Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02f83ff5-2be4-3c8e-b8ae-e24f2716408e.roa
File:                     02f83ff5-2be4-3c8e-b8ae-e24f2716408e.roa (raw, json)
Hash identifier:          DqTvvLbKHmPZPlX+OsC0WVnPpm2LY5Quf+NQ6Fkpzhg=
Subject key identifier:   2A:E5:34:EA:B1:6B:9B:C6:9F:43:65:BA:F2:DF:EB:D2:3E:E6:08:CE
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584F497550A6770FC13118FCCD40
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02f83ff5-2be4-3c8e-b8ae-e24f2716408e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16417
IP address blocks:        216.71.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:50:a6:77:0f:c1:31:18:fc:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=57a028a2-4211-4ca7-ac9b-f79c12c9f2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:70:ce:5e:11:36:e4:46:f5:3c:11:9a:d1:
                    be:ce:50:4a:81:b3:fe:a0:7d:01:4e:aa:df:b6:14:
                    93:1e:24:b9:18:4b:0f:f9:89:24:7c:72:67:67:f5:
                    38:1c:b8:bc:3e:2f:34:09:e3:a6:1f:e1:37:9b:de:
                    96:62:70:ff:96:0a:41:0b:3b:ee:e8:2b:eb:79:a6:
                    99:11:bb:e5:1d:39:1c:f2:c9:7a:71:98:3b:de:84:
                    0e:0c:e8:09:ad:a7:02:8c:5b:c2:91:9b:e5:31:61:
                    08:ad:ec:bb:65:35:a1:07:a4:d1:bf:8e:c0:25:8b:
                    f8:c9:79:8f:f2:55:7f:fc:1f:f2:d5:de:de:f8:f2:
                    0e:b9:14:fb:c0:f6:18:ca:dd:64:b3:e7:aa:05:ae:
                    44:7f:f8:85:10:3a:f3:41:b1:2d:be:47:15:01:2e:
                    71:54:52:32:4b:ee:29:3f:30:04:05:22:9f:ac:b7:
                    dd:2c:b5:bf:b4:1e:69:30:c2:ac:54:c9:33:c8:88:
                    fb:7b:70:1b:52:34:90:9f:40:b7:c7:be:0b:b9:0a:
                    0a:78:33:9a:8b:8e:2a:e4:05:45:dd:fa:fc:93:78:
                    d8:11:2d:89:cb:a9:63:d6:ee:bd:b4:de:f3:57:70:
                    c4:e2:95:44:dd:24:2e:2b:a7:8d:eb:12:34:86:dc:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:34:EA:B1:6B:9B:C6:9F:43:65:BA:F2:DF:EB:D2:3E:E6:08:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/02f83ff5-2be4-3c8e-b8ae-e24f2716408e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ef:5f:60:21:f5:68:20:53:34:81:5f:73:db:50:07:c6:47:
         3a:cd:cb:85:a3:1f:28:59:89:0b:95:e2:d9:59:a0:7d:39:f5:
         38:aa:b7:bc:5a:d3:7c:5f:98:3d:13:9a:51:2a:05:22:d3:64:
         0e:99:a6:ee:dd:99:d9:4c:39:bc:e7:0e:34:52:d4:ff:f1:84:
         4f:a5:81:81:5f:0c:42:6c:ae:61:e6:a3:eb:77:72:76:c6:8b:
         1a:58:a9:b2:42:48:64:d7:7b:eb:8e:a9:2d:5e:89:a6:89:ce:
         e9:cc:60:60:f8:20:00:b0:e9:07:57:ff:cf:c0:6e:1b:db:c5:
         db:6e:48:f9:95:30:0c:ac:36:e4:32:e5:fb:73:13:78:bb:62:
         a7:f7:b8:1e:84:87:f5:fe:b8:c9:84:9c:27:af:86:99:ec:b5:
         0f:2a:30:eb:ab:c1:01:2f:16:55:1b:76:b8:04:32:17:eb:56:
         e3:35:35:2b:d5:f4:3a:0d:3f:22:6e:84:4a:04:54:5b:88:ee:
         64:83:da:98:ae:06:92:d7:cd:21:9c:b5:a6:2b:6d:ee:d4:f6:
         ad:bb:83:15:4c:e0:3d:b0:67:12:0d:00:ef:7c:d7:9a:13:9f:
         ca:fc:50:e7:04:96:13:57:87:be:59:f6:45:d1:db:4c:da:13:
         62:bb:ec:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdVCmdw/BMRj8zUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTdhMDI4YTItNDIxMS00Y2E3LWFjOWItZjc5YzEyYzlmMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mhwzl4RNuRG9TwRmtG+zlBKgbP+oH0BTqrf
thSTHiS5GEsP+YkkfHJnZ/U4HLi8Pi80CeOmH+E3m96WYnD/lgpBCzvu6CvreaaZ
EbvlHTkc8sl6cZg73oQODOgJracCjFvCkZvlMWEIrey7ZTWhB6TRv47AJYv4yXmP
8lV//B/y1d7e+PIOuRT7wPYYyt1ks+eqBa5Ef/iFEDrzQbEtvkcVAS5xVFIyS+4p
PzAEBSKfrLfdLLW/tB5pMMKsVMkzyIj7e3AbUjSQn0C3x74LuQoKeDOai44q5AVF
3fr8k3jYES2Jy6lj1u69tN7zV3DE4pVE3SQuK6eN6xI0htxREwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrlNOqxa5vGn0NluvLf69I+5gjOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDJmODNmZjUtMmJlNC0z
YzhlLWI4YWUtZTI0ZjI3MTY0MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTvX2Ah9WggUzSBX3PbUAfGRzrNy4WjHyhZiQuV4tlZoH059Tiqt7xa
03xfmD0TmlEqBSLTZA6Zpu7dmdlMObznDjRS1P/xhE+lgYFfDEJsrmHmo+t3cnbG
ixpYqbJCSGTXe+uOqS1eiaaJzunMYGD4IACw6QdX/8/AbhvbxdtuSPmVMAysNuQy
5ftzE3i7Yqf3uB6Eh/X+uMmEnCevhpnstQ8qMOurwQEvFlUbdrgEMhfrVuM1NSvV
9DoNPyJuhEoEVFuI7mSD2piuBpLXzSGctaYrbe7U9q27gxVM4D2wZxINAO9815oT
n8r8UOcElhNXh75Z9kXR20zaE2K77KA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:18:16 2026 by rpki-client