Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bde80014-c481-3eda-b4c1-a22abfd5bee3.roa
File:                     bde80014-c481-3eda-b4c1-a22abfd5bee3.roa (raw, json)
Hash identifier:          96aU78t5sLos9bD/22V6dGxsoy+cQNj4vy5opz2JM7M=
Subject key identifier:   5B:B8:6B:E7:CD:DE:75:5D:40:84:89:E3:BF:F3:42:FD:DB:9F:C2:FF
Certificate issuer:       /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2
Certificate serial:       010D0C9F4328584E18AF06BF108ECD84632D6900
Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bde80014-c481-3eda-b4c1-a22abfd5bee3.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     8075
IP address blocks:        98.142.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:af:06:bf:10:8e:cd:84:63:2d:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=2d243ad0-4ab3-4c1d-af31-d901c0bbd153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:02:4b:31:82:2e:65:6f:1f:e0:2d:eb:d0:
                    6a:05:0d:52:81:7d:ff:99:2c:c2:25:73:de:80:b3:
                    8f:ed:6a:95:35:ae:f6:81:ef:8b:2a:21:c2:f0:0e:
                    6d:f4:5a:1d:b6:1d:c0:fc:ff:1f:17:f9:c9:84:c2:
                    b1:81:b4:2d:26:10:5b:cd:e6:fd:ec:0c:80:4a:de:
                    c0:68:0e:e4:b7:8d:6e:7c:28:87:7c:aa:ef:13:9b:
                    e6:e1:b3:af:d6:f2:e7:af:59:eb:3b:61:cf:f9:3e:
                    ee:b6:59:2b:da:b1:e4:44:9c:a6:9d:2b:5d:91:17:
                    4d:27:fb:6d:88:5b:c9:7d:8e:b4:dc:d0:1e:21:16:
                    54:77:76:c6:ed:fb:92:92:31:cd:f3:39:62:0c:df:
                    2b:a3:bc:b8:76:d6:ca:5e:62:7b:de:df:86:70:3f:
                    84:14:48:02:d7:e0:aa:0c:b2:49:da:cf:dd:97:19:
                    67:f5:1a:9b:b4:b1:b3:a8:c1:f0:cd:a4:f5:ee:20:
                    17:27:3d:a3:1c:3c:8a:34:eb:24:1b:ca:02:c5:68:
                    27:f1:6e:4c:9e:a0:bd:dc:2f:57:20:56:fe:bd:4b:
                    a5:75:cf:90:cd:93:97:05:f9:21:7c:25:18:b0:e6:
                    ed:7f:f2:b2:f4:e7:52:7d:a7:03:6c:6c:1e:ea:d8:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B8:6B:E7:CD:DE:75:5D:40:84:89:E3:BF:F3:42:FD:DB:9F:C2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/bde80014-c481-3eda-b4c1-a22abfd5bee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl

            X509v3 Authority Key Identifier:
                keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:f2:bb:46:f2:bc:51:46:81:05:98:4b:b8:c4:10:11:cf:16:
         05:d1:10:30:68:c7:dd:d7:ba:d3:78:1d:48:36:23:ee:4f:42:
         98:c6:d6:1c:70:25:b9:5f:fd:65:d0:00:16:6b:51:91:48:20:
         23:a7:7c:65:f1:88:e6:ad:d1:60:c2:1a:f8:44:65:52:d4:28:
         2c:4d:bc:33:3b:7f:44:5d:43:b4:f8:58:df:d2:ea:db:1f:ab:
         9b:16:fd:99:f3:a4:73:c6:18:b4:9b:cf:28:11:a5:71:e3:60:
         cf:64:75:db:a7:83:3e:34:16:e9:06:8f:0c:be:cf:45:d3:55:
         f9:09:63:f6:69:e9:4e:7b:d7:d2:1b:05:6e:f2:0a:ef:08:c5:
         f2:ca:5d:0f:fc:c1:c4:f1:e1:a2:f9:8d:a4:9b:da:09:fd:f1:
         7d:82:0b:00:34:67:77:ee:ab:6b:4d:ae:f7:b5:91:47:6d:2b:
         a8:5d:e6:8d:9c:54:48:d0:1c:38:5a:14:bd:94:08:7d:a5:22:
         21:e2:28:29:71:72:ca:d7:37:a4:89:4d:b3:16:fd:91:63:e1:
         06:d2:c3:1e:bb:98:f8:67:95:87:74:f8:c4:bb:c7:3b:4b:e6:
         b7:a7:6b:f1:d4:40:84:e7:4c:a7:c0:8a:3d:a4:38:59:ae:ba:
         b1:a8:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:01:57 2026 by rpki-client