Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c676196c-595e-3571-82bb-c4fd860e82a4.roa
File:                     c676196c-595e-3571-82bb-c4fd860e82a4.roa (raw, json)
Hash identifier:          MRvuHd7ZNGZkCg7qXN/OAz+zaecrtY4Gean/Akh1AoY=
Subject key identifier:   4B:5C:64:E4:99:55:B0:B6:10:2C:11:13:1F:09:03:A7:1E:B4:0B:4A
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584E0C1EDCBB011EAA5E920F5700
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c676196c-595e-3571-82bb-c4fd860e82a4.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     14618
IP address blocks:        63.140.40.0/24 maxlen: 24
                          63.140.41.0/24 maxlen: 24
                          63.140.43.0/24 maxlen: 24
                          66.117.16.0/24 maxlen: 24
                          66.117.17.0/24 maxlen: 24
                          172.82.197.0/24 maxlen: 24
                          172.82.208.0/24 maxlen: 24
                          172.82.210.0/24 maxlen: 24
                          172.82.214.0/24 maxlen: 24
                          172.82.221.0/24 maxlen: 24
                          172.82.222.0/24 maxlen: 24
                          172.82.224.0/24 maxlen: 24
                          172.82.226.0/24 maxlen: 24
                          172.82.227.0/24 maxlen: 24
                          172.82.229.0/24 maxlen: 24
                          172.82.230.0/24 maxlen: 24
                          172.82.231.0/24 maxlen: 24
                          172.82.232.0/24 maxlen: 24
                          172.82.233.0/24 maxlen: 24
                          172.82.238.0/24 maxlen: 24
                          172.82.239.0/24 maxlen: 24
                          192.243.230.0/24 maxlen: 24
                          192.243.244.0/24 maxlen: 24
                          192.243.246.0/24 maxlen: 24
                          192.243.247.0/24 maxlen: 24
                          192.243.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:dc:bb:01:1e:aa:5e:92:0f:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=39b53e63-208b-4955-a518-850710b33f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:5e:38:39:67:15:e5:79:06:1e:2d:0d:5f:
                    38:11:b9:8f:9d:e5:0e:23:5f:d8:26:54:50:b5:69:
                    2b:5f:d8:21:6f:47:43:b6:9f:ee:e4:d0:c9:6c:3b:
                    c2:5c:b5:fd:c0:07:cd:71:df:fc:90:9d:ee:3f:a6:
                    6a:89:a5:3c:be:6f:e5:3c:af:9e:17:fa:96:4a:f0:
                    7f:13:20:5a:6b:1f:92:4f:ff:93:ea:1d:fa:1a:d0:
                    56:47:15:5e:b0:8c:a6:cb:7f:2e:9b:0c:86:2e:db:
                    bd:7f:6c:c9:d8:8b:3b:96:db:74:a0:79:10:d1:a9:
                    e3:eb:ca:c9:80:7e:b6:5f:32:78:b7:d1:df:19:d7:
                    0e:3d:3d:58:10:b4:4a:e9:a8:c0:b7:e0:56:00:14:
                    c1:aa:f1:ba:e0:08:ab:f3:73:bb:0a:b0:77:b7:2f:
                    78:52:c0:66:62:58:23:dc:77:ed:74:c4:aa:a0:83:
                    42:2e:2c:2c:cd:1e:bf:e6:d8:85:74:94:62:0b:42:
                    71:e7:3a:d7:12:7f:5b:c4:f4:9b:5f:65:ce:51:a5:
                    d2:19:0e:e8:ac:a8:1c:68:9b:90:f3:fb:e6:78:4a:
                    b5:0f:c4:44:9c:ff:18:1e:5f:79:4c:38:d8:33:6e:
                    49:6c:ed:d5:22:c3:b5:43:e7:49:0d:e1:af:93:5a:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5C:64:E4:99:55:B0:B6:10:2C:11:13:1F:09:03:A7:1E:B4:0B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c676196c-595e-3571-82bb-c4fd860e82a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.40.0/23
                  63.140.43.0/24
                  66.117.16.0/23
                  172.82.197.0/24
                  172.82.208.0/24
                  172.82.210.0/24
                  172.82.214.0/24
                  172.82.221.0-172.82.222.255
                  172.82.224.0/24
                  172.82.226.0/23
                  172.82.229.0-172.82.233.255
                  172.82.238.0/23
                  192.243.230.0/24
                  192.243.244.0/24
                  192.243.246.0/23
                  192.243.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:09:30:72:74:e0:37:ba:1a:0a:d5:4a:35:6a:5c:fa:02:
         9a:fd:5c:c1:8b:85:aa:b1:eb:40:c0:f5:ff:09:84:cf:57:b7:
         c5:11:9a:5c:a0:12:26:48:eb:58:9c:27:57:65:47:8b:cb:0d:
         26:b4:f7:71:01:43:41:35:de:33:eb:b6:e4:46:2e:a1:e0:b1:
         71:22:26:6e:55:4a:85:c6:20:89:1d:fd:01:0e:cd:ff:5b:28:
         1f:a6:d1:32:08:34:51:8e:67:3b:d8:51:4b:a7:a5:c3:69:51:
         54:4d:4a:05:77:b1:31:ff:74:fd:f2:08:4a:69:2e:eb:00:6a:
         14:ac:b5:5c:a4:4b:08:9d:73:a8:06:ce:30:52:43:a0:a5:0c:
         ff:07:91:9c:c2:9a:00:60:46:0a:47:91:39:15:a3:a8:5b:e9:
         69:d1:f4:0d:d3:5d:ed:07:cb:24:ea:8f:e2:05:72:64:60:0e:
         3e:8a:09:82:2e:f0:18:16:2d:4c:25:66:d1:20:c7:b9:1b:8a:
         58:aa:e8:b1:67:f7:12:18:35:b7:b7:2e:91:42:e9:aa:d8:61:
         22:0b:57:ee:6a:ad:ab:76:26:9c:78:c7:0a:82:9c:b5:b4:01:
         af:56:d3:c2:40:5a:64:71:7b:f9:5e:61:a5:c0:e6:d6:c9:59:
         e6:8b:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:14:34 2026 by rpki-client