Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa
File:                     11bdd407-5883-3ad2-9117-b645eb104efd.roa (raw, json)
Hash identifier:          pe9JQW9FQd9R/Ndt7NlSEOI1UJSFWbBs28dnJEoJEC4=
Subject key identifier:   A3:EF:8E:4D:6B:6F:60:5D:F7:18:74:97:27:98:F7:7F:92:24:94:1A
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F43285849674EF50BD2A975782735BA30
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     31898
IP address blocks:        43.231.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f5:0b:d2:a9:75:78:27:35:ba:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=c3bcbcde-b41f-4232-97bc-27a27e1ed12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0e:70:40:5b:ba:31:16:21:96:65:69:82:0a:
                    16:52:3a:02:30:8a:54:92:9d:9a:0b:32:5b:74:f5:
                    a1:c7:be:f6:9c:09:58:6f:76:43:bb:4a:b6:83:e4:
                    45:df:e8:23:b0:24:5f:7a:4a:c1:42:18:82:97:3b:
                    9f:22:9a:ff:7d:ea:bd:80:4d:70:e9:52:fb:1f:92:
                    02:35:61:18:00:3b:c1:09:1c:d8:f5:50:f8:17:82:
                    56:5c:70:50:b2:d8:49:79:81:f7:f3:1a:d0:d8:99:
                    f6:e4:fc:0a:9d:3c:8b:2b:2a:71:8e:f5:42:57:01:
                    76:e4:a9:7e:c2:19:72:ca:bb:32:10:52:44:b1:12:
                    a2:77:ab:9e:90:0c:0b:18:74:e5:88:ed:93:e4:1a:
                    fb:07:d0:3d:4f:76:40:33:00:a0:15:45:c1:4e:3e:
                    40:18:f7:0f:fe:46:69:79:b3:cb:5d:42:8f:2e:5b:
                    6e:69:6b:5a:8c:76:8b:64:3a:ca:a8:e1:61:6a:1d:
                    00:3f:6d:15:02:54:94:93:6b:e5:47:6f:43:a0:18:
                    83:62:44:0b:dd:ce:02:e1:e6:ef:cc:c8:e0:0b:38:
                    1f:2d:5c:5b:f0:83:95:1c:e9:22:bb:3d:bb:ee:c0:
                    41:e2:58:20:e0:d6:74:4e:8b:d9:b7:a8:d3:26:bc:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:8E:4D:6B:6F:60:5D:F7:18:74:97:27:98:F7:7F:92:24:94:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/11bdd407-5883-3ad2-9117-b645eb104efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:65:a6:4e:76:9f:cf:77:e0:95:8b:de:be:30:f3:8d:53:c5:
         27:bd:3f:ba:e7:45:de:9d:89:9b:33:bf:41:1d:ce:14:ff:51:
         80:a1:26:79:7a:55:1d:4d:40:a7:5a:37:22:4d:1f:24:e1:79:
         8d:a8:8e:c6:61:c3:c9:93:15:4b:2e:8c:ca:aa:58:4f:ac:a5:
         c6:27:67:80:a0:6c:06:81:ff:84:b3:8b:b2:b5:12:fc:40:a1:
         7e:00:16:53:9c:57:ef:18:eb:fc:02:b7:0b:df:7b:d4:d3:e5:
         fb:2c:0a:fc:a0:f9:ad:18:86:c0:53:ed:e7:15:20:10:c3:e2:
         06:05:3c:f1:5c:63:5f:02:c8:37:f1:bc:4d:ea:51:b1:b5:ac:
         82:f9:1b:0f:7a:a0:76:10:d3:60:09:c5:aa:db:81:dc:12:d7:
         94:06:ef:71:39:ae:4d:c4:43:18:0d:df:3e:0e:1c:9b:f3:3b:
         42:f8:58:3a:d7:0e:c5:0e:7b:3d:39:9b:be:a6:2f:16:4b:b9:
         c7:ed:4d:69:03:6b:3b:df:8d:2b:fb:56:ac:66:e1:a5:80:53:
         fe:fd:8f:58:b7:b2:29:32:e4:50:5b:36:17:60:fe:31:33:a5:
         8d:d6:e6:08:fa:5d:1f:7b:34:0d:89:fa:34:2b:88:76:53:a4:
         1b:ea:32:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvUL0ql1eCc1ujAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk
YzNiY2JjZGUtYjQxZi00MjMyLTk3YmMtMjdhMjdlMWVkMTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A5wQFu6MRYhlmVpggoWUjoCMIpUkp2aCzJb
dPWhx772nAlYb3ZDu0q2g+RF3+gjsCRfekrBQhiClzufIpr/feq9gE1w6VL7H5IC
NWEYADvBCRzY9VD4F4JWXHBQsthJeYH38xrQ2Jn25PwKnTyLKypxjvVCVwF25Kl+
whlyyrsyEFJEsRKid6uekAwLGHTliO2T5Br7B9A9T3ZAMwCgFUXBTj5AGPcP/kZp
ebPLXUKPLltuaWtajHaLZDrKqOFhah0AP20VAlSUk2vlR29DoBiDYkQL3c4C4ebv
zMjgCzgfLVxb8IOVHOkiuz277sBB4lgg4NZ0TovZt6jTJrxntQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPvjk1rb2Bd9xh0lyeY93+SJJQaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvMTFiZGQ0MDctNTg4My0z
YWQyLTkxMTctYjY0NWViMTA0ZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+cMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMNlpk52n8934JWL3r4w841TxSe9P7rnRd6diZszv0EdzhT/UYChJnl6
VR1NQKdaNyJNHyTheY2ojsZhw8mTFUsujMqqWE+spcYnZ4CgbAaB/4Szi7K1EvxA
oX4AFlOcV+8Y6/wCtwvfe9TT5fssCvyg+a0YhsBT7ecVIBDD4gYFPPFcY18CyDfx
vE3qUbG1rIL5Gw96oHYQ02AJxarbgdwS15QG73E5rk3EQxgN3z4OHJvzO0L4WDrX
DsUOez05m76mLxZLucftTWkDazvfjSv7Vqxm4aWAU/79j1i3siky5FBbNhdg/jEz
pY3W5gj6XR97NA2J+jQriHZTpBvqMgU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:12 2025 by rpki-client