Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/53d49b2e-650e-3215-be94-141ab09aea39.roa
File:                     53d49b2e-650e-3215-be94-141ab09aea39.roa (raw, json)
Hash identifier:          bugzbzZySjCOdESPPbe876bkt7p6maAGCXjx+GyEdPw=
Subject key identifier:   6B:DA:9C:F6:92:7D:4A:E5:C9:DF:47:B6:3B:63:88:C0:9F:67:ED:06
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F43285849B149F4E83564F2FFE7A4E600
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/53d49b2e-650e-3215-be94-141ab09aea39.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        66.235.130.0/24 maxlen: 24
                          172.82.196.0/24 maxlen: 24
                          172.82.209.0/24 maxlen: 24
                          172.82.216.0/24 maxlen: 24
                          172.82.217.0/24 maxlen: 24
                          172.82.218.0/24 maxlen: 24
                          172.82.219.0/24 maxlen: 24
                          172.82.220.0/24 maxlen: 24
                          172.82.223.0/24 maxlen: 24
                          172.82.242.0/24 maxlen: 24
                          172.82.243.0/24 maxlen: 24
                          192.243.225.0/24 maxlen: 24
                          192.243.228.0/24 maxlen: 24
                          192.243.229.0/24 maxlen: 24
                          208.67.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f4:e8:35:64:f2:ff:e7:a4:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=b401fa48-60f0-4c17-a35b-aedc11e9e83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:49:67:a6:e3:80:fb:9e:f1:ad:dc:de:ac:
                    27:e7:5b:e4:0a:4c:d6:e4:84:b9:bd:16:eb:11:ae:
                    06:cd:b9:52:4f:98:10:83:43:40:a1:9d:df:c1:07:
                    0d:00:4e:63:f2:12:1a:7d:60:ef:a5:4e:af:d0:24:
                    e7:10:a7:c4:62:d4:5f:ca:fd:6e:3e:23:f2:b8:fe:
                    e0:5c:e0:60:84:36:bf:e9:be:b6:e7:c1:4b:67:82:
                    fe:ff:bb:32:8e:d0:82:f5:0c:66:36:7c:8a:53:84:
                    0a:6d:6a:d2:23:01:e0:22:75:96:d6:95:bb:09:de:
                    80:34:80:a1:f2:59:c6:5d:d4:d2:0d:91:5e:53:20:
                    a2:9f:31:1f:4e:29:52:75:76:92:6f:da:a0:74:ff:
                    e4:ae:db:a7:0d:d3:0e:3b:21:0a:e3:c2:d3:55:82:
                    43:31:ad:92:60:de:a0:32:ab:f8:72:66:c4:25:4c:
                    cc:9b:39:d1:8a:b8:80:cc:1e:5c:8b:12:12:8b:b9:
                    62:f8:4f:17:4d:e5:37:de:93:d9:70:ec:26:66:75:
                    3a:47:59:e0:a6:62:ac:f4:b3:5f:fb:d0:9e:3e:e4:
                    2e:21:b3:53:0b:11:71:2a:24:3b:c6:e7:95:dd:d5:
                    cc:c8:3b:38:df:11:e2:08:b6:b8:73:a4:1e:e2:1a:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DA:9C:F6:92:7D:4A:E5:C9:DF:47:B6:3B:63:88:C0:9F:67:ED:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/53d49b2e-650e-3215-be94-141ab09aea39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.130.0/24
                  172.82.196.0/24
                  172.82.209.0/24
                  172.82.216.0-172.82.220.255
                  172.82.223.0/24
                  172.82.242.0/23
                  192.243.225.0/24
                  192.243.228.0/23
                  208.67.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:00:37:93:83:8c:30:02:44:70:71:cf:3e:7a:f2:e0:3c:25:
         d3:79:0d:71:47:71:f1:f8:37:6b:84:32:18:e7:ac:0d:f1:f6:
         07:ee:89:6b:8c:40:e7:7d:7c:02:b2:75:27:36:92:28:63:f7:
         c7:65:1b:76:81:bf:bf:fc:3e:68:e3:94:8b:02:29:8c:03:17:
         21:c8:2d:c2:65:31:de:c7:e2:44:b8:d9:5b:fb:97:98:c7:cd:
         4d:46:1b:eb:35:cf:48:c9:64:0b:77:fb:82:d3:c3:40:33:6c:
         22:2f:88:9d:60:bc:1a:4a:9e:95:71:ea:4f:26:64:bf:f8:51:
         ec:03:15:4b:37:e3:5b:cc:b8:40:a5:13:f6:d3:22:96:87:ef:
         a8:81:37:6e:ca:26:d5:e5:e4:bf:cb:32:20:f1:0c:c9:5b:34:
         df:92:b2:13:a2:52:d0:cf:4d:61:4d:27:5d:a6:d8:8c:0a:ed:
         5b:4a:1b:fb:69:dd:c8:86:b3:9f:92:60:42:66:3e:f9:6f:d7:
         03:0b:a2:5c:7a:ad:44:03:71:59:a3:5a:99:1f:83:95:1e:5f:
         3d:47:7e:e3:8c:f0:30:7f:a6:d8:68:07:72:a4:07:a3:95:a5:
         d3:f4:cf:18:b9:85:07:19:ef:8c:36:7b:fc:5a:f9:6f:cb:26:
         52:de:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:59:48 2025 by rpki-client