Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f1867df6-8f51-3e67-8443-de6a462dba0b.roa
File:                     f1867df6-8f51-3e67-8443-de6a462dba0b.roa (raw, json)
Hash identifier:          h90xOePoSwWJNRi8LyKmCQRphZDwYwNb78+H8uVXcfQ=
Subject key identifier:   44:93:2F:DC:70:6C:EE:68:88:84:11:D7:94:61:16:89:ED:9E:BD:40
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584D07ACF0EA1D4CBD3B664F33A0
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f1867df6-8f51-3e67-8443-de6a462dba0b.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        63.140.32.0/23 maxlen: 23
                          63.140.34.0/24 maxlen: 24
                          63.140.35.0/24 maxlen: 24
                          63.140.36.0/23 maxlen: 23
                          63.140.38.0/23 maxlen: 23
                          63.140.54.0/24 maxlen: 24
                          63.140.55.0/24 maxlen: 24
                          63.140.56.0/23 maxlen: 23
                          63.140.61.0/24 maxlen: 24
                          63.140.62.0/23 maxlen: 23
                          66.117.20.0/24 maxlen: 24
                          66.117.22.0/23 maxlen: 23
                          66.235.151.0/24 maxlen: 24
                          66.235.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:f0:ea:1d:4c:bd:3b:66:4f:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=3565d5ea-ab16-4483-bcc3-6ba76ba4f1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:03:ff:3c:5e:2d:40:80:f6:6f:02:f4:3d:
                    74:84:e4:48:4c:98:67:40:63:c6:23:80:d5:69:27:
                    2e:35:31:ce:9d:b3:bd:c0:df:ee:26:68:6b:3e:d2:
                    75:34:2b:ce:61:79:fc:7a:c8:1d:b6:b5:a6:db:78:
                    84:bd:63:88:ca:96:50:9e:78:34:c7:8e:dd:9d:84:
                    7b:11:93:34:4e:cd:6e:7c:43:d9:1e:2d:1d:1c:23:
                    96:b0:e4:d7:42:44:a8:77:01:56:3d:69:e2:87:45:
                    5d:07:2e:d8:d6:41:57:8a:4c:94:4a:ef:60:70:3f:
                    0d:cf:ba:8e:a3:d0:f9:89:65:f0:66:a8:04:94:1b:
                    6a:bf:e2:63:d7:14:06:72:a0:fc:59:4e:11:a9:b5:
                    d2:36:dc:7a:9e:05:0f:0d:89:27:7b:59:22:9a:b2:
                    ab:2b:8b:ce:a9:76:6c:ac:38:ad:ed:9e:0f:c6:06:
                    7a:66:ee:1d:e0:06:0d:a6:9b:f6:f4:87:c5:3a:f4:
                    e6:9d:bc:37:42:0d:64:d2:7f:c7:88:18:3e:2a:c9:
                    a6:40:2d:b5:0f:4c:ff:c5:d9:34:0f:41:34:5a:f8:
                    90:61:f9:34:ae:2f:b8:9c:41:52:d3:87:32:7a:cf:
                    05:52:95:de:6a:b1:98:ef:1a:fd:b5:11:bf:22:28:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:93:2F:DC:70:6C:EE:68:88:84:11:D7:94:61:16:89:ED:9E:BD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f1867df6-8f51-3e67-8443-de6a462dba0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.32.0/21
                  63.140.54.0-63.140.57.255
                  63.140.61.0-63.140.63.255
                  66.117.20.0/24
                  66.117.22.0/23
                  66.235.151.0-66.235.153.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:9f:70:94:0b:15:fc:c8:75:29:6c:30:aa:e7:f7:f9:88:bf:
         89:54:59:9a:bf:9b:9d:66:9c:3b:bc:3b:3a:b4:1c:6b:ed:10:
         6e:f2:c8:a0:71:40:6c:84:e7:e0:8e:50:c8:e3:51:c6:d6:a2:
         88:52:db:03:a7:c6:6e:ab:0b:d4:3a:f9:b6:24:a2:92:fe:b1:
         be:b4:cd:34:61:8e:d3:a1:fc:af:6d:06:55:74:de:e9:3c:2d:
         b9:7c:be:ab:c2:c3:6f:59:da:75:20:25:df:28:b5:b0:22:06:
         f4:ad:6a:88:1e:75:ae:0d:38:7c:ad:65:f9:8b:e3:90:6a:ec:
         e3:d5:a7:fa:a2:49:38:42:a1:22:da:8a:bb:af:c7:3e:e5:79:
         66:33:19:53:b8:7c:05:1c:c8:17:59:a1:9b:ba:fa:38:d0:3e:
         83:0a:17:c4:06:41:67:fa:f8:39:a1:94:24:fc:75:a6:75:e5:
         1b:04:f5:a6:ec:a3:50:ba:2a:6d:43:50:14:dc:23:5c:d8:24:
         48:c8:2d:1c:87:67:43:6f:b2:37:38:68:a4:11:f0:6a:02:8b:
         1c:ba:f4:fb:54:91:a6:e8:aa:43:ae:8f:d0:04:bb:21:a4:50:
         95:86:33:1d:b7:78:12:01:fe:73:a4:cf:8d:b3:88:6f:fc:96:
         5e:31:5c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:22:41 2026 by rpki-client