Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/42d4ead9-1b26-335a-b2bd-064960591b16.roa
File:                     42d4ead9-1b26-335a-b2bd-064960591b16.roa (raw, json)
Hash identifier:          TPe1mBJHLMo7eKkWJ1et+cXce1/5urjoMId38bK8/oM=
Subject key identifier:   3A:07:98:A5:9A:24:4D:A4:26:62:BD:AA:C9:4C:82:B8:16:97:5E:DC
Certificate issuer:       /CN=bbc14738-3cfc-4423-b34e-43274ed69b9b
Certificate serial:       010D0C9F4328584D02179A64C9FAFB42C6E45800
Authority key identifier: CF:8C:71:2D:B4:FE:5A:A5:73:15:31:79:18:3B:33:F5:4F:60:7C:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/42d4ead9-1b26-335a-b2bd-064960591b16.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     400006
IP address blocks:        208.99.62.0/24 maxlen: 24
                          2606:7040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/bbc14738-3cfc-4423-b34e-43274ed69b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/bbc14738-3cfc-4423-b34e-43274ed69b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:9a:64:c9:fa:fb:42:c6:e4:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc14738-3cfc-4423-b34e-43274ed69b9b
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=5b1ad55f-0f1a-4c8b-a9d4-7f28b1f9456f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:a5:3d:4a:17:ef:94:d4:68:01:a5:b0:c1:
                    04:fa:7f:0b:38:f2:f3:68:40:23:2c:a9:b0:89:fe:
                    3d:23:8c:46:2f:eb:e0:f8:7b:f0:e1:92:d9:1e:45:
                    1f:ff:a0:b7:de:23:b2:73:e0:89:dd:7e:60:40:5d:
                    d7:6e:2a:77:be:97:5e:c3:04:c2:66:74:ad:56:c4:
                    d8:3a:1a:50:d6:7e:ff:1f:bf:33:9d:e7:7c:aa:55:
                    6d:7b:66:99:4c:bd:85:9c:f4:8e:27:24:b4:7c:27:
                    e7:4b:eb:0e:01:c7:17:77:4f:b9:04:e1:77:0a:4f:
                    d4:b8:4a:da:20:ad:18:7f:90:a7:76:7d:5e:60:c9:
                    35:5c:5a:b3:13:c3:a9:08:0f:02:22:4d:22:55:f0:
                    b8:1a:e2:4b:09:7b:8b:6e:6e:00:bb:5a:04:98:fa:
                    99:6a:5e:26:d5:0a:ce:9d:9c:91:36:6e:3f:78:5d:
                    fe:f0:04:5c:dc:46:d6:1e:28:0c:ba:05:da:2d:a5:
                    9f:d9:19:d8:dd:f3:0f:d7:4a:2d:1b:e8:89:ea:81:
                    9a:6a:6f:98:ec:f1:b4:d1:2c:f2:7a:1b:97:9e:28:
                    3c:24:9f:89:ab:dc:10:aa:c4:8d:c4:d5:77:39:0e:
                    82:25:15:d4:46:f7:1a:8f:f9:0e:86:74:96:30:3e:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:98:A5:9A:24:4D:A4:26:62:BD:AA:C9:4C:82:B8:16:97:5E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/42d4ead9-1b26-335a-b2bd-064960591b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/bbc14738-3cfc-4423-b34e-43274ed69b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CF:8C:71:2D:B4:FE:5A:A5:73:15:31:79:18:3B:33:F5:4F:60:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.62.0/24
                IPv6:
                  2606:7040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:98:2d:97:ed:95:10:b2:b1:59:3a:c0:de:6d:e3:ca:11:0b:
         98:76:fb:ec:35:a8:f0:e8:bf:f2:58:09:42:d8:d9:13:cd:66:
         c9:53:fc:ed:3c:c6:bb:b6:56:fc:0e:94:ce:bb:29:6f:40:e4:
         f2:30:23:41:12:f4:6d:0e:69:c8:d5:c7:3b:f1:6b:6e:de:75:
         31:be:e6:0e:6a:ac:bf:ba:df:08:11:24:fb:17:5e:6b:9c:8a:
         24:21:f5:a8:e6:06:f9:36:72:1c:f0:8f:ce:65:f9:64:3f:3a:
         1c:94:68:e9:20:6d:3b:5d:2e:4a:ba:8e:c6:06:8d:42:86:49:
         73:d9:3f:cf:4b:96:19:9f:4d:ce:63:f7:9a:d9:94:7c:f6:07:
         bd:ec:22:b1:13:1e:5e:eb:db:0a:76:4a:d7:10:68:56:9b:6b:
         ce:10:b7:d7:0d:2a:7a:4d:0f:8a:5f:27:bd:f9:d4:48:e3:ce:
         f3:70:32:71:3e:03:76:e6:4d:94:73:d8:62:27:53:13:fb:4b:
         a2:e4:51:21:73:2c:c0:57:87:2b:a3:c9:43:08:40:0f:b7:c2:
         25:61:56:d5:55:70:e8:8f:77:ae:af:5b:d5:5c:6e:07:3a:84:
         14:1b:13:70:12:cd:f0:bd:18:bd:f3:c2:9c:da:e8:65:c8:e2:
         ff:54:e9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:44 2026 by rpki-client