Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/b0fe3ecb-1255-3adf-8cd9-11784eaed8da.roa
File:                     b0fe3ecb-1255-3adf-8cd9-11784eaed8da.roa (raw, json)
Hash identifier:          1wbEWBR1T/IpeQGMqkwNjWLAD4VgVn0lCAJo5dTrG2I=
Subject key identifier:   36:39:B9:8E:9A:95:E9:9B:50:2F:AA:D9:4D:99:D2:16:EE:B2:4E:2D
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584D44FA44317B643171FA577620
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/b0fe3ecb-1255-3adf-8cd9-11784eaed8da.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        66.117.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:44:31:7b:64:31:71:fa:57:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=798673b2-c51d-424e-8650-925245729176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:a6:65:74:61:fa:13:cc:33:87:bd:71:51:
                    3b:cc:5d:c9:5e:af:f6:6a:21:b1:93:76:6a:de:08:
                    de:43:be:38:6b:72:37:e2:e4:a6:ce:70:98:c9:9f:
                    15:72:bd:f1:85:e4:47:3d:d3:c8:92:b5:db:8f:24:
                    d4:dc:ad:d1:c5:f4:1d:5a:3a:d4:79:0b:1e:58:d5:
                    b3:a2:f0:05:48:c1:b8:26:3d:39:39:5c:5b:4f:3f:
                    d7:20:37:28:8f:5b:a3:51:09:9c:ad:7d:14:e0:1a:
                    19:b3:7b:18:08:21:8b:97:d0:f7:be:97:77:9a:46:
                    63:15:49:6f:5c:83:8c:24:31:c2:e0:19:07:3f:f1:
                    e5:fb:dd:70:40:e2:a9:26:01:ec:7f:1c:d9:c6:c2:
                    dc:b9:8a:44:f7:24:0c:ad:72:dd:3e:62:9c:d4:eb:
                    3b:62:d4:bd:b3:33:93:d5:9a:68:85:2c:64:6a:d6:
                    66:e5:ba:d8:30:93:c1:c8:f3:fd:79:83:21:f9:4f:
                    1c:85:96:71:9e:e5:f8:6c:6d:33:ed:23:21:75:44:
                    a3:19:d9:8a:d6:46:ec:c2:13:09:a8:e4:da:34:ea:
                    ca:0a:26:cb:7e:05:98:f6:50:b8:cf:2a:6d:04:bc:
                    8d:80:48:d4:c8:6a:9a:e2:b7:21:79:22:b4:23:f6:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:39:B9:8E:9A:95:E9:9B:50:2F:AA:D9:4D:99:D2:16:EE:B2:4E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/b0fe3ecb-1255-3adf-8cd9-11784eaed8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:95:fd:a5:bd:33:6c:25:a2:85:e4:bd:59:b2:57:de:08:
         ff:68:fe:92:06:c6:15:cb:3f:4b:a3:42:98:bd:7f:07:bd:ed:
         38:3e:03:88:17:35:74:fb:ad:f6:da:ce:70:92:df:c8:6a:be:
         0f:90:ca:42:c2:5f:3f:6b:72:ed:6d:e1:0a:f5:d5:aa:bd:e9:
         8f:da:98:2d:68:2f:80:07:88:a6:e1:92:bb:33:49:50:59:a6:
         7e:32:0f:38:b2:dc:50:89:98:cc:08:fd:86:e5:13:b3:1e:1e:
         db:fe:54:f1:c6:3a:ba:32:0d:80:74:9f:cf:d1:86:3d:d2:79:
         dc:3b:62:47:f8:91:5b:aa:0f:cc:b4:1e:6f:35:c2:75:f0:c3:
         ba:60:e9:ec:e3:0f:45:01:bb:df:a2:ef:be:b0:4a:78:eb:c8:
         30:98:4f:9d:fa:88:9a:7a:78:43:84:30:a3:6a:71:a2:b7:17:
         b6:9c:ce:64:22:c8:e6:6f:9c:32:bb:42:9d:17:d3:46:9c:3f:
         5b:ef:6b:3f:63:07:84:02:bb:5c:25:11:bd:da:e1:cf:dd:39:
         8c:44:fa:37:a5:71:62:af:72:c1:74:c7:16:2c:e0:ea:ef:66:
         e6:5c:3a:ca:aa:9e:6f:74:5f:e2:61:b3:99:da:f1:2c:60:09:
         8d:1c:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:51 2026 by rpki-client