Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa
File:                     73593fb5-6e33-3b47-af5a-76760132089b.roa (raw, json)
Hash identifier:          31cSjqa+up+Y2mUZwoIS6z15sMza5wg9c1sySyD4WtI=
Subject key identifier:   9F:2F:48:2E:FE:1B:25:7C:6A:E3:BB:A9:2E:C5:A1:8B:D6:E7:A2:99
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584D2BDA2207DF950C3DA188B340
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        63.140.40.0/24 maxlen: 24
                          63.140.41.0/24 maxlen: 24
                          63.140.43.0/24 maxlen: 24
                          66.117.16.0/24 maxlen: 24
                          66.117.17.0/24 maxlen: 24
                          172.82.197.0/24 maxlen: 24
                          172.82.208.0/24 maxlen: 24
                          172.82.210.0/24 maxlen: 24
                          172.82.214.0/24 maxlen: 24
                          172.82.221.0/24 maxlen: 24
                          172.82.222.0/24 maxlen: 24
                          172.82.224.0/24 maxlen: 24
                          172.82.226.0/24 maxlen: 24
                          172.82.227.0/24 maxlen: 24
                          172.82.229.0/24 maxlen: 24
                          172.82.230.0/24 maxlen: 24
                          172.82.231.0/24 maxlen: 24
                          172.82.232.0/24 maxlen: 24
                          172.82.233.0/24 maxlen: 24
                          172.82.236.0/24 maxlen: 24
                          172.82.238.0/24 maxlen: 24
                          172.82.239.0/24 maxlen: 24
                          192.243.230.0/24 maxlen: 24
                          192.243.244.0/24 maxlen: 24
                          192.243.246.0/24 maxlen: 24
                          192.243.247.0/24 maxlen: 24
                          192.243.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:22:07:df:95:0c:3d:a1:88:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=d04657fe-28e7-4f1b-a281-95a9abde494d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:05:b0:9b:7b:84:f1:7e:01:01:4c:58:32:
                    f8:f8:a7:7c:05:b4:7a:81:ee:1e:c7:6b:bd:55:6a:
                    0d:7c:43:26:e4:49:49:7f:b9:14:9e:cb:96:71:2d:
                    49:47:84:df:95:56:d3:62:d8:72:2e:b7:5e:11:d6:
                    ec:0d:fe:12:8e:c1:fb:9f:04:11:a7:8a:ac:59:8f:
                    d0:7b:44:49:60:01:06:65:45:74:45:2c:19:53:15:
                    94:1f:8b:93:9d:50:0e:ae:f9:4d:17:60:74:49:43:
                    ba:3c:f7:1d:0c:dd:3e:d4:cc:ca:4b:4f:25:a6:ca:
                    1a:04:6e:24:3d:ed:8c:8e:1e:68:43:ab:6e:75:e0:
                    7c:68:a1:4c:e0:2d:ac:fa:82:4e:96:10:bd:b0:2f:
                    87:8c:80:e1:60:24:79:8b:10:c4:c8:9c:2a:1a:41:
                    e9:64:a9:ed:63:e5:d6:b0:91:15:20:31:b5:81:45:
                    81:74:ac:f8:7b:08:bf:58:21:0c:64:e9:f0:41:8f:
                    80:08:ac:a6:b5:97:b2:8b:b5:84:92:53:06:65:0c:
                    7a:99:71:b9:dd:36:76:1f:7b:46:a1:5e:7d:bd:39:
                    71:d3:8d:17:2b:76:76:39:c2:92:1c:8d:b6:b5:11:
                    c4:4d:aa:61:39:c8:74:a7:49:aa:86:3a:fa:eb:d1:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:48:2E:FE:1B:25:7C:6A:E3:BB:A9:2E:C5:A1:8B:D6:E7:A2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/73593fb5-6e33-3b47-af5a-76760132089b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.40.0/23
                  63.140.43.0/24
                  66.117.16.0/23
                  172.82.197.0/24
                  172.82.208.0/24
                  172.82.210.0/24
                  172.82.214.0/24
                  172.82.221.0-172.82.222.255
                  172.82.224.0/24
                  172.82.226.0/23
                  172.82.229.0-172.82.233.255
                  172.82.236.0/24
                  172.82.238.0/23
                  192.243.230.0/24
                  192.243.244.0/24
                  192.243.246.0/23
                  192.243.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4b:ec:be:9f:ff:4a:e0:50:5d:3d:46:5f:e9:de:6b:13:ac:
         78:21:b6:a8:3d:d2:a5:07:ed:d1:a7:0b:0a:25:75:f2:d3:57:
         4b:e4:40:09:c1:cd:61:9f:0e:e5:19:f2:70:93:14:1b:8b:da:
         68:69:52:14:fb:aa:87:44:a9:ba:6d:69:b3:cb:25:ea:a4:c7:
         02:43:ac:0e:3c:2e:ee:27:c1:df:48:f5:d8:61:86:bd:93:cd:
         24:67:3c:a6:2c:ed:40:b6:d2:d6:88:4d:5f:54:4f:b3:48:53:
         73:6a:36:96:0b:56:5f:c8:9c:3a:79:b2:b3:70:f7:79:9f:94:
         78:ea:ef:51:a3:0e:21:9a:57:ca:4f:d9:2c:26:5e:29:ac:f1:
         9d:25:db:b4:16:fc:32:36:cd:15:10:73:db:ed:94:cb:fd:b5:
         93:c5:04:52:1c:50:3e:28:c9:cc:35:bf:a5:66:e4:7a:0f:f8:
         a8:6b:db:58:eb:a3:d4:9b:38:34:48:3e:fe:14:88:96:ee:9c:
         8a:1c:7e:a1:da:0e:90:89:ab:5a:7c:fc:8c:17:4c:c2:01:7a:
         8c:ce:bb:7c:20:03:6b:58:39:58:9d:11:7a:8e:95:e1:90:c9:
         66:2c:05:f0:b8:ae:43:00:13:de:33:dd:22:bf:97:92:af:5c:
         bf:c7:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:15 2026 by rpki-client