Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/d3493e5c-8115-3ee3-9dca-d883e8e794cc.roa
File:                     d3493e5c-8115-3ee3-9dca-d883e8e794cc.roa (raw, json)
Hash identifier:          zrSGdQttFAbIfJvyrfyjunWlEd1USNoLqU98BunV0eo=
Subject key identifier:   B5:EE:55:61:ED:57:8E:1D:4D:EC:BD:73:BB:6C:49:2C:D3:58:B9:5A
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858498E648122D144DA9CA0306C00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/d3493e5c-8115-3ee3-9dca-d883e8e794cc.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        66.117.24.0/24 maxlen: 24
                          66.117.25.0/24 maxlen: 24
                          66.117.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:81:22:d1:44:da:9c:a0:30:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=4c2002c3-8cc6-474f-a7a9-c2e50bd06d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:59:43:99:c2:c9:93:72:ab:e3:1b:89:c0:c4:
                    98:1e:72:04:83:70:38:17:86:b3:fd:48:34:7a:86:
                    ff:0c:fe:e1:e6:fe:9a:b9:2f:c2:8a:fd:f5:c4:e9:
                    e8:f1:34:ac:c2:9c:4d:80:bf:d5:56:95:dc:59:85:
                    64:35:03:da:ab:5f:c9:e2:d0:f5:37:f0:3a:ee:18:
                    65:8b:be:a0:1c:62:08:ec:3e:10:2f:6b:84:75:0d:
                    6a:30:e7:87:f8:ba:6a:dd:66:10:06:7a:9c:df:df:
                    52:93:f4:12:6a:1b:b9:75:81:25:38:66:a0:80:c0:
                    50:6c:94:30:16:05:7c:e3:59:01:16:ea:c6:00:d1:
                    d7:31:61:05:d3:31:6a:fc:bc:34:52:ae:30:d8:6c:
                    fe:66:2b:d4:84:3c:b8:60:02:15:43:41:1b:b5:6c:
                    51:74:9b:e4:e7:92:53:64:08:fc:53:04:5c:c0:41:
                    ce:62:c8:f8:2b:6e:8e:7f:ea:de:c7:44:ad:13:4c:
                    b4:a6:ae:84:9b:a7:37:53:e0:15:ae:4b:8a:d2:ed:
                    80:7a:cb:57:ef:81:2a:09:f9:d6:01:d6:0d:43:65:
                    bd:c6:24:ea:3f:6c:79:22:4f:d5:29:19:e6:bc:c7:
                    de:66:65:f0:27:50:32:8d:55:f4:c9:64:97:ef:73:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EE:55:61:ED:57:8E:1D:4D:EC:BD:73:BB:6C:49:2C:D3:58:B9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/d3493e5c-8115-3ee3-9dca-d883e8e794cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.24.0-66.117.26.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:25:25:5d:c5:9f:59:ee:bc:90:6c:09:a8:98:fa:a1:8e:
         3c:9b:41:3c:f5:da:82:4a:49:fc:1f:33:66:61:47:ee:02:b7:
         76:68:eb:a0:95:e4:f5:bc:d6:27:9a:f9:da:2f:9c:e1:92:de:
         80:9f:45:ca:eb:7a:38:f7:12:a5:cc:85:5a:b0:d6:ff:9c:05:
         a4:85:d4:42:fc:61:29:f5:30:95:3d:19:ba:58:e5:be:93:ce:
         3e:e4:76:cc:6d:b8:6a:25:61:b4:db:a9:75:74:f3:d0:03:1c:
         8d:d4:0b:ae:2b:1a:8b:47:9e:70:91:6d:29:1b:cf:9d:ee:9c:
         bd:9f:0d:d6:70:5e:7b:88:e5:ac:c3:c3:91:00:af:68:74:c5:
         5b:77:23:ed:a9:7b:75:b9:d7:74:96:09:03:58:32:13:97:ca:
         97:4e:f5:e1:7f:4f:dc:6a:f9:53:cc:cb:9e:8e:88:f2:c5:c1:
         ae:0c:41:e4:94:0b:3f:56:e9:f3:68:82:c2:7e:ec:96:e5:21:
         14:a1:1c:e7:6b:4f:f0:fe:5d:29:d6:8e:16:53:67:2f:20:58:
         c3:4d:a5:4e:68:03:bb:0b:19:c4:2a:f5:de:56:8d:3b:f0:50:
         48:4d:69:9c:57:e6:69:09:d6:25:cd:b7:67:75:d0:1f:58:42:
         c0:3e:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:09 2025 by rpki-client