Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c676196c-595e-3571-82bb-c4fd860e82a4.roa
File:                     c676196c-595e-3571-82bb-c4fd860e82a4.roa (raw, json)
Hash identifier:          0wOcMLkGe7fnMMXvMXjVF5DBpqiyvnZPLRtF0QzBRtY=
Subject key identifier:   BA:1B:24:4D:34:C0:56:FC:F3:E8:78:DD:30:BE:A3:FB:A6:F1:42:78
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584A8B0B62302892894B74754DC0
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c676196c-595e-3571-82bb-c4fd860e82a4.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        63.140.40.0/24 maxlen: 24
                          63.140.41.0/24 maxlen: 24
                          63.140.43.0/24 maxlen: 24
                          66.117.16.0/24 maxlen: 24
                          66.117.17.0/24 maxlen: 24
                          172.82.197.0/24 maxlen: 24
                          172.82.208.0/24 maxlen: 24
                          172.82.210.0/24 maxlen: 24
                          172.82.214.0/24 maxlen: 24
                          172.82.221.0/24 maxlen: 24
                          172.82.222.0/24 maxlen: 24
                          172.82.224.0/24 maxlen: 24
                          172.82.226.0/24 maxlen: 24
                          172.82.227.0/24 maxlen: 24
                          172.82.229.0/24 maxlen: 24
                          172.82.230.0/24 maxlen: 24
                          172.82.231.0/24 maxlen: 24
                          172.82.232.0/24 maxlen: 24
                          172.82.233.0/24 maxlen: 24
                          172.82.238.0/24 maxlen: 24
                          172.82.239.0/24 maxlen: 24
                          192.243.230.0/24 maxlen: 24
                          192.243.244.0/24 maxlen: 24
                          192.243.246.0/24 maxlen: 24
                          192.243.247.0/24 maxlen: 24
                          192.243.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:62:30:28:92:89:4b:74:75:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=b31e66e8-ae0a-4e51-b9c7-302b7fd67693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:99:01:a7:3f:23:8b:af:b3:89:97:be:1d:
                    ed:8e:91:cb:c6:ad:90:d4:85:89:a7:46:68:74:16:
                    ac:0a:7a:33:6c:2f:d0:03:aa:5a:d9:1d:e6:29:21:
                    6f:93:c9:37:18:9b:30:bc:4f:2e:d7:40:23:1a:91:
                    1d:db:8e:24:80:e1:07:ea:80:f7:5a:69:2f:1e:9a:
                    20:77:fe:10:de:00:5f:4f:c0:ab:aa:85:9f:bd:94:
                    e6:b6:ed:e1:13:02:9f:d0:f3:c3:8a:66:c0:7c:eb:
                    0c:9d:80:bd:94:19:1d:bb:da:85:f2:69:dc:af:cf:
                    52:80:48:e0:dd:8c:92:6a:40:96:47:4e:55:9e:a5:
                    9e:01:75:02:55:74:fb:44:b1:81:89:ed:64:b2:ea:
                    2f:86:c6:1e:5e:4d:49:3e:f2:77:ea:cf:5c:97:91:
                    d6:ab:8a:aa:52:a8:05:cd:3e:37:89:e0:e0:d6:d5:
                    3d:34:e3:30:7c:b5:1e:2d:3a:44:95:e4:79:c0:66:
                    5b:ca:2d:75:c9:2d:b7:95:e4:bb:ce:b0:cd:6b:d1:
                    85:44:00:78:9c:58:42:5e:39:f2:d1:76:28:ff:1b:
                    36:f2:5a:12:ed:75:47:0d:fe:51:1d:87:59:e4:60:
