Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/42d4ead9-1b26-335a-b2bd-064960591b16.roa
File:                     42d4ead9-1b26-335a-b2bd-064960591b16.roa (raw, json)
Hash identifier:          FixzzRzTFdeMmRiz6jlPbDxEGEiHwSiPeL8ZVUWBpUA=
Subject key identifier:   55:90:CB:5A:27:D7:01:CE:82:97:59:B1:1E:18:29:D9:16:03:D0:CC
Certificate issuer:       /CN=bbc14738-3cfc-4423-b34e-43274ed69b9b
Certificate serial:       010D0C9F4328584981D455EA45CA3D468F784F90
Authority key identifier: CF:8C:71:2D:B4:FE:5A:A5:73:15:31:79:18:3B:33:F5:4F:60:7C:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/42d4ead9-1b26-335a-b2bd-064960591b16.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     400006
IP address blocks:        208.99.62.0/24 maxlen: 24
                          2606:7040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/bbc14738-3cfc-4423-b34e-43274ed69b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/bbc14738-3cfc-4423-b34e-43274ed69b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:55:ea:45:ca:3d:46:8f:78:4f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc14738-3cfc-4423-b34e-43274ed69b9b
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=ba8889ea-0498-423b-a138-8086899594e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:f3:c4:fc:a6:6d:f0:4e:63:a3:01:a6:85:
                    e2:a3:e2:0b:81:dd:f9:e4:a6:7c:90:5b:b7:db:01:
                    35:53:7e:15:7e:63:bb:63:90:f3:c2:fb:8c:4c:91:
                    8d:6c:99:b4:89:e9:e9:af:08:22:1f:2c:b8:04:8b:
                    95:5f:31:24:d3:7e:b9:ae:4c:16:6d:eb:e4:c6:f7:
                    ca:2b:97:b8:0b:f6:e4:5e:ff:a0:e4:51:08:20:1a:
                    64:e1:2b:52:7a:d6:c4:77:01:c9:da:f8:4a:7f:71:
                    6e:36:5c:a1:43:f3:27:e9:bf:31:db:a5:de:c7:6d:
                    9e:73:44:0f:84:76:0e:89:71:1d:51:3c:a2:e9:05:
                    46:e9:79:fc:a7:af:dc:b9:49:72:b1:a1:25:b2:d5:
                    2a:b9:bb:08:c8:48:e9:09:a0:65:c7:28:b8:12:07:
                    e5:8e:a4:0b:93:85:7e:1a:e3:75:51:52:a6:74:88:
                    0b:e4:61:e3:29:1f:fe:f2:55:17:a3:aa:0b:e5:63:
                    82:f8:d0:2c:5c:53:58:fe:48:16:cd:56:09:61:15:
                    e3:a8:fc:52:2b:63:71:38:75:37:fe:2b:e3:a0:08:
                    0b:b2:4a:17:f6:c8:da:95:bc:8b:b9:45:82:80:83:
                    14:33:5d:1a:06:58:74:fa:f9:79:32:d4:69:7e:99:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:90:CB:5A:27:D7:01:CE:82:97:59:B1:1E:18:29:D9:16:03:D0:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/42d4ead9-1b26-335a-b2bd-064960591b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b/bbc14738-3cfc-4423-b34e-43274ed69b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CF:8C:71:2D:B4:FE:5A:A5:73:15:31:79:18:3B:33:F5:4F:60:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bbc14738-3cfc-4423-b34e-43274ed69b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.62.0/24
                IPv6:
                  2606:7040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:15:58:ff:c4:8f:85:79:4a:25:77:06:c9:85:08:34:40:85:
         f7:ef:14:b5:e7:06:3d:bc:df:db:e1:05:e9:6c:b0:60:68:67:
         8b:4f:89:72:8e:da:16:77:f6:c6:49:9f:3c:ff:ff:ad:b6:cd:
         63:85:73:52:e2:0c:be:28:40:39:84:47:01:60:c1:c5:f4:3a:
         50:22:9c:1f:33:b8:22:ba:2d:51:f8:6e:a7:9e:d4:46:0d:96:
         d5:8a:50:64:29:79:68:79:12:c7:a1:d8:17:bd:fa:cf:63:cb:
         7a:85:06:ee:34:bc:0d:55:fc:a4:fd:6e:05:f1:b7:37:3c:30:
         ed:ae:64:35:8e:2a:cc:6d:54:4b:d8:2c:a0:dd:20:84:c6:ba:
         f4:2c:3f:13:ef:15:25:2c:b3:82:73:d2:a7:17:a5:43:30:bb:
         95:86:b8:91:14:c8:2d:7a:fe:89:53:ed:54:c7:02:5d:4f:c4:
         15:11:10:07:60:46:f5:74:09:b2:19:0d:58:e2:0e:f2:b2:bd:
         df:08:75:0d:11:2c:3e:b8:c8:85:14:6e:26:2f:55:4f:fd:bb:
         1a:40:9e:65:17:6e:c8:d7:94:a9:8b:64:5e:ea:67:cf:0b:4c:
         90:77:ff:da:44:37:3e:72:6a:10:a2:7c:d9:d1:b5:57:dc:1a:
         d1:7f:87:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:22 2025 by rpki-client