Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/536cb05e-7fa8-38ae-aa5f-3bd108053855.roa
File:                     536cb05e-7fa8-38ae-aa5f-3bd108053855.roa (raw, json)
Hash identifier:          EHG/CDam9TqbEywj5qJTzwCGS7/xPdAD9ezbNsj0RCc=
Subject key identifier:   CB:A2:91:D1:88:D0:27:11:78:59:8C:96:2A:02:2A:AA:CE:50:9F:FF
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584B477C7148050816F7671EE830
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/536cb05e-7fa8-38ae-aa5f-3bd108053855.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        63.140.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:71:48:05:08:16:f7:67:1e:e8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=cbf4cd1e-a04c-40ef-9c03-0e7d00b8e49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:0d:fd:dd:42:5e:9b:97:05:dc:7d:5d:12:
                    ac:3e:42:f7:b7:0c:68:8f:21:e6:18:a8:86:65:a9:
                    91:a3:35:20:b7:02:3f:bd:1e:d7:a6:67:d8:8c:b8:
                    d1:6a:0d:ec:36:ad:8e:ec:39:fa:a2:a9:58:95:fd:
                    d2:1e:d1:79:ab:a4:ac:27:af:e7:98:6f:28:47:5e:
                    6b:4b:d7:6f:74:d1:90:26:82:31:84:e0:24:82:35:
                    d8:fc:b7:43:35:56:05:49:96:da:9b:e3:c0:f9:6e:
                    37:c5:55:6c:5f:ec:8a:5d:27:12:85:15:20:16:da:
                    11:f6:1c:55:35:09:05:43:9b:a0:c3:1e:ec:7c:cd:
                    cd:08:0c:41:e6:27:de:f3:3f:11:b8:9e:d8:d5:6b:
                    7f:61:fd:79:db:77:06:7f:27:15:8a:00:91:81:be:
                    9e:f9:c9:48:54:f3:11:eb:e5:d9:6f:ab:aa:af:63:
                    24:73:bf:05:8c:57:ba:8a:1f:3a:09:5b:dc:b5:c7:
                    9e:a5:0a:85:ed:9a:49:98:73:f1:dc:05:6f:eb:b9:
                    d2:a3:14:35:c4:1f:a9:62:9c:4d:f7:9d:31:41:fc:
                    ad:ba:7f:b6:a0:41:0f:13:95:2c:d9:20:34:5c:87:
                    e0:a3:1c:ca:82:03:93:e6:52:b5:18:59:58:b7:97:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:91:D1:88:D0:27:11:78:59:8C:96:2A:02:2A:AA:CE:50:9F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/536cb05e-7fa8-38ae-aa5f-3bd108053855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:4f:56:b1:44:81:78:56:c7:4a:cd:63:46:6d:b4:eb:88:
         69:c2:f8:ec:81:20:9e:4f:71:75:81:05:25:73:03:20:ec:39:
         6a:78:47:6c:bb:08:85:44:c7:00:35:d9:bf:eb:e1:dd:bd:ab:
         ac:dd:d7:71:ea:c0:f8:94:60:e5:91:75:27:e6:be:ea:ca:4a:
         3b:60:b6:78:49:79:b3:02:a6:ec:b7:e0:98:36:45:b2:07:45:
         7d:e4:b0:5f:50:ce:ae:27:82:6a:11:98:b2:78:91:6b:88:89:
         58:72:36:e4:32:4f:63:75:d1:5d:be:b7:df:67:29:85:8f:42:
         41:65:07:fe:44:7a:71:cd:c7:81:fa:2f:cf:b4:ca:d5:6c:7b:
         4c:9b:e6:74:e7:7d:f9:70:8a:ce:2a:1e:e5:d9:13:c8:5a:12:
         01:79:ba:e7:d6:91:81:97:07:d8:f9:10:47:2c:61:b5:f6:a7:
         3c:d7:bd:df:39:00:fd:37:10:09:f8:87:c0:b2:02:7f:d0:e7:
         a1:98:66:85:93:d8:25:99:22:03:5a:eb:ca:fd:d6:c1:e4:23:
         ed:fa:dc:ba:54:8c:fc:1a:29:46:7a:7d:82:c9:88:c4:2f:13:
         37:4b:d2:8c:e1:f9:8f:c1:c6:cd:d0:5d:b6:e2:26:26:0e:18:
         98:3a:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:34:34 2025 by rpki-client