.231.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:60:ed:b5:50:4e:0d:f9:21:00:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8f92b99c-dfd8-4de6-8b8c-51c931a13c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:fe:79:28:f7:a9:0f:f8:73:80:37:0d:11:
                    37:e1:0c:ae:54:23:04:b1:e3:ce:d3:81:01:4c:f9:
                    e9:8e:16:d2:88:39:fb:e1:c1:12:1c:e9:7d:e9:10:
                    62:b0:44:d4:a4:08:bc:c2:24:e8:fe:e0:41:10:19:
                    30:64:84:8f:2f:fd:d9:54:25:83:7f:26:65:ad:34:
                    05:e7:f7:9c:01:a2:e7:f8:3b:14:d8:7c:db:57:fa:
                    3c:1d:aa:69:be:e9:bb:87:f6:9f:e8:e2:44:b2:09:
                    f7:85:bd:0f:62:77:8c:22:6a:75:8c:ca:73:f5:6a:
                    44:ae:60:4e:1b:b7:10:f4:e8:76:59:41:b9:22:4d:
                    7b:ea:98:3a:45:02:9d:8b:69:fc:a6:05:b2:43:ae:
                    31:af:e7:0b:7b:5a:7a:e7:16:ca:67:e0:8e:57:68:
                    ff:b7:33:da:ae:71:d8:ba:a7:98:2c:92:ff:7c:38:
                    e4:26:aa:54:2c:44:8f:66:86:96:5c:f5:4b:b1:25:
                    f8:ca:52:dc:6e:d9:24:83:58:ea:88:a2:f3:65:87:
                    89:1c:2c:19:b3:a8:63:42:c9:76:9f:3d:32:65:8e:
                    57:ac:00:2e:e6:bc:47:58:f6:b9:09:5e:9f:00:59:
                    28:7f:ea:dc:0e:82:f8:2d:67:97:f7:04:f1:2d:18:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1D:44:8A:67:D4:E4:B5:5B:58:3A:8B:67:CA:A5:44:97:B7:35:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/1af17c71-11f5-35e8-b4c1-fc8b513c67aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3d:c6:cc:53:43:04:02:32:9b:d0:9c:f6:90:bb:e9:55:e4:
         f1:ee:16:85:72:de:d1:39:cc:ea:fe:a9:03:43:ce:ad:4a:50:
         fa:2d:15:22:41:c4:b6:a9:85:f2:22:5a:d4:bb:b3:09:f2:85:
         be:24:ef:85:da:0c:34:1d:4e:bf:7a:93:d2:80:22:e3:dd:70:
         ca:66:6d:5e:cf:8f:8a:10:5b:1a:60:fe:82:2c:d6:37:12:a1:
         32:7a:d7:d2:dc:0f:26:35:12:f2:e3:5e:e3:fe:16:a6:38:4e:
         16:33:92:0c:4c:34:e9:36:a1:62:27:fb:84:e5:e0:f6:41:ee:
         83:05:a5:40:12:bb:8c:71:4a:98:78:93:ff:fd:03:04:93:d6:
         19:89:fc:69:09:a5:f1:31:52:7b:d0:fe:db:82:55:16:e4:e7:
         41:ce:e2:5a:b8:35:a2:6a:3e:f5:31:96:26:89:eb:0e:1c:2f:
         29:b3:7c:49:d9:37:92:72:cb:30:73:de:cc:60:9c:f6:96:25:
         c5:d6:c4:ac:99:33:b5:cb:9a:56:5c:35:63:c1:99:bd:7a:33:
         5e:c1:73:7e:47:6b:ff:d1:c7:c3:f8:88:64:6e:c9:8d:12:ce:
         ff:01:c3:91:7d:4c:55:10:cd:cd:6c:52:fe:67:a9:89:06:a8:
         96:b5:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:35 2025 by rpki-client