Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b1b5442a-d5ba-3d1f-907c-d3be7cd1e2ff.roa
File:                     b1b5442a-d5ba-3d1f-907c-d3be7cd1e2ff.roa (raw, json)
Hash identifier:          cvYV/NFldVR1IOuALznMyqhmSp6aIJVoiLK681y6XbY=
Subject key identifier:   B5:67:4E:6C:64:A5:20:D8:DB:F9:6C:F3:65:FB:39:93:FD:14:4F:24
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584E561A02CD8AD2C4CD5D109C40
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b1b5442a-d5ba-3d1f-907c-d3be7cd1e2ff.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        43.231.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:02:cd:8a:d2:c4:cd:5d:10:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=45cf251c-a1b1-492f-9a14-60c0d709dcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:66:e4:46:2e:14:bf:3b:9b:ec:93:e5:46:4c:
                    c7:68:7a:75:73:41:51:d8:fd:76:34:22:b0:f4:e7:
                    7e:81:80:57:a7:e6:58:6b:5c:10:6f:2a:5a:cb:2f:
                    f2:83:45:2d:bc:51:32:f4:f4:a0:29:10:0c:6d:b9:
                    3f:32:12:6c:26:e9:dd:94:e7:37:63:69:3c:d0:13:
                    59:fd:ca:44:3d:ff:3e:4f:c3:93:8c:89:7b:a4:d3:
                    dd:de:0f:8a:d0:83:35:22:a5:9c:05:82:d8:f0:78:
                    4e:e0:32:97:6b:aa:76:00:49:d0:e8:66:a1:41:46:
                    43:3f:88:1b:9e:0e:21:01:a5:77:1c:e1:45:87:51:
                    73:fd:2e:cd:54:62:03:9c:33:f2:5e:d9:6d:08:ec:
                    b9:b9:33:a9:4a:53:fd:3f:9e:23:6b:80:15:f8:03:
                    d8:8f:5d:51:e2:3d:61:07:bd:1c:fd:e4:93:5b:25:
                    8f:e0:8c:6f:f4:91:89:d8:9e:42:df:76:d5:c4:71:
                    6e:97:28:73:36:4f:7c:5f:64:c0:48:b9:64:8e:b6:
                    67:60:e8:12:62:02:93:60:34:57:87:db:2b:d8:67:
                    09:ea:37:84:8e:e2:9d:92:c6:4e:7f:aa:80:04:82:
                    6c:a6:8b:c3:51:81:fe:69:e9:14:7d:3f:57:c2:d8:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:67:4E:6C:64:A5:20:D8:DB:F9:6C:F3:65:FB:39:93:FD:14:4F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b1b5442a-d5ba-3d1f-907c-d3be7cd1e2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:94:30:49:8d:f7:ac:ad:2b:98:5e:f8:aa:39:b9:25:57:
         dc:16:42:8a:1e:d0:f7:0a:88:31:85:3b:3a:d3:66:4a:9e:23:
         6d:13:09:a6:26:5a:db:53:1d:fa:4c:ba:fd:f7:12:63:fe:f6:
         f2:2c:5a:86:00:fc:8e:f7:d8:1d:5e:6c:11:46:13:b4:9c:ef:
         7d:90:cc:4a:31:e4:dc:f6:fa:28:df:c4:8e:39:83:e6:87:9f:
         4c:d3:fe:24:46:27:de:8f:27:fe:fa:c1:ac:a2:2e:4e:6d:02:
         2e:2f:bb:13:2e:8c:c6:b9:fc:d0:70:f9:5d:73:58:e8:96:86:
         79:a0:1f:ac:9d:0b:57:d5:8e:9b:d5:bf:7e:49:d5:16:cc:3b:
         b2:28:b7:b0:ab:be:f4:32:a4:82:f7:b3:2d:9a:be:39:6d:8d:
         91:61:fa:14:12:40:06:bd:a8:e9:01:7a:6f:23:17:0d:70:b9:
         ca:8f:37:d3:9b:cc:63:f1:57:e1:ca:69:3f:c3:d1:50:5c:59:
         78:bb:77:2d:e0:6b:3a:80:ae:3b:54:b6:1d:e1:df:63:9d:15:
         d2:e5:7a:62:85:ed:f6:34:b7:e5:d7:2e:7e:d2:cb:91:3f:56:
         da:1b:66:86:c4:b8:0d:01:fe:4d:ef:0f:a5:5d:0f:c5:63:0e:
         d6:03:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:26:58 2026 by rpki-client