Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f1867df6-8f51-3e67-8443-de6a462dba0b.roa
File:                     f1867df6-8f51-3e67-8443-de6a462dba0b.roa (raw, json)
Hash identifier:          gV20rZXJX0pjhWaFAS6KJlrGtL15rPCNXkweIPghopQ=
Subject key identifier:   DE:8D:FA:B8:6A:8A:B9:B0:9C:F0:3C:74:98:CF:93:BC:EC:00:4A:65
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584EA791A71918151A62D0502530
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f1867df6-8f51-3e67-8443-de6a462dba0b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        63.140.32.0/23 maxlen: 23
                          63.140.34.0/24 maxlen: 24
                          63.140.35.0/24 maxlen: 24
                          63.140.36.0/23 maxlen: 23
                          63.140.38.0/23 maxlen: 23
                          63.140.54.0/24 maxlen: 24
                          63.140.55.0/24 maxlen: 24
                          63.140.56.0/23 maxlen: 23
                          63.140.61.0/24 maxlen: 24
                          63.140.62.0/23 maxlen: 23
                          66.117.20.0/24 maxlen: 24
                          66.117.22.0/23 maxlen: 23
                          66.235.151.0/24 maxlen: 24
                          66.235.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:a7:19:18:15:1a:62:d0:50:25:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=58220422-9c00-4096-8e90-1164a07ee382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:59:5a:ee:b0:91:8e:86:b5:92:71:55:a0:
                    a1:1a:62:e3:1d:c6:c8:d6:da:6b:1e:07:69:f9:88:
                    85:c4:59:85:83:0c:39:e7:2e:41:8e:99:22:12:d0:
                    9f:a2:21:4d:0d:8b:88:1f:3d:3d:6e:17:ff:3a:47:
                    eb:7e:9f:1e:22:34:7e:61:f8:25:f5:22:d6:58:eb:
                    8d:47:66:da:93:d8:f5:fa:b9:29:06:03:bb:c4:49:
                    9b:90:f4:e3:ed:0b:d4:9d:74:59:84:c1:5a:a0:a1:
                    1f:2e:43:a9:e2:dd:5e:27:84:00:9e:6e:cc:f6:1c:
                    a4:3f:0b:d1:16:26:2f:78:73:1d:57:8e:12:57:ba:
                    1d:ef:74:37:7a:a2:19:da:95:46:ad:63:64:ac:73:
                    04:2b:2d:a0:1f:be:33:0f:41:05:4a:22:80:22:9a:
                    b8:1e:88:6b:be:26:8d:91:7b:11:09:dd:47:36:2d:
                    07:95:b2:97:66:17:e7:33:db:b1:bc:8e:ca:9a:44:
                    fc:84:19:5f:a2:12:9a:6e:4a:f0:56:23:d9:c3:51:
                    5c:d3:4f:d3:61:86:06:63:c6:46:44:e4:73:36:c9:
                    e0:af:4a:df:53:fd:08:fe:08:88:6e:c6:27:b0:7f:
                    ae:48:1e:2f:38:0f:67:2e:af:a9:76:23:11:47:e8:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:FA:B8:6A:8A:B9:B0:9C:F0:3C:74:98:CF:93:BC:EC:00:4A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/f1867df6-8f51-3e67-8443-de6a462dba0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.32.0/21
                  63.140.54.0-63.140.57.255
                  63.140.61.0-63.140.63.255
                  66.117.20.0/24
                  66.117.22.0/23
                  66.235.151.0-66.235.153.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:7d:b2:86:1f:e9:ee:90:1c:af:07:8e:fa:4b:c7:68:c9:b5:
         2d:93:72:dc:76:e8:e4:a6:4c:9a:1e:fc:58:a7:0c:d9:ae:b4:
         07:dc:f4:f7:cf:83:29:7f:a3:c1:50:2c:9a:98:65:87:2d:ac:
         a0:9e:84:7a:bc:06:ce:6b:15:14:92:22:0e:83:67:fd:8e:0f:
         26:46:c2:d1:77:df:ba:e4:17:df:e0:ad:19:ca:40:ff:fa:61:
         9a:29:a3:69:ef:87:e8:cf:a9:bf:d9:50:bb:61:ea:83:c6:0f:
         1f:d9:9d:02:af:0c:3c:a8:48:84:93:47:c8:cf:1b:ab:4b:31:
         82:2e:0a:c2:8b:11:d7:15:bf:b2:45:46:99:f9:c9:ff:03:2f:
         78:df:e7:94:10:30:65:f5:2e:de:f2:0d:4d:db:96:ee:c0:a3:
         1b:3a:a8:37:dc:0b:7f:52:49:ef:3f:fd:85:8d:6b:22:ac:9c:
         b8:d9:a6:88:1b:8a:0c:a5:42:97:ea:d0:2c:5b:af:78:3a:82:
         92:2e:c0:68:bf:c2:24:8f:f3:01:a8:86:ae:79:7e:98:c9:7e:
         1e:44:9a:07:a2:5d:aa:f3:61:01:14:95:36:dd:43:e1:eb:af:
         a6:e8:24:83:db:d8:6e:44:f1:bb:3b:be:0b:3a:85:a5:6a:74:
         53:ec:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:15:50 2026 by rpki-client