Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9a167cc1-a11d-357c-bc2b-e8c94554fd58.roa
File:                     9a167cc1-a11d-357c-bc2b-e8c94554fd58.roa (raw, json)
Hash identifier:          YN8ldSDLy5uHEDTXq1Er78mG5h6IB3VXREyzspBblJk=
Subject key identifier:   B5:79:D7:3A:3F:CA:46:B5:C1:F9:E5:E0:FB:49:E1:DC:51:86:AF:DB
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584B477C7173F912FB0D0BC7AD00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9a167cc1-a11d-357c-bc2b-e8c94554fd58.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     8075
IP address blocks:        66.117.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:71:73:f9:12:fb:0d:0b:c7:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=5f045cf9-5c92-4fa5-b6db-146cdc2923ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:97:56:01:9e:7c:dc:9b:c0:fd:3f:7e:d0:
                    90:b4:fa:a5:c0:e9:07:8b:0e:c4:00:07:aa:76:e0:
                    80:73:0c:33:cb:6d:6d:34:ac:51:02:88:b1:55:dc:
                    23:34:a5:de:48:07:99:c7:d9:7c:3c:a8:33:52:43:
                    7b:6e:6c:4f:d8:d0:66:a0:f2:46:e2:7f:42:cf:cb:
                    9f:eb:2f:f1:45:dd:64:b8:69:26:50:fa:24:3d:f1:
                    00:32:eb:7c:e3:e1:d7:09:e0:af:43:11:0b:e8:75:
                    1c:41:bf:e7:fa:1c:95:b7:85:77:44:d7:44:ef:1f:
                    82:1a:73:74:b8:13:37:97:1d:13:08:dc:33:8c:47:
                    88:37:66:02:fe:f0:24:ba:b3:df:95:76:1e:28:02:
                    e6:f0:74:fd:50:71:b6:28:25:80:83:18:4d:6b:53:
                    53:2b:8f:f9:6e:c8:86:05:10:86:a4:32:cd:f3:b9:
                    f5:ff:6d:16:c2:81:86:f9:a0:c8:e0:42:59:c7:1a:
                    ee:2b:50:ed:17:7d:c1:77:3f:f5:75:d4:9e:df:1d:
                    32:7e:5c:be:89:39:5d:02:89:e1:a7:0a:3a:7f:26:
                    f7:e6:16:f6:5a:e8:a6:a4:c4:d6:09:3d:1a:1f:97:
                    63:b7:b9:dc:7a:8e:93:29:d0:45:bd:a2:4f:47:b7:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:79:D7:3A:3F:CA:46:B5:C1:F9:E5:E0:FB:49:E1:DC:51:86:AF:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9a167cc1-a11d-357c-bc2b-e8c94554fd58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7e:8f:86:a3:bf:f2:eb:64:a3:fc:8a:96:fe:43:36:c7:90:
         70:78:21:a7:3b:d4:ef:6c:2a:b3:65:7e:5b:50:ac:92:ad:e1:
         6f:bc:39:01:71:6d:16:5c:6b:72:43:28:95:11:3b:40:3d:66:
         f8:d0:e1:26:bd:91:aa:02:ef:19:48:bc:f9:90:f3:07:10:cd:
         38:77:e4:99:4a:74:e4:fc:e3:ec:4e:bc:c7:78:15:ee:cd:06:
         70:f0:4c:4e:72:87:28:7f:ff:5d:39:35:9f:5d:4a:08:f2:78:
         26:e5:fd:8d:37:d2:c9:1d:a0:86:3d:75:5b:81:12:ab:0d:78:
         16:d8:c3:50:23:ff:64:23:7b:4a:98:5d:be:a8:46:66:44:cd:
         a4:c5:07:fa:89:c0:35:fd:54:58:14:e4:36:43:a5:87:27:ca:
         39:96:2e:7e:4d:38:3b:bf:57:dd:f6:91:59:9c:c5:c4:9f:27:
         51:b6:38:4f:d7:2f:49:26:18:e4:da:f6:81:70:46:12:a3:e2:
         4d:1e:6c:80:41:ed:89:26:88:ef:0f:8c:68:ca:38:ab:68:24:
         11:7b:2a:01:c1:fb:74:ef:61:6b:e9:35:c4:ca:c0:e6:e1:70:
         ba:ec:b5:48:04:da:9a:fd:1e:f8:c8:f5:1c:d7:d9:28:02:f3:
         ba:c8:55:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHFz+RL7DQvHrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
NWYwNDVjZjktNWM5Mi00ZmE1LWI2ZGItMTQ2Y2RjMjkyM2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfGXVgGefNybwP0/ftCQtPqlwOkHiw7EAAeq
duCAcwwzy21tNKxRAoixVdwjNKXeSAeZx9l8PKgzUkN7bmxP2NBmoPJG4n9Cz8uf
6y/xRd1kuGkmUPokPfEAMut84+HXCeCvQxEL6HUcQb/n+hyVt4V3RNdE7x+CGnN0
uBM3lx0TCNwzjEeIN2YC/vAkurPflXYeKALm8HT9UHG2KCWAgxhNa1NTK4/5bsiG
BRCGpDLN87n1/20WwoGG+aDI4EJZxxruK1DtF33Bdz/1ddSe3x0yfly+iTldAonh
pwo6fyb35hb2WuimpMTWCT0aH5djt7nceo6TKdBFvaJPR7ecLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLV51zo/yka1wfnl4PtJ4dxRhq/bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvOWExNjdjYzEtYTExZC0z
NTdjLWJjMmItZThjOTQ1NTRmZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnUVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADt+j4ajv/LrZKP8ipb+QzbHkHB4Iac71O9sKrNlfltQrJKt4W+8OQFx
bRZca3JDKJURO0A9ZvjQ4Sa9kaoC7xlIvPmQ8wcQzTh35JlKdOT84+xOvMd4Fe7N
BnDwTE5yhyh//105NZ9dSgjyeCbl/Y030skdoIY9dVuBEqsNeBbYw1Aj/2Qje0qY
Xb6oRmZEzaTFB/qJwDX9VFgU5DZDpYcnyjmWLn5NODu/V932kVmcxcSfJ1G2OE/X
L0kmGOTa9oFwRhKj4k0ebIBB7YkmiO8PjGjKOKtoJBF7KgHB+3TvYWvpNcTKwObh
cLrstUgE2pr9HvjI9RzX2SgC87rIVVs=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:00 2025 by rpki-client