Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/161fec30-567c-3684-8080-70a29a7cf8b6.roa
File:                     161fec30-567c-3684-8080-70a29a7cf8b6.roa (raw, json)
Hash identifier:          dvUoMHcCbsMZVofzgzi6EYStKTdvZaWAnQEv6hH+2co=
Subject key identifier:   44:CD:71:D8:34:AF:54:E6:5C:DE:C2:C2:55:DC:7A:E1:13:1D:11:F9
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584B477C711F67094F0A163ABA80
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/161fec30-567c-3684-8080-70a29a7cf8b6.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        63.140.48.0/23 maxlen: 23
                          63.140.50.0/23 maxlen: 23
                          66.117.30.0/24 maxlen: 24
                          66.117.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:71:1f:67:09:4f:0a:16:3a:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=27171da6-92ff-4c65-a951-cb7ca502e944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:4c:d2:2f:1c:8c:90:58:7c:8c:25:b9:0d:
                    ec:3d:6b:dc:f3:3b:78:69:03:6c:95:2d:55:99:1a:
                    5e:af:5f:84:4c:f1:6e:d0:7b:8f:01:d1:d6:6d:f7:
                    23:9c:eb:ad:ce:be:18:2e:a1:13:db:bb:03:e3:88:
                    4c:7c:fe:9c:d2:e1:aa:14:78:18:46:51:3b:fc:73:
                    02:a2:71:72:08:27:6a:8d:14:ed:fb:66:4d:8f:65:
                    b7:01:86:a8:ed:27:b8:17:ef:0b:14:ad:cf:3a:a9:
                    75:f5:e7:61:ed:bb:81:84:7e:31:ce:ba:c1:0a:be:
                    fa:d4:68:d1:8c:60:38:94:f5:a2:e4:84:2b:ad:5d:
                    95:e9:91:e5:cd:7c:d9:71:1a:3c:84:a4:1f:64:a9:
                    c3:b7:06:42:0d:cc:02:7e:3e:8b:d9:6f:49:e9:81:
                    be:c0:dd:4f:98:1c:d3:01:88:ea:b5:5b:ab:ba:5d:
                    e6:e9:7e:7b:a6:67:16:2f:fb:1f:a5:9e:de:05:c6:
                    f2:e3:5d:db:38:22:b4:9b:b4:b7:e5:35:da:12:3e:
                    41:91:5c:9a:54:19:ee:55:f3:c1:bb:fc:bd:db:5c:
                    14:b9:53:04:33:45:54:5f:8a:74:2f:d1:e1:8c:d5:
                    b1:31:2f:4a:8c:6f:44:08:81:38:92:d3:29:e4:6c:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CD:71:D8:34:AF:54:E6:5C:DE:C2:C2:55:DC:7A:E1:13:1D:11:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/161fec30-567c-3684-8080-70a29a7cf8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.48.0/22
                  66.117.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:12:a6:6d:0a:b4:69:d4:bf:5c:bf:45:97:bb:95:80:d7:
         02:f0:c8:0d:9f:12:af:e0:78:35:dc:be:c3:d7:5f:7a:20:59:
         2b:30:b2:50:0b:ea:52:03:d5:2c:f3:59:3f:c4:64:0c:f7:17:
         e4:c8:fd:3b:63:2d:08:19:62:7d:be:bc:9f:bb:d9:77:5d:15:
         4f:97:f3:e3:1a:63:49:43:9a:c0:74:8d:ed:6c:99:69:6a:c9:
         74:a0:df:5d:2d:ed:ff:b6:0d:86:e8:b4:b6:7c:a9:0d:24:ca:
         35:cc:5b:e4:1e:eb:b6:7f:8a:b4:d5:ee:c1:21:fa:78:e2:a2:
         c8:67:b5:80:d8:2e:72:6f:ae:f2:7c:c4:d9:20:fe:f3:30:71:
         2b:b8:d7:e2:5b:5f:19:b3:56:76:a4:24:f3:67:4e:68:31:bf:
         c1:da:e1:97:30:f2:bd:f0:39:48:61:35:f1:f5:b9:cc:27:c4:
         19:21:5a:5a:5e:34:ee:5e:f5:85:10:7c:27:99:a5:8a:c1:54:
         0e:22:93:53:9f:5f:58:b3:f5:9e:2b:43:13:f1:98:29:50:1d:
         b8:47:ac:44:74:16:fb:f9:42:d7:09:6a:68:f7:76:2a:80:0b:
         24:18:f3:ec:3b:f6:90:e2:ee:53:42:2b:3b:a5:bd:24:90:6b:
         0c:db:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:33:53 2025 by rpki-client