                    33:2d:73:c6:b4:a7:8a:47:63:38:5b:cb:85:c6:ae:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:24:4D:34:C0:56:FC:F3:E8:78:DD:30:BE:A3:FB:A6:F1:42:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c676196c-595e-3571-82bb-c4fd860e82a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.40.0/23
                  63.140.43.0/24
                  66.117.16.0/23
                  172.82.197.0/24
                  172.82.208.0/24
                  172.82.210.0/24
                  172.82.214.0/24
                  172.82.221.0-172.82.222.255
                  172.82.224.0/24
                  172.82.226.0/23
                  172.82.229.0-172.82.233.255
                  172.82.238.0/23
                  192.243.230.0/24
                  192.243.244.0/24
                  192.243.246.0/23
                  192.243.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:87:54:7e:e8:34:88:b3:97:c0:de:07:5e:dd:3f:46:36:b0:
         ee:61:cc:9e:86:c5:08:1c:a9:cf:75:d5:50:bd:c9:a3:04:53:
         cb:a9:0d:8b:a5:84:cd:14:02:c5:3f:fb:b9:cd:79:42:f2:61:
         d5:bc:e9:6c:4a:d6:02:a6:77:1a:5d:13:56:2f:3b:27:73:ce:
         dd:e7:c5:05:d0:6a:d4:03:71:b9:78:83:42:48:fd:6d:c9:9b:
         77:04:a0:89:9c:69:36:32:2b:55:9d:9b:03:cf:a1:d2:e5:1f:
         b0:3c:42:27:ef:1c:29:77:e9:de:17:0c:34:72:55:93:f2:03:
         1c:84:27:b7:14:0c:97:5d:8a:c2:81:9c:2e:ba:87:86:28:0a:
         b6:45:23:e9:d3:74:95:22:2b:8f:cf:66:4b:df:5c:f4:19:ff:
         25:fb:5a:72:27:21:3b:5b:40:b6:b8:ab:cb:f2:67:47:36:58:
         b4:d2:a7:cd:df:34:b4:d1:60:02:63:cf:e3:9d:f5:a7:27:d4:
         44:02:03:21:b3:35:7a:f6:66:15:54:87:72:e0:9d:bc:43:0e:
         15:62:6c:88:b2:a7:8a:17:65:5b:23:b8:fd:fc:cf:65:9a:4f:
         bd:26:a5:ca:9c:1b:97:15:05:0c:57:0a:41:64:5f:52:71:4e:
         f3:7a:c5:ec
-----BEGIN CERTIFICATE-----
MIIGrjCCBZagAwIBAgIUAQ0Mn0MoWEqLC2IwKJKJS3R1TcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
YjMxZTY2ZTgtYWUwYS00ZTUxLWI5YzctMzAyYjdmZDY3NjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOeZAac/I4uvs4mXvh3tjpHLxq2Q1IWJp0Zo
dBasCnozbC/QA6pa2R3mKSFvk8k3GJswvE8u10AjGpEd244kgOEH6oD3WmkvHpog
d/4Q3gBfT8CrqoWfvZTmtu3hEwKf0PPDimbAfOsMnYC9lBkdu9qF8mncr89SgEjg
3YySakCWR05VnqWeAXUCVXT7RLGBie1ksuovhsYeXk1JPvJ36s9cl5HWq4qqUqgF
zT43ieDg1tU9NOMwfLUeLTpEleR5wGZbyi11yS23leS7zrDNa9GFRAB4nFhCXjny
0XYo/xs28loS7XVHDf5RHYdZ5GAzLXPGtKeKR2M4W8uFxq5cxQIDAQABo4IDwDCC
A7wwHQYDVR0OBBYEFLobJE00wFb88+h43TC+o/um8UJ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvYzY3NjE5NmMtNTk1ZS0z
NTcxLTgyYmItYzRmZDg2MGU4MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEAT+MKAME
AD+MKwMEAUJ1EAMEAKxSxQMEAKxS0AMEAKxS0gMEAKxS1jAMAwQArFLdAwQArFLe
AwQArFLgAwQBrFLiMAwDBACsUuUDBAGsUugDBAGsUu4DBADA8+YDBADA8/QDBAHA
8/YDBADA8/8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAoIdUfug0iLOXwN4HXt0/Rjaw7mHMnobFCBypz3XV
UL3JowRTy6kNi6WEzRQCxT/7uc15QvJh1bzpbErWAqZ3Gl0TVi87J3PO3efFBdBq
1ANxuXiDQkj9bcmbdwSgiZxpNjIrVZ2bA8+h0uUfsDxCJ+8cKXfp3hcMNHJVk/ID
HIQntxQMl12KwoGcLrqHhigKtkUj6dN0lSIrj89mS99c9Bn/JftacichO1tAtrir
y/JnRzZYtNKnzd80tNFgAmPP4531pyfURAIDIbM1evZmFVSHcuCdvEMOFWJsiLKn
ihdlWyO4/fzPZZpPvSalypwblxUFDFcKQWRfUnFO83rF7A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:44 2025 by rpki-client