Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa
File:                     d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa (raw, json)
Hash identifier:          bXsllSEnDxwf4qEO83GzHoSIUHopRPIquEswU/qwTfk=
Subject key identifier:   33:CC:31:82:F5:0B:23:C2:0C:AB:CA:2B:FE:37:4D:88:60:3E:80:84
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F432858491246B4318462D073D0AD0E80
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     396982
IP address blocks:        43.231.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b4:31:84:62:d0:73:d0:ad:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=de8325c6-c98f-4e6f-b1be-714fc91d38fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:cc:3f:d2:a1:67:10:eb:53:fe:b3:9d:3a:
                    48:d8:0a:10:94:30:bd:b1:99:b8:ad:34:fe:dc:89:
                    e1:98:e6:36:82:02:3c:2b:fa:db:6f:40:1c:8d:2c:
                    27:d1:99:47:21:68:f3:9c:40:84:47:9d:e4:1a:b7:
                    36:27:c3:73:a0:a7:a3:2b:9d:5f:1f:36:be:2a:78:
                    f8:0e:79:39:30:64:cd:e2:c3:9a:1a:11:af:f0:58:
                    f8:ed:7f:47:1d:98:64:c2:b4:99:2c:28:a9:b0:18:
                    14:51:21:eb:66:cd:8d:09:ac:62:28:1d:4a:3a:63:
                    8c:3a:5b:eb:39:1c:3c:19:db:b4:71:88:ed:57:d0:
                    e7:d0:ee:7d:ca:45:8d:70:97:06:7c:58:36:34:32:
                    a4:51:e6:d2:e7:c1:8e:69:af:95:c0:83:3d:f7:32:
                    90:84:13:19:74:54:8c:ad:1b:0b:4d:96:fb:09:71:
                    86:ca:df:ca:23:a3:b4:7a:b1:4d:8e:26:5a:f9:5c:
                    92:8d:ca:4b:bb:ac:7e:52:19:7c:4c:54:23:01:fc:
                    c7:7b:f4:60:1b:d8:7e:53:95:fe:51:0c:f9:a2:0e:
                    cf:2b:56:42:9e:b2:80:ff:77:f2:b4:23:9c:4d:d9:
                    62:80:d3:ad:7b:b2:84:ae:63:28:e0:4e:ba:ea:2c:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CC:31:82:F5:0B:23:C2:0C:AB:CA:2B:FE:37:4D:88:60:3E:80:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:f5:93:31:e1:60:0c:a2:2d:7a:45:6a:66:61:9d:60:ce:
         ba:53:3a:97:ab:34:d3:c1:7b:e1:5a:1c:16:36:e3:43:35:d3:
         4b:84:ee:2f:69:fb:28:09:f8:ec:09:4a:a6:6e:7c:b3:11:01:
         d7:f0:e5:8f:57:6b:c8:d6:f4:2c:40:11:a2:59:05:3a:8c:c7:
         15:9e:29:46:a6:fa:3b:7b:a4:ce:7e:db:20:27:08:9e:8c:e6:
         f0:c0:7a:eb:0c:dc:be:11:dc:0d:a5:a0:2f:ed:89:d2:66:6a:
         80:fc:62:f1:6b:16:9f:6d:3f:9f:19:ef:e6:25:24:fb:49:a1:
         cc:17:50:c9:72:78:81:c7:90:9b:29:4a:77:b1:f8:ea:53:47:
         42:5e:f2:2c:27:87:40:03:d5:5b:de:32:6f:14:ee:cd:08:46:
         31:f8:cd:1a:84:f5:c2:14:62:98:d7:3c:c9:63:73:c0:00:e9:
         db:77:06:fe:2f:b4:a7:c8:8f:e6:9e:03:c9:37:9d:ae:23:3c:
         bc:24:ca:90:2a:51:91:7f:5a:e4:b3:cb:9e:35:66:3d:55:c3:
         b9:ac:ce:97:43:17:5e:07:b1:50:d0:a1:0c:9a:c4:57:79:9e:
         5a:09:ec:35:e8:18:2c:47:3b:3a:db:c4:64:5b:c6:85:aa:cd:
         52:ed:dc:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrQxhGLQc9CtDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
ZGU4MzI1YzYtYzk4Zi00ZTZmLWIxYmUtNzE0ZmM5MWQzOGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOfMP9KhZxDrU/6znTpI2AoQlDC9sZm4rTT+
3InhmOY2ggI8K/rbb0AcjSwn0ZlHIWjznECER53kGrc2J8NzoKejK51fHza+Knj4
Dnk5MGTN4sOaGhGv8Fj47X9HHZhkwrSZLCipsBgUUSHrZs2NCaxiKB1KOmOMOlvr
ORw8Gdu0cYjtV9Dn0O59ykWNcJcGfFg2NDKkUebS58GOaa+VwIM99zKQhBMZdFSM
rRsLTZb7CXGGyt/KI6O0erFNjiZa+VySjcpLu6x+Uhl8TFQjAfzHe/RgG9h+U5X+
UQz5og7PK1ZCnrKA/3fytCOcTdligNOte7KErmMo4E666ixgrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPMMYL1CyPCDKvKK/43TYhgPoCEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvZDIxYWMzNWItM2ZkNi0z
MGQzLThlY2UtZjVjMjA5MmFlOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+cNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZc9ZMx4WAMoi16RWpmYZ1gzrpTOperNNPBe+FaHBY240M100uE7i9p
+ygJ+OwJSqZufLMRAdfw5Y9Xa8jW9CxAEaJZBTqMxxWeKUam+jt7pM5+2yAnCJ6M
5vDAeusM3L4R3A2loC/tidJmaoD8YvFrFp9tP58Z7+YlJPtJocwXUMlyeIHHkJsp
Snex+OpTR0Je8iwnh0AD1VveMm8U7s0IRjH4zRqE9cIUYpjXPMljc8AA6dt3Bv4v
tKfIj+aeA8k3na4jPLwkypAqUZF/WuSzy541Zj1Vw7mszpdDF14HsVDQoQyaxFd5
nloJ7DXoGCxHOzrbxGRbxoWqzVLt3Kg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:08:40 2025 by rpki-client