Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa
File:                     d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa (raw, json)
Hash identifier:          IsxZ7Uqk8JVMBfN4/5iJf2uhvjGnc7duezX/rs3hpHk=
Subject key identifier:   79:76:81:10:84:22:29:F8:64:0C:8F:AC:BC:FA:E8:28:15:65:98:93
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F43285849F17FBE0E84AF2CD791425100
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        43.231.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:be:0e:84:af:2c:d7:91:42:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=6cb71d80-b069-4bda-a28a-9cd46d7a3732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:8d:a1:5a:cc:5b:40:e2:13:c5:e2:9e:30:
                    1f:41:22:4e:14:ad:28:6c:56:99:b2:f3:ee:b7:be:
                    32:83:d1:4a:ab:87:d9:7e:2b:e0:60:fd:98:ea:d7:
                    70:99:14:22:b1:00:5b:5e:8e:48:63:c9:f3:dc:6a:
                    1a:93:a3:3a:98:54:81:d7:a6:77:69:ff:0a:57:5c:
                    3b:7b:00:aa:0d:76:fd:5d:22:41:dc:f0:e6:a9:ba:
                    f9:7d:38:10:24:d1:cd:6b:74:84:af:f2:91:d4:03:
                    ea:ec:07:c5:70:4c:0b:ec:c5:e3:3c:41:f3:37:10:
                    73:b1:01:ab:59:9a:ea:01:ef:74:ea:86:f4:4e:6c:
                    16:11:a0:8a:41:b9:2a:6e:51:01:2f:31:95:dd:b4:
                    cc:ca:98:b5:b1:96:ab:a9:f0:a1:86:99:b8:aa:b3:
                    72:e8:ef:d7:81:76:36:ee:fc:af:3d:49:43:63:ad:
                    2b:88:bf:82:c0:76:5d:b6:20:0a:94:d1:04:57:30:
                    65:08:07:b1:65:a9:34:e7:37:99:dc:76:07:f4:50:
                    c4:cf:a6:ee:5b:71:b2:41:03:34:24:b9:0b:6e:e5:
                    ca:f6:80:c5:2f:70:99:03:99:69:b3:0c:88:5e:27:
                    2b:b2:31:a5:49:98:7d:01:42:47:2e:65:e7:34:dc:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:76:81:10:84:22:29:F8:64:0C:8F:AC:BC:FA:E8:28:15:65:98:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e0:fb:14:b1:4f:91:e3:dc:a5:5b:42:dd:f3:b9:03:87:6f:
         1f:3b:a0:6d:50:1d:14:56:5d:a3:e3:f4:7c:fa:b9:a7:a4:5d:
         cf:e3:bf:c3:38:7c:63:49:96:fc:85:b1:38:5b:f6:7b:04:19:
         76:f5:d3:aa:c5:51:26:77:65:59:d2:73:17:03:cc:58:4a:f6:
         b8:4a:24:a8:48:9b:30:43:7e:00:67:69:d4:70:3b:0f:12:72:
         c5:b6:68:7b:e6:98:9b:e2:62:1a:56:06:eb:e9:ae:69:e4:e2:
         7f:72:e9:ac:6a:71:e4:c3:8e:8c:ef:14:43:7d:a8:a6:b6:de:
         15:87:bc:cb:5e:20:11:18:db:87:b9:71:2e:f8:ad:1e:03:d6:
         a0:eb:10:54:eb:2e:69:26:c4:a6:0f:08:f8:7b:c4:d1:4d:59:
         9b:6c:4a:a2:36:b7:c8:c1:77:9f:b5:39:77:cb:2f:57:20:b6:
         71:fa:af:4b:e6:51:92:6b:c9:9c:7f:3f:ad:4f:24:0b:ee:9b:
         10:61:cd:62:95:9f:55:27:40:6d:f2:07:40:91:24:5f:e8:79:
         80:b1:e4:0a:b0:43:8e:71:a8:6d:bb:3b:49:52:c4:ec:6b:ee:
         3b:50:6a:49:31:79:d5:ab:6a:29:69:7a:2c:bd:8d:6e:30:d1:
         2d:c6:f0:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf74OhK8s15FCUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NmNiNzFkODAtYjA2OS00YmRhLWEyOGEtOWNkNDZkN2EzNzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0+NoVrMW0DiE8XinjAfQSJOFK0obFaZsvPu
t74yg9FKq4fZfivgYP2Y6tdwmRQisQBbXo5IY8nz3Goak6M6mFSB16Z3af8KV1w7
ewCqDXb9XSJB3PDmqbr5fTgQJNHNa3SEr/KR1APq7AfFcEwL7MXjPEHzNxBzsQGr
WZrqAe906ob0TmwWEaCKQbkqblEBLzGV3bTMypi1sZarqfChhpm4qrNy6O/XgXY2
7vyvPUlDY60riL+CwHZdtiAKlNEEVzBlCAexZak05zeZ3HYH9FDEz6buW3GyQQM0
JLkLbuXK9oDFL3CZA5lpswyIXicrsjGlSZh9AUJHLmXnNNxCyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHl2gRCEIin4ZAyPrLz66CgVZZiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvZDIxYWMzNWItM2ZkNi0z
MGQzLThlY2UtZjVjMjA5MmFlOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+cNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjg+xSxT5Hj3KVbQt3zuQOHbx87oG1QHRRWXaPj9Hz6uaekXc/jv8M4
fGNJlvyFsThb9nsEGXb106rFUSZ3ZVnScxcDzFhK9rhKJKhImzBDfgBnadRwOw8S
csW2aHvmmJviYhpWBuvprmnk4n9y6axqceTDjozvFEN9qKa23hWHvMteIBEY24e5
cS74rR4D1qDrEFTrLmkmxKYPCPh7xNFNWZtsSqI2t8jBd5+1OXfLL1cgtnH6r0vm
UZJryZx/P61PJAvumxBhzWKVn1UnQG3yB0CRJF/oeYCx5AqwQ45xqG27O0lSxOxr
7jtQakkxedWrailpeiy9jW4w0S3G8HU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:38 2025 by rpki-client