Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa
File:                     73593fb5-6e33-3b47-af5a-76760132089b.roa (raw, json)
Hash identifier:          3akMnFG6K34C+ZKqeaVn6bwyJ7508vOrabS5Fbotd5g=
Subject key identifier:   DA:D2:2C:A3:A2:31:18:89:52:A5:FE:A2:C9:75:C6:70:3E:D4:F2:BD
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584F506D550174A6ACA53C715C00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        63.140.40.0/24 maxlen: 24
                          63.140.41.0/24 maxlen: 24
                          63.140.43.0/24 maxlen: 24
                          66.117.16.0/24 maxlen: 24
                          66.117.17.0/24 maxlen: 24
                          172.82.197.0/24 maxlen: 24
                          172.82.208.0/24 maxlen: 24
                          172.82.210.0/24 maxlen: 24
                          172.82.214.0/24 maxlen: 24
                          172.82.221.0/24 maxlen: 24
                          172.82.222.0/24 maxlen: 24
                          172.82.224.0/24 maxlen: 24
                          172.82.226.0/24 maxlen: 24
                          172.82.227.0/24 maxlen: 24
                          172.82.229.0/24 maxlen: 24
                          172.82.230.0/24 maxlen: 24
                          172.82.231.0/24 maxlen: 24
                          172.82.232.0/24 maxlen: 24
                          172.82.233.0/24 maxlen: 24
                          172.82.236.0/24 maxlen: 24
                          172.82.238.0/24 maxlen: 24
                          172.82.239.0/24 maxlen: 24
                          192.28.144.0/23 maxlen: 24
                          192.28.146.0/23 maxlen: 24
                          192.28.148.0/23 maxlen: 24
                          192.28.150.0/23 maxlen: 24
                          192.28.152.0/22 maxlen: 24
                          192.28.156.0/23 maxlen: 24
                          192.28.158.0/24 maxlen: 24
                          192.28.162.0/24 maxlen: 24
                          192.243.230.0/24 maxlen: 24
                          192.243.244.0/24 maxlen: 24
                          192.243.246.0/24 maxlen: 24
                          192.243.247.0/24 maxlen: 24
                          192.243.255.0/24 maxlen: 24
                          199.15.212.0/23 maxlen: 24
                          199.15.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:55:01:74:a6:ac:a5:3c:71:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=27b34339-3674-43af-a90d-8f5d6772e483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:e8:43:20:c1:09:2e:4c:58:6f:54:a3:9c:
                    c5:64:61:e2:23:f7:34:3d:d1:3f:16:30:d9:d2:6b:
                    3c:cc:52:6d:fb:86:dc:60:61:90:08:af:d5:60:7d:
                    12:22:50:89:47:be:95:29:0c:65:cd:11:9d:ba:1d:
                    3a:7e:97:67:b0:b2:db:c8:0f:d5:20:b3:43:ce:21:
                    83:d0:15:ea:94:07:c2:ad:ec:7a:e9:79:41:f2:da:
                    9d:e3:f2:9d:c4:33:a1:eb:3e:b2:40:0f:cf:28:e6:
                    ec:27:1f:fe:7e:5e:56:2b:9a:7e:cd:88:78:4a:df:
                    b2:e4:41:f6:18:f4:bb:6c:fd:6f:b5:fa:58:2b:0c:
                    0c:04:2e:03:59:53:1f:80:10:4f:b6:69:78:f3:86:
                    0f:b6:7c:56:c5:14:69:fc:23:47:9b:53:9a:07:3d:
                    58:b7:ad:6e:7c:6c:08:4a:5c:9e:ca:b9:ba:47:50:
                    10:ed:c6:05:0e:26:78:b5:80:01:43:9c:5b:81:6f:
                    ab:7f:fe:15:c8:ee:c3:62:f0:e2:11:03:bf:62:d3:
                    ef:b1:d4:ac:a3:04:d3:a5:fd:f1:ca:19:d3:18:00:
                    19:26:55:fb:2c:a7:b6:35:80:cd:a8:e8:a8:5b:4a:
                    b3:aa:b5:00:99:d6:8e:0f:a6:32:41:e3:cb:f3:f8:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:2C:A3:A2:31:18:89:52:A5:FE:A2:C9:75:C6:70:3E:D4:F2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.40.0/23
                  63.140.43.0/24
                  66.117.16.0/23
                  172.82.197.0/24
                  172.82.208.0/24
                  172.82.210.0/24
                  172.82.214.0/24
                  172.82.221.0-172.82.222.255
                  172.82.224.0/24
                  172.82.226.0/23
                  172.82.229.0-172.82.233.255
                  172.82.236.0/24
                  172.82.238.0/23
                  192.28.144.0-192.28.158.255
                  192.28.162.0/24
                  192.243.230.0/24
                  192.243.244.0/24
                  192.243.246.0/23
                  192.243.255.0/24
                  199.15.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ff:75:2b:25:a0:00:98:ae:8d:46:dd:0c:a3:61:c2:bf:0e:
         f2:d8:6f:7b:f8:e8:78:2f:56:2e:69:33:f7:79:75:a1:4d:a7:
         22:09:88:ad:ed:1c:25:23:a3:64:cf:2f:d5:d4:f4:05:56:c0:
         7d:0e:02:7a:d6:64:a4:a6:f7:ee:50:6e:f3:ad:e4:f4:85:09:
         8a:7c:fe:3c:bc:9a:57:47:e3:03:60:b2:c3:15:9c:36:59:15:
         81:d5:74:a0:b2:4c:ad:fc:f9:fe:8b:15:a1:1c:95:8e:ba:15:
         47:ff:50:f9:fe:9e:19:d3:b6:9b:e1:65:0f:a2:d9:e0:29:46:
         57:33:84:b4:6c:ad:0f:64:03:c7:06:27:55:a2:51:ae:e8:3f:
         34:e0:7b:19:77:3d:55:1d:f6:f7:3b:ca:b0:9b:82:65:3c:42:
         31:b9:9d:62:88:96:46:10:ab:46:68:b8:40:36:0c:7a:b9:fe:
         be:12:89:c9:e5:31:75:cf:e3:9b:4a:cc:20:d7:8f:33:18:c2:
         17:e7:ba:2f:d1:29:84:a8:59:cf:e6:5f:bc:70:90:47:97:0f:
         c6:c0:95:a7:7a:aa:96:5b:ea:d9:9f:2e:2d:91:46:6c:76:62:
         7b:dc:34:de:1e:67:7e:7a:d4:1b:8f:1f:6d:b1:67:be:04:6d:
         c5:b8:e3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:43:16 2026 by rpki-client