Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/80364730-ab8b-3621-a236-9f38e16776cb.roa
File:                     80364730-ab8b-3621-a236-9f38e16776cb.roa (raw, json)
Hash identifier:          e0lr5pO2mEMxwQ2ZZORyn1K6Gwc7kVVwVvAhb7w19gQ=
Subject key identifier:   88:68:01:C9:20:42:42:4B:9F:93:4E:08:FA:C4:4D:E8:C2:59:19:9A
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584B84E7833ACDB4837E08EBBE80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/80364730-ab8b-3621-a236-9f38e16776cb.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     16417
IP address blocks:        216.71.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:83:3a:cd:b4:83:7e:08:eb:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=02b94f1e-752f-47f3-80fc-17711aa0b63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:da:65:a0:59:2a:6a:1d:32:b6:cf:81:ce:
                    fc:3b:a2:5e:f8:5b:55:c0:d3:be:7c:a5:ed:79:ae:
                    d3:14:e2:04:b1:1c:e0:eb:52:8f:b5:db:e1:8c:8b:
                    58:73:d8:a6:1d:f3:44:cf:11:7a:b0:bc:74:47:93:
                    af:77:c0:dc:4c:2a:66:37:8c:d2:ca:36:ce:c6:04:
                    a3:f6:89:07:3a:bf:ba:94:f9:b5:cb:65:37:00:99:
                    a6:13:07:23:a3:d7:9c:3c:cd:08:ef:4b:32:e7:11:
                    18:7a:5c:d4:a4:96:4c:6f:2e:09:55:b8:ca:f4:53:
                    dd:e9:14:d4:3a:57:38:51:46:fb:56:cb:9a:8b:61:
                    e0:de:08:3c:a7:31:39:10:59:4b:e5:92:35:ce:dc:
                    93:f0:5c:cc:5d:c4:cb:e0:88:c1:44:ad:dd:4e:23:
                    91:d4:48:3e:5e:f2:d8:fd:13:f7:b9:1d:cf:44:74:
                    91:03:29:bb:4b:75:2b:f0:9b:fd:82:90:6b:f0:eb:
                    50:43:5e:73:fd:db:40:7b:fd:3d:80:ba:ae:e8:6f:
                    24:8e:1f:63:1a:2e:51:bf:6a:16:40:2d:71:e7:31:
                    be:86:68:2e:57:c3:57:4d:7c:32:b7:03:35:a9:05:
                    ec:8b:9e:20:c1:8b:33:6c:60:ab:b5:f5:c4:62:7f:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:68:01:C9:20:42:42:4B:9F:93:4E:08:FA:C4:4D:E8:C2:59:19:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/80364730-ab8b-3621-a236-9f38e16776cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e2:3c:e6:95:03:8a:85:3a:95:90:fb:06:48:10:19:ca:18:
         fd:fa:0d:1b:66:8e:c7:6e:4e:7e:52:0f:a9:96:06:64:97:09:
         61:dd:41:a0:3d:69:d1:fc:df:de:77:f3:99:bf:08:f4:ce:96:
         40:7b:f6:34:40:d0:4f:f7:b8:d9:d3:17:38:33:6c:a8:40:c7:
         c0:37:2c:df:5a:a5:ef:b7:eb:a0:fe:f1:24:fa:e2:8f:0f:a9:
         7a:51:be:70:9c:f8:44:7e:3c:08:2c:4f:b5:f0:65:33:9f:d7:
         fc:b4:d8:6a:f4:b8:51:30:f3:b1:03:3f:d7:f1:8c:75:85:1e:
         aa:a8:b6:91:a6:3b:43:3a:dc:a2:dc:b0:e2:a1:c3:a2:62:cd:
         c0:95:c5:f2:7a:61:78:a5:15:99:f4:b9:3a:cd:f5:ac:83:7d:
         82:0d:f6:0b:35:6b:87:14:da:92:9e:7e:4b:d6:0c:60:e7:5b:
         c5:e8:65:3a:3f:43:ce:f6:aa:0f:e3:88:a2:23:59:25:3e:e0:
         de:95:12:1c:3d:40:10:5b:48:8c:f8:fb:cf:8b:96:25:f3:71:
         3b:04:78:ff:74:5a:e2:e1:e0:ac:52:44:bb:00:42:2c:f6:65:
         14:3d:0e:7e:53:46:f2:1a:4b:d9:6a:ec:62:fe:89:7d:00:21:
         54:e3:c9:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54M6zbSDfgjrvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
MDJiOTRmMWUtNzUyZi00N2YzLTgwZmMtMTc3MTFhYTBiNjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlinaZaBZKmodMrbPgc78O6Je+FtVwNO+fKXt
ea7TFOIEsRzg61KPtdvhjItYc9imHfNEzxF6sLx0R5Ovd8DcTCpmN4zSyjbOxgSj
9okHOr+6lPm1y2U3AJmmEwcjo9ecPM0I70sy5xEYelzUpJZMby4JVbjK9FPd6RTU
Olc4UUb7Vsuai2Hg3gg8pzE5EFlL5ZI1ztyT8FzMXcTL4IjBRK3dTiOR1Eg+XvLY
/RP3uR3PRHSRAym7S3Ur8Jv9gpBr8OtQQ15z/dtAe/09gLqu6G8kjh9jGi5Rv2oW
QC1x5zG+hmguV8NXTXwytwM1qQXsi54gwYszbGCrtfXEYn+5AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhoAckgQkJLn5NOCPrETejCWRmaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvODAzNjQ3MzAtYWI4Yi0z
NjIxLWEyMzYtOWYzOGUxNjc3NmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLiPOaVA4qFOpWQ+wZIEBnKGP36DRtmjsduTn5SD6mWBmSXCWHdQaA9
adH8395385m/CPTOlkB79jRA0E/3uNnTFzgzbKhAx8A3LN9ape+366D+8ST64o8P
qXpRvnCc+ER+PAgsT7XwZTOf1/y02Gr0uFEw87EDP9fxjHWFHqqotpGmO0M63KLc
sOKhw6JizcCVxfJ6YXilFZn0uTrN9ayDfYIN9gs1a4cU2pKefkvWDGDnW8XoZTo/
Q872qg/jiKIjWSU+4N6VEhw9QBBbSIz4+8+LliXzcTsEeP90WuLh4KxSRLsAQiz2
ZRQ9Dn5TRvIaS9lq7GL+iX0AIVTjySs=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:44:10 2025 by rpki-client