Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bf4dc92c-ab55-3935-a05c-7bc36894b11e.roa
File:                     bf4dc92c-ab55-3935-a05c-7bc36894b11e.roa (raw, json)
Hash identifier:          cTGe22mi3JUsnqM2tKnEUcgjeiwHvY1CYznLbb3NmO4=
Subject key identifier:   6A:80:89:B7:1D:82:23:58:6E:10:E4:80:D5:C5:BF:AE:0C:5B:6C:39
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584E6144B2FD57355162A04BFA00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bf4dc92c-ab55-3935-a05c-7bc36894b11e.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        172.82.211.0/24 maxlen: 24
                          172.82.213.0/24 maxlen: 24
                          172.82.225.0/24 maxlen: 24
                          172.82.237.0/24 maxlen: 24
                          192.243.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b2:fd:57:35:51:62:a0:4b:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=bef186e1-b0c0-42e7-a783-cbeda6f8f5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:b5:13:36:fa:4e:f8:d9:25:bf:9b:f4:49:
                    04:fa:f8:96:38:5d:0f:44:44:50:84:85:2a:5d:d4:
                    be:82:92:53:52:4e:e2:4c:e0:dd:f7:dd:e3:3b:96:
                    53:91:82:a8:8c:65:b9:a8:7b:09:b5:91:13:75:dc:
                    50:ef:79:c1:0b:cd:25:55:ca:a5:60:1a:85:5c:f6:
                    64:6e:8c:82:6b:53:45:2a:f5:ed:5e:91:e0:53:ca:
                    23:bd:27:8c:56:72:10:af:89:dc:48:b8:70:a4:a1:
                    58:e1:0a:61:cb:98:fc:5b:ee:c7:a5:50:cf:0a:a4:
                    d9:76:9e:c7:28:95:c3:27:48:bd:31:03:18:c8:4e:
                    69:36:dd:a7:18:0a:4f:1a:20:3f:26:bb:5d:86:df:
                    18:56:c9:08:50:1d:e3:3d:fa:8e:2c:a4:dd:c8:2c:
                    96:4f:a7:aa:74:bd:4c:0e:df:3f:a8:25:f2:a3:63:
                    29:9c:86:6e:75:25:cd:72:fd:be:ff:16:cb:fb:86:
                    8e:0b:21:4c:1c:d3:26:84:73:a4:84:26:bd:c0:57:
                    e7:fe:dc:e9:1f:74:59:cd:c8:0f:c3:10:80:ba:17:
                    ff:a7:b2:bd:6a:2b:87:ff:b4:96:f3:dd:aa:2c:8a:
                    1b:25:a6:30:f6:5e:7d:15:ca:99:95:71:c1:07:88:
                    bb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:80:89:B7:1D:82:23:58:6E:10:E4:80:D5:C5:BF:AE:0C:5B:6C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bf4dc92c-ab55-3935-a05c-7bc36894b11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.211.0/24
                  172.82.213.0/24
                  172.82.225.0/24
                  172.82.237.0/24
                  192.243.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:0a:9a:bc:18:86:db:76:a9:96:3e:e7:ec:23:45:21:7c:
         ea:bf:7c:bb:4f:6e:16:6a:d8:be:d9:a5:bd:35:21:c2:fd:29:
         fa:2d:c7:a5:1d:ab:6d:ae:bb:59:a1:12:1f:ad:db:47:f3:dd:
         71:e5:3c:66:74:0a:27:27:00:6b:bf:20:bd:e7:a6:b8:16:7f:
         7c:2c:88:62:91:51:32:72:59:e6:a4:49:5b:70:8a:c0:e4:5f:
         48:d7:27:5c:b7:25:bc:82:32:b3:d1:6b:5b:94:32:c3:10:17:
         a0:ce:ca:ea:90:15:e0:57:43:b1:d8:a6:eb:eb:9d:9e:8e:a3:
         8e:de:a2:40:de:0e:53:77:52:e7:1f:4e:6e:ac:3b:5b:58:dc:
         ec:67:11:69:85:b5:33:4d:18:4d:11:a1:90:10:b9:88:71:87:
         0d:1d:c0:56:57:7b:e7:d4:0e:57:f6:92:dd:31:4a:16:cb:cb:
         50:27:63:80:03:64:77:4c:ec:7e:14:02:dc:ac:67:53:cd:c9:
         e8:c8:77:6a:34:21:e8:47:19:a1:26:97:c0:32:59:d9:49:3c:
         c0:09:dd:d2:cf:21:55:ff:aa:e9:a8:70:60:87:1d:93:05:fd:
         2f:a7:b6:bb:5a:fc:d9:40:21:79:f5:64:fd:7c:5c:2e:ba:07:
         e7:81:ed:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:03:56 2026 by rpki-client