Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/11bcc124-4cf6-3112-89c9-a581f2cd3645.roa
File:                     11bcc124-4cf6-3112-89c9-a581f2cd3645.roa (raw, json)
Hash identifier:          SNzl/IqwyIDcuFnXTDqISwJxxfYgNYuiQhgYao5dw2o=
Subject key identifier:   4A:15:6B:F9:00:87:62:26:CA:E8:6E:E0:5A:0E:EF:C5:D4:B6:3F:56
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584B6BC75CF09ABDD5CA519C2280
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/11bcc124-4cf6-3112-89c9-a581f2cd3645.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     14618
IP address blocks:        63.140.32.0/23 maxlen: 23
                          63.140.34.0/24 maxlen: 24
                          63.140.35.0/24 maxlen: 24
                          63.140.36.0/24 maxlen: 24
                          63.140.38.0/23 maxlen: 23
                          63.140.54.0/24 maxlen: 24
                          63.140.55.0/24 maxlen: 24
                          63.140.56.0/23 maxlen: 23
                          63.140.61.0/24 maxlen: 24
                          63.140.62.0/23 maxlen: 23
                          66.117.20.0/24 maxlen: 24
                          66.117.22.0/23 maxlen: 23
                          66.235.151.0/24 maxlen: 24
                          66.235.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5c:f0:9a:bd:d5:ca:51:9c:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=aed55fb8-6077-4e2f-a44e-0a4222d44430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8b:48:32:5f:e3:52:3b:f9:8c:10:f0:0a:cf:
                    d0:64:49:31:19:d1:23:24:0d:e6:ca:f8:db:41:af:
                    61:8f:69:79:be:02:c6:a4:af:1d:53:80:4c:d4:6a:
                    fd:e8:2b:88:3b:0e:30:d6:9c:e7:a4:cc:37:1c:8f:
                    e8:79:9d:2a:c5:b6:81:b9:a8:02:dc:33:b6:2f:9f:
                    ec:23:8e:69:00:77:c1:c1:94:e4:e0:8e:b6:53:ab:
                    a7:43:7e:05:04:5c:a4:1f:54:9c:d6:9f:f9:9d:cc:
                    b9:b7:70:cc:d6:36:0f:bf:d5:0f:59:40:e8:fc:33:
                    59:39:d4:46:46:0f:d2:ae:53:78:c6:95:51:fd:13:
                    15:62:ff:47:43:f8:4e:f2:d8:c9:f0:40:c3:52:2e:
                    cb:b4:ae:3b:a7:d6:44:2e:71:bd:a1:01:45:5a:f1:
                    35:21:0d:dc:ce:c1:2e:67:07:9f:a8:b5:a7:1e:52:
                    2d:e7:fe:a2:38:ad:81:9b:ca:8d:91:c4:50:3d:96:
                    85:c3:8b:a0:bc:97:02:1f:d3:ca:84:48:da:1a:79:
                    2c:29:70:bf:41:32:bc:5f:bb:94:88:97:28:da:26:
                    58:b6:1c:e5:fe:76:7e:de:e8:a2:04:44:fb:c3:3a:
                    1e:fa:09:b6:eb:5f:5d:b5:bc:7b:cf:fb:2e:1e:d9:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:15:6B:F9:00:87:62:26:CA:E8:6E:E0:5A:0E:EF:C5:D4:B6:3F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/11bcc124-4cf6-3112-89c9-a581f2cd3645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.32.0-63.140.36.255
                  63.140.38.0/23
                  63.140.54.0-63.140.57.255
                  63.140.61.0-63.140.63.255
                  66.117.20.0/24
                  66.117.22.0/23
                  66.235.151.0-66.235.153.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:90:c6:d3:3c:7b:54:d3:99:5e:04:7b:92:a4:03:56:41:76:
         23:91:23:fd:9e:34:37:66:23:c0:ab:94:f3:e9:5e:df:30:12:
         5a:3d:2e:62:a0:c9:80:c4:f4:43:3e:77:fe:5b:a0:45:ae:3b:
         07:3f:c5:37:f1:5f:e4:5e:68:fb:d0:73:91:e6:4c:11:7c:f3:
         8b:36:b7:8a:4a:3c:95:62:c7:99:b7:6d:c0:fc:64:01:3e:53:
         c8:04:6b:47:d4:1f:d7:a2:42:9e:53:15:c8:ac:d9:59:38:09:
         be:37:e1:19:45:c6:20:37:d1:3e:a0:62:63:72:10:d3:d2:7d:
         3e:62:92:e0:e2:04:c5:df:b0:2c:43:b1:93:5d:f0:52:4e:e0:
         7a:56:06:0e:9b:88:ed:1b:6f:64:15:80:1a:38:0b:8f:6d:4b:
         c3:1e:66:e4:cf:06:3f:c0:b9:ff:f0:81:2c:a5:4d:4a:ea:4e:
         a2:11:88:fe:8b:99:e5:02:85:7f:ac:85:cd:94:11:b5:fa:5d:
         d0:36:80:11:47:09:e1:9b:8e:a2:3c:2a:9f:86:ef:06:c1:11:
         3c:d8:3a:3d:28:b4:1a:85:42:b3:19:90:0e:97:22:04:89:eb:
         44:8a:b1:77:09:9d:e6:5e:73:28:cc:1b:c4:d7:25:82:17:c5:
         1b:49:95:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:33:57 2025 by rpki-client