Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/812dc7b8-00f3-3f61-9843-e12a6cd216d8.roa
File:                     812dc7b8-00f3-3f61-9843-e12a6cd216d8.roa (raw, json)
Hash identifier:          zR7ElZu4/vfi72o3Dzv1ZsbdjXQHsr/CNTjZllQXT4A=
Subject key identifier:   00:AA:AA:8F:AA:C4:E6:36:26:34:44:3E:BA:E6:59:00:74:09:7F:1E
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858498E647D3D4F9920D228799260
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/812dc7b8-00f3-3f61-9843-e12a6cd216d8.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        66.117.24.0/24 maxlen: 24
                          66.117.25.0/24 maxlen: 24
                          66.117.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:7d:3d:4f:99:20:d2:28:79:92:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=d5907d03-2040-4923-b474-aec184bc27de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:96:3b:6c:bd:e4:4b:bb:ed:0f:44:f1:f2:
                    5a:e0:ea:ad:fd:01:e8:c3:24:20:34:31:70:9c:7b:
                    a3:a6:16:0d:66:b9:dd:b5:b5:75:9d:60:ba:99:12:
                    7f:34:d5:20:c2:8b:3f:b5:b4:98:c4:46:36:44:36:
                    54:54:8d:f4:42:f8:36:44:61:66:b4:63:cc:88:62:
                    7c:71:05:5e:d4:31:b5:09:12:07:9e:b6:5f:3f:57:
                    47:c4:4d:74:d0:f4:1a:ce:7f:b4:c7:39:b2:9d:ff:
                    de:4c:56:83:2f:c5:cd:12:44:b2:19:ef:6a:72:33:
                    34:a0:8d:25:87:f0:95:5e:ae:48:6f:21:6b:71:e6:
                    d4:22:b3:ba:d7:54:5a:db:0b:85:a8:c9:1a:01:27:
                    0f:01:c7:84:a0:9f:66:0e:9d:26:8a:9b:d9:c7:bb:
                    b5:72:e9:7c:74:a6:e9:d6:b3:3e:60:d4:98:77:3b:
                    93:88:ff:bc:3a:e0:7f:f2:ff:6d:59:4e:3b:75:b9:
                    50:e8:ff:23:35:f1:64:7c:a3:b1:4c:1b:f7:99:e9:
                    cc:4a:54:0d:14:29:67:47:fe:93:eb:0a:42:1e:16:
                    16:ef:11:5a:b9:2b:38:38:92:29:ce:72:e5:9d:d7:
                    09:61:0c:27:67:9a:d7:fc:19:5e:84:e3:b7:f8:6a:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:AA:8F:AA:C4:E6:36:26:34:44:3E:BA:E6:59:00:74:09:7F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/812dc7b8-00f3-3f61-9843-e12a6cd216d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.24.0-66.117.26.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:97:38:64:c9:76:ad:03:18:60:d2:01:b1:39:a0:5f:b8:3e:
         78:bd:e0:b1:4b:2e:3f:3a:1a:96:9f:eb:5c:38:94:fa:f2:87:
         c0:59:bd:f0:f0:93:c9:b9:b3:5b:b6:ca:10:6b:ca:1c:fe:2f:
         d3:1c:cb:0c:b9:22:4d:59:6c:73:56:82:26:3c:51:a3:e3:de:
         62:8f:90:ee:44:5e:0a:b1:cd:dc:ea:c0:15:61:ff:58:bf:03:
         b9:96:b3:ac:f7:4a:3f:dd:41:10:91:49:8f:26:bd:69:0d:92:
         dd:a7:73:c8:de:af:ea:1a:ab:7b:78:40:e2:82:2b:bc:f2:70:
         a4:ba:00:5f:82:70:89:8f:d7:81:43:b0:f5:3f:76:92:4a:1e:
         d6:85:21:2a:a5:2a:af:f2:39:cf:a1:0e:50:d5:87:42:c2:f7:
         b7:0a:0b:e7:9b:9b:aa:55:9e:fb:76:e9:eb:84:b7:16:13:90:
         78:2b:a3:75:72:a9:16:21:5f:48:00:86:5e:2d:eb:ea:1a:3a:
         30:f3:77:a2:9b:11:25:04:b7:cd:cf:e9:12:24:dd:c3:98:e0:
         de:10:76:5a:5a:54:55:74:1e:b5:cc:44:20:f7:ce:ba:d2:4e:
         3d:aa:1a:47:27:11:b8:ec:0e:f1:4b:ea:25:2f:99:3d:56:2c:
         d9:17:7c:f4
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmOZH09T5kg0ih5kmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZDU5MDdkMDMtMjA0MC00OTIzLWI0NzQtYWVjMTg0YmMyN2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWOWO2y95Eu77Q9E8fJa4Oqt/QHowyQgNDFw
nHujphYNZrndtbV1nWC6mRJ/NNUgwos/tbSYxEY2RDZUVI30Qvg2RGFmtGPMiGJ8
cQVe1DG1CRIHnrZfP1dHxE100PQazn+0xzmynf/eTFaDL8XNEkSyGe9qcjM0oI0l
h/CVXq5IbyFrcebUIrO611Ra2wuFqMkaAScPAceEoJ9mDp0mipvZx7u1cul8dKbp
1rM+YNSYdzuTiP+8OuB/8v9tWU47dblQ6P8jNfFkfKOxTBv3menMSlQNFClnR/6T
6wpCHhYW7xFauSs4OJIpznLlndcJYQwnZ5rX/BlehOO3+GqOYQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFACqqo+qxOY2JjREPrrmWQB0CX8eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvODEyZGM3YjgtMDBmMy0z
ZjYxLTk4NDMtZTEyYTZjZDIxNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANCdRgD
BABCdRowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAQJc4ZMl2rQMYYNIBsTmgX7g+eL3gsUsuPzoalp/rXDiU
+vKHwFm98PCTybmzW7bKEGvKHP4v0xzLDLkiTVlsc1aCJjxRo+PeYo+Q7kReCrHN
3OrAFWH/WL8DuZazrPdKP91BEJFJjya9aQ2S3adzyN6v6hqre3hA4oIrvPJwpLoA
X4JwiY/XgUOw9T92kkoe1oUhKqUqr/I5z6EOUNWHQsL3twoL55ubqlWe+3bp64S3
FhOQeCujdXKpFiFfSACGXi3r6ho6MPN3opsRJQS3zc/pEiTdw5jg3hB2WlpUVXQe
tcxEIPfOutJOPaoaRycRuOwO8UvqJS+ZPVYs2Rd89A==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:51 2025 by rpki-client