Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/812dc7b8-00f3-3f61-9843-e12a6cd216d8.roa
File:                     812dc7b8-00f3-3f61-9843-e12a6cd216d8.roa (raw, json)
Hash identifier:          emWFfdgYN/d7wyjrC3vAuWnEUkXgEtMbIjNB0Pzyuzs=
Subject key identifier:   03:60:1A:BB:34:85:61:B6:08:A2:34:01:1F:CB:CB:A0:DB:1F:23:16
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584A6DBB3C1964E2A7F38A382D00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/812dc7b8-00f3-3f61-9843-e12a6cd216d8.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        66.117.24.0/24 maxlen: 24
                          66.117.25.0/24 maxlen: 24
                          66.117.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3c:19:64:e2:a7:f3:8a:38:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=8cd91747-1db2-45d6-bcb2-5a8f9cbf0fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:b5:1f:18:30:c0:5b:1a:f3:b6:a1:f5:3e:
                    22:b9:29:1e:b0:24:41:db:61:86:6d:e1:3f:e9:7b:
                    65:43:36:af:42:29:ca:32:7d:16:62:9e:72:3f:13:
                    c2:e3:88:7e:62:51:16:8b:89:5d:80:1e:a1:98:d2:
                    c8:d3:85:f4:9b:9a:29:29:b1:2a:80:2f:2b:3d:d3:
                    fb:17:37:a0:db:dc:90:88:75:35:56:a4:f8:06:e7:
                    38:0e:bb:10:3b:b1:6e:cd:cd:1f:10:38:e6:a1:0b:
                    d1:85:1d:44:3f:82:a6:d0:ef:2d:16:cc:e6:4b:84:
                    20:c2:67:40:ff:77:7d:4f:06:4b:79:9d:cf:e4:11:
                    f1:f6:26:dd:eb:bb:d7:35:7b:50:79:6f:56:57:0f:
                    2e:93:d0:2f:44:1e:bd:11:e7:53:9e:e8:5f:47:a2:
                    f4:60:cf:f3:e2:8a:a2:54:11:c4:bc:8a:45:1d:2d:
                    b8:b9:52:4e:1f:7c:e9:70:9d:55:dc:6a:62:50:84:
                    5a:72:b9:2a:b5:85:0f:51:77:b3:a4:3e:bb:bf:97:
                    3d:0d:c0:1e:2d:0a:19:22:cd:88:f3:9b:09:c5:58:
                    7d:e9:4d:2b:7a:2a:68:78:8d:07:5c:3a:87:f1:5f:
                    a6:c9:72:75:d6:f8:55:a5:cf:70:44:16:2d:75:68:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:60:1A:BB:34:85:61:B6:08:A2:34:01:1F:CB:CB:A0:DB:1F:23:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/812dc7b8-00f3-3f61-9843-e12a6cd216d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.24.0-66.117.26.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:71:8f:e8:80:90:1b:f3:7d:14:6a:ca:61:cd:6d:15:c1:c0:
         52:4e:33:1c:13:06:c4:fd:51:f4:9d:1e:3f:c4:3e:15:e6:55:
         55:1a:af:4a:71:17:1f:37:78:7c:77:da:91:f0:ea:db:eb:f4:
         ad:26:8c:49:75:60:3e:3c:93:56:dd:18:84:68:78:5d:ec:0e:
         fa:10:33:a9:e8:6c:79:a0:f0:d0:c8:03:9f:2a:c7:d1:5b:c1:
         83:3c:94:a8:03:9c:87:1d:76:36:59:55:a5:55:60:29:a0:a7:
         d1:95:e8:7a:eb:70:de:c4:be:64:c9:3b:55:86:f9:15:e4:01:
         9c:b1:62:8e:69:f7:bb:cd:58:17:bb:a4:44:8c:51:02:fc:81:
         29:43:c2:f1:51:e6:ba:02:2a:84:e7:fb:65:ae:5a:2d:81:60:
         20:12:0d:08:bd:da:58:4e:ad:1e:7b:28:a6:bf:e1:25:69:fa:
         48:08:e1:93:42:d5:a1:ba:66:bd:4a:e7:d4:a5:3e:7e:ea:ee:
         b7:2b:b4:2d:6b:42:9e:53:18:16:89:4e:c7:eb:9c:e2:46:46:
         90:cc:81:23:f9:48:44:0c:3f:7c:43:e1:f7:f9:eb:79:1f:7d:
         4b:25:28:26:d6:f4:66:2b:f0:da:b7:f9:35:78:60:92:7b:83:
         35:cf:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:47 2025 by rpki-client