Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/83bb3784-a10a-3b7d-b772-d2cdf95fb419.roa
File:                     83bb3784-a10a-3b7d-b772-d2cdf95fb419.roa (raw, json)
Hash identifier:          V3p57V+BZy/4VpyLJ9ABJMIGfHvc1m5bwUaoXh0X8Ts=
Subject key identifier:   5C:B2:D8:50:3E:24:20:5B:0E:83:3E:24:2F:97:9E:1F:20:1B:94:55
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584A90A0C1DB69323C278FE2A300
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/83bb3784-a10a-3b7d-b772-d2cdf95fb419.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        66.235.130.0/24 maxlen: 24
                          172.82.196.0/24 maxlen: 24
                          172.82.209.0/24 maxlen: 24
                          172.82.216.0/24 maxlen: 24
                          172.82.217.0/24 maxlen: 24
                          172.82.218.0/24 maxlen: 24
                          172.82.219.0/24 maxlen: 24
                          172.82.220.0/24 maxlen: 24
                          172.82.223.0/24 maxlen: 24
                          172.82.242.0/24 maxlen: 24
                          172.82.243.0/24 maxlen: 24
                          192.243.225.0/24 maxlen: 24
                          192.243.228.0/24 maxlen: 24
                          192.243.229.0/24 maxlen: 24
                          208.67.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c1:db:69:32:3c:27:8f:e2:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=c1276336-2b94-470b-82b7-8b0a0ed33e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f4:f0:06:4e:27:1b:3e:04:49:b6:b5:58:34:
                    56:e3:54:48:af:e5:0e:1c:b2:49:a6:18:d4:f0:5f:
                    59:51:16:89:5e:cd:9a:9f:e0:4e:28:59:aa:dd:2f:
                    42:54:04:36:5f:44:41:e5:82:da:33:7b:a7:42:2f:
                    80:c2:9c:cd:c0:3f:38:51:77:23:16:d3:e7:f5:f5:
                    7f:ea:a0:b9:03:56:ca:4b:2d:10:7e:f1:f6:b6:d5:
                    5d:27:e2:be:ba:28:56:b1:2d:5e:16:8b:5e:42:6b:
                    df:aa:57:a8:6a:36:15:52:81:5d:0a:39:56:d7:a3:
                    86:8b:01:cc:d9:4f:77:0c:79:60:cf:e1:6e:d0:29:
                    6e:59:fc:3c:ae:32:ad:b0:8a:0d:98:3c:38:dc:d5:
                    52:26:0d:d4:0d:cd:e3:ef:57:63:b2:a8:31:2d:e0:
                    35:d0:70:83:d8:98:30:9d:17:4a:f5:bc:e8:ec:49:
                    7b:4e:92:25:6c:91:65:2d:d5:c5:be:38:4f:31:8f:
                    d6:b8:7c:ce:2a:6d:18:73:96:eb:20:f0:34:75:e3:
                    c0:8d:66:ee:c0:44:eb:67:68:06:c2:8c:4a:ff:a5:
                    d7:a2:cb:52:cf:c5:c7:db:3a:96:ec:e2:d5:8f:62:
                    7a:be:d9:29:ba:08:50:92:04:79:92:0c:e5:b7:94:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B2:D8:50:3E:24:20:5B:0E:83:3E:24:2F:97:9E:1F:20:1B:94:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/83bb3784-a10a-3b7d-b772-d2cdf95fb419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.130.0/24
                  172.82.196.0/24
                  172.82.209.0/24
                  172.82.216.0-172.82.220.255
                  172.82.223.0/24
                  172.82.242.0/23
                  192.243.225.0/24
                  192.243.228.0/23
                  208.67.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:37:93:0d:9b:9d:ba:42:59:70:25:74:57:dd:4b:0a:8f:
         bc:0d:59:4d:9a:01:5c:4b:52:55:ab:b0:77:6d:07:b8:93:db:
         70:30:84:b2:6f:ea:47:a7:8b:4f:44:4c:fe:4e:ec:6c:2f:8c:
         90:fc:3e:e1:1a:a8:3b:b3:75:9f:59:a0:be:5c:8f:e9:66:76:
         f5:d0:eb:5c:87:38:bc:0d:06:85:23:0a:c6:af:86:f1:e2:ed:
         0f:47:90:c9:69:d0:0f:2d:ae:27:4a:60:71:22:d4:69:42:43:
         4e:34:8f:9f:fb:7b:dc:cc:6e:84:05:3b:bc:53:ea:7d:26:c6:
         a8:95:0e:04:29:5b:7f:5d:5c:4e:50:53:37:67:10:74:7b:e2:
         f7:c3:63:8d:0a:09:6a:40:01:92:87:7c:72:48:00:08:13:54:
         bc:5d:e3:05:bb:e5:73:0b:b3:bc:87:61:c8:47:58:ee:2e:f2:
         9c:f7:54:c3:8a:e5:4e:30:0b:be:c0:9f:21:1d:74:d1:03:c4:
         57:0b:c8:39:cd:63:39:7a:e3:0b:80:47:d2:7c:17:f7:b3:48:
         fa:ba:30:65:91:5f:bb:43:58:7f:9d:a3:8c:9a:1c:62:3a:f2:
         0d:c4:7b:7b:7e:8a:32:1d:26:c5:78:5f:54:94:a5:d8:2f:8b:
         1e:ce:b1:26
-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEqQoMHbaTI8J4/iowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
YzEyNzYzMzYtMmI5NC00NzBiLTgyYjctOGIwYTBlZDMzZTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfTwBk4nGz4ESba1WDRW41RIr+UOHLJJphjU
8F9ZURaJXs2an+BOKFmq3S9CVAQ2X0RB5YLaM3unQi+AwpzNwD84UXcjFtPn9fV/
6qC5A1bKSy0QfvH2ttVdJ+K+uihWsS1eFoteQmvfqleoajYVUoFdCjlW16OGiwHM
2U93DHlgz+Fu0CluWfw8rjKtsIoNmDw43NVSJg3UDc3j71djsqgxLeA10HCD2Jgw
nRdK9bzo7El7TpIlbJFlLdXFvjhPMY/WuHzOKm0Yc5brIPA0dePAjWbuwETrZ2gG
woxK/6XXostSz8XH2zqW7OLVj2J6vtkpughQkgR5kgzlt5SgnwIDAQABo4IDjTCC
A4kwHQYDVR0OBBYEFFyy2FA+JCBbDoM+JC+Xnh8gG5RVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvODNiYjM3ODQtYTEwYS0z
YjdkLWI3NzItZDJjZGY5NWZiNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAQuuCAwQA
rFLEAwQArFLRMAwDBAOsUtgDBACsUtwDBACsUt8DBAGsUvIDBADA8+EDBAHA8+QD
BADQQyowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAhQw3kw2bnbpCWXAldFfdSwqPvA1ZTZoBXEtSVauwd20H
uJPbcDCEsm/qR6eLT0RM/k7sbC+MkPw+4RqoO7N1n1mgvlyP6WZ29dDrXIc4vA0G
hSMKxq+G8eLtD0eQyWnQDy2uJ0pgcSLUaUJDTjSPn/t73MxuhAU7vFPqfSbGqJUO
BClbf11cTlBTN2cQdHvi98NjjQoJakABkod8ckgACBNUvF3jBbvlcwuzvIdhyEdY
7i7ynPdUw4rlTjALvsCfIR100QPEVwvIOc1jOXrjC4BH0nwX97NI+rowZZFfu0NY
f52jjJocYjryDcR7e36KMh0mxXhfVJSl2C+LHs6xJg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:12 2025 by rpki-client