Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/ebefaef5-e9fc-3fdb-bc68-06b1347925cd.roa
File:                     ebefaef5-e9fc-3fdb-bc68-06b1347925cd.roa (raw, json)
Hash identifier:          c+mN5gnXEjWm0bPCQLVC7Q5mm5DldeYGBMgloc6avpw=
Subject key identifier:   C9:7A:03:51:F8:51:4A:87:06:6B:3C:87:7E:FD:74:30:DD:B7:15:14
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584F119D0524A13ADF5164233EC0
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/ebefaef5-e9fc-3fdb-bc68-06b1347925cd.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     63086
IP address blocks:        43.231.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:05:24:a1:3a:df:51:64:23:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=eeda00b5-eff9-4ffa-b41f-fe38e131e844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:57:71:ba:8e:1a:7d:c4:82:9c:11:e4:b2:
                    e1:87:28:c0:81:4a:f2:bb:ef:60:38:b2:7b:f4:4c:
                    be:44:3f:ff:f8:f9:ba:6e:b5:0e:41:3d:93:e8:ba:
                    43:d2:48:f0:ba:45:da:03:d2:33:80:29:c5:05:c7:
                    fe:fd:a6:9a:ea:c1:f0:c7:b3:6d:93:34:80:86:f4:
                    ed:ac:e3:3e:b8:80:ca:65:ae:73:51:36:55:af:51:
                    7f:ba:52:3e:47:85:b0:5f:43:8c:f2:04:b5:1d:c7:
                    03:e9:c1:01:6c:3f:1b:95:be:6e:9a:a9:ee:68:02:
                    b0:05:e9:29:a4:f5:82:2c:5b:16:df:21:5e:a4:b0:
                    92:c3:32:6f:01:8c:f9:07:5e:a9:fd:fd:36:f1:96:
                    e3:86:13:4b:e8:2e:28:ee:5e:aa:31:a7:e6:fb:50:
                    86:38:80:84:9c:38:40:f2:e1:a9:6f:d6:3c:6f:77:
                    4f:31:8f:7d:0a:2f:ff:ff:d6:25:e6:d4:38:a3:9f:
                    19:30:cc:da:a5:5a:1b:f1:c0:f5:be:a7:34:65:e0:
                    ac:4b:97:03:7e:a9:24:20:71:61:96:a6:92:d3:a0:
                    20:45:fb:ba:3e:99:1b:11:9c:08:04:4b:ca:54:f9:
                    d0:99:93:8f:4d:44:81:c5:86:92:96:ee:49:84:28:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:03:51:F8:51:4A:87:06:6B:3C:87:7E:FD:74:30:DD:B7:15:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/ebefaef5-e9fc-3fdb-bc68-06b1347925cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2e:f8:e8:44:8a:3f:5f:ac:74:a9:9c:4c:23:bd:ee:0c:05:
         dc:85:b9:3b:78:62:69:49:66:58:1c:ef:03:da:a0:7f:ef:ba:
         4f:34:5b:b4:f1:5b:39:87:6e:dc:25:75:77:5e:90:85:87:3d:
         e0:8e:64:df:64:36:7e:1c:36:04:e1:40:ed:72:65:f7:9f:1b:
         d0:6b:77:ae:65:29:ea:2e:56:f3:41:91:bc:ed:97:99:f5:52:
         80:e1:48:b3:5a:3b:91:36:42:95:99:f5:0e:08:bb:9d:6b:da:
         85:63:4c:f3:1f:56:67:57:c5:f1:26:5c:e8:43:41:fd:ba:b6:
         fe:0f:8c:c1:3d:82:54:9a:74:6d:e6:4c:c2:9f:05:35:77:89:
         49:5d:d9:65:84:09:0d:e9:5d:16:46:49:2e:e3:6c:5c:10:1f:
         5f:c0:24:5f:85:ea:2f:b5:cb:97:e7:23:0c:1c:b0:f8:e0:44:
         96:af:6a:05:73:64:92:d5:8c:2a:40:f7:00:73:7b:52:85:ab:
         4a:f4:3b:4f:20:e3:f0:16:c3:af:c9:40:01:f7:9c:41:3b:ad:
         4c:94:db:0a:1b:9b:58:81:6d:73:c1:1a:6c:88:ce:f4:ae:f9:
         52:ca:cc:74:c5:9b:75:58:29:d2:c8:79:60:cd:f5:f5:cc:27:
         38:28:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:25:02 2026 by rpki-client