Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa
File:                     dad5264f-359a-33f3-bc03-957253f1506e.roa (raw, json)
Hash identifier:          ivWCR3op+e2Mx6YlkIeQF5KqN+nfiY7oM1HCNFRnscw=
Subject key identifier:   5E:78:BD:D3:C6:67:AF:97:9F:D3:1C:26:22:FA:96:75:3E:88:C3:8D
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584AA42B85CEC32BD80E31C40F00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     15224
IP address blocks:        63.140.32.0/19 maxlen: 24
                          66.117.16.0/20 maxlen: 24
                          66.235.128.0/19 maxlen: 24
                          172.82.192.0/18 maxlen: 24
                          192.161.136.0/21 maxlen: 24
                          192.243.224.0/19 maxlen: 24
                          208.67.40.0/22 maxlen: 24
                          208.77.136.0/22 maxlen: 24
                          208.91.168.0/21 maxlen: 24
                          2620:113:1000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:85:ce:c3:2b:d8:0e:31:c4:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=d5bc5e8a-9d7a-474d-8c92-b7f8622bd8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:20:cc:2d:e7:af:29:32:db:26:29:0f:dd:
                    80:b3:df:c7:a8:bc:ac:69:81:bd:83:fa:98:9e:8c:
                    ba:39:16:5f:17:aa:17:41:f8:bc:75:33:ff:80:00:
                    cd:e5:59:f4:ef:c1:bb:cc:d4:a7:24:9b:c1:d0:bf:
                    2f:78:c0:27:37:f8:40:9c:4d:1f:82:e6:24:40:d5:
                    05:20:25:41:1c:2e:13:34:db:1d:a1:21:9e:fa:c9:
                    20:83:86:d8:74:7e:64:2f:cd:0d:20:7a:d6:ff:7f:
                    be:82:5e:28:29:55:38:df:8e:8b:27:4f:d1:93:91:
                    3b:e9:99:69:1e:81:c8:c5:31:de:da:ec:bc:94:6b:
                    17:71:5f:6a:d4:28:2a:54:a9:1a:47:70:5f:c4:86:
                    f1:e0:17:05:c3:07:38:57:87:a4:ef:47:44:bc:9f:
                    a2:41:35:f6:56:10:5d:58:ab:38:4a:97:63:da:85:
                    ca:0a:bc:2f:a2:a4:8e:25:00:65:d4:12:f8:39:f6:
                    f9:98:15:e6:39:4d:80:57:4a:47:44:2f:96:c5:21:
                    4a:3f:d0:2f:af:ea:41:d4:16:65:8e:af:9d:0a:1a:
                    b4:06:3a:a6:e8:ad:f2:b4:90:1c:d5:cd:c3:c5:b3:
                    47:48:2e:7d:e8:0e:bc:be:34:96:20:5f:50:64:02:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:78:BD:D3:C6:67:AF:97:9F:D3:1C:26:22:FA:96:75:3E:88:C3:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.32.0/19
                  66.117.16.0/20
                  66.235.128.0/19
                  172.82.192.0/18
                  192.161.136.0/21
                  192.243.224.0/19
                  208.67.40.0/22
                  208.77.136.0/22
                  208.91.168.0/21
                IPv6:
                  2620:113:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:bb:d3:45:1a:df:15:a4:4f:76:d2:57:44:21:41:71:a3:
         26:e3:1b:b7:db:d8:19:2d:73:75:56:38:79:78:8a:28:5e:d6:
         22:88:44:31:c7:36:b7:91:2a:d9:e2:98:62:3d:56:40:77:9c:
         e9:af:4f:4e:d2:4b:2d:47:28:86:54:dc:71:31:9b:03:20:b8:
         8c:1f:41:97:fc:01:4f:da:d9:b6:d0:98:79:58:31:6d:46:3f:
         a0:7f:5f:30:bf:62:57:4d:15:c4:38:7c:78:3d:f0:87:69:fe:
         c3:6f:b3:e8:53:2f:26:31:12:d8:f7:4f:22:6b:ab:9e:45:0a:
         01:c7:bb:99:f3:7e:4d:90:72:a9:32:e8:29:b4:44:d3:26:46:
         3e:55:47:67:62:3c:24:81:40:f1:1c:10:3c:76:27:28:b0:d1:
         49:fd:ae:ac:c3:01:8c:6b:2b:62:2b:13:ba:6b:5f:b5:a7:36:
         09:af:fa:41:fa:c8:a0:10:08:f4:58:c3:44:e1:cc:d0:50:2a:
         52:0c:b0:58:e3:01:f6:c8:0a:9b:b7:31:9b:e1:93:dc:b9:18:
         6d:1c:f3:7d:ee:33:f6:9c:8a:5c:76:41:51:5f:31:9d:ac:60:
         5e:44:41:d9:1f:62:e7:0e:f3:cf:c8:52:e8:a4:f2:f0:92:85:
         16:22:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:33 2025 by rpki-client