Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/17aab2a6-e794-304a-b77b-c8e8324e4d78.roa
File:                     17aab2a6-e794-304a-b77b-c8e8324e4d78.roa (raw, json)
Hash identifier:          ZlHV+ODI/4Gox1y2oFNvAAq6ukHsLymT2dgYmwSAhKo=
Subject key identifier:   4A:1C:D8:90:BB:FD:10:80:10:B2:C7:43:2A:93:BB:7A:B5:CF:0D:86
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584CF425AF696D8E1D47742D1BA0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/17aab2a6-e794-304a-b77b-c8e8324e4d78.roa
Signing time:             Mon 23 Feb 2026 02:07:48 +0000
ROA not before:           Mon 23 Feb 2026 02:07:48 +0000
ROA not after:            Sun 24 May 2026 01:07:48 +0000
asID:                     63023
IP address blocks:        216.152.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:25:af:69:6d:8e:1d:47:74:2d:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Feb 23 02:07:48 2026 GMT
            Not After : May 24 01:07:48 2026 GMT
        Subject: CN=82e4584a-3963-4e4d-81b1-3017e33e434b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:76:9d:8d:b1:64:13:57:63:fd:40:de:a8:
                    f6:96:c9:40:73:8e:5c:5a:20:c6:d7:ae:21:7f:d3:
                    0b:32:3b:e8:f3:95:1c:89:06:87:94:10:44:77:c9:
                    74:fd:48:83:32:7d:a5:54:c8:03:60:eb:1b:dd:20:
                    c8:a6:89:34:a8:19:b1:6e:e3:81:98:c5:3d:53:dc:
                    b2:e6:ff:cc:9d:a3:d2:2d:4d:c6:b0:74:ef:02:36:
                    3c:68:51:43:56:1a:8f:36:d7:f4:3d:dc:ea:23:25:
                    02:ab:32:7d:c6:61:a1:a9:1a:bc:4e:fe:bb:09:05:
                    24:ed:bb:98:4a:9d:a0:c2:24:6b:3d:31:07:6d:07:
                    ad:ab:07:d1:13:8f:a5:20:bc:ed:4b:8a:d6:fa:92:
                    63:5b:0a:a6:b4:4a:a4:dc:ed:25:7b:8b:2f:2f:34:
                    50:cc:7f:06:16:e7:dc:b9:a0:c4:57:43:fd:66:80:
                    6e:a6:b0:48:e9:e5:b4:0e:e5:4d:36:f1:d8:15:20:
                    a6:b3:fa:a3:42:8f:2b:50:1b:5f:24:de:d7:db:c0:
                    98:8c:61:da:24:23:6d:e2:63:6d:a0:90:59:31:6e:
                    f1:f8:5a:ca:d4:b0:f9:b9:14:f1:e2:2a:0a:40:90:
                    d1:6c:66:5c:6f:6a:f3:d9:df:51:51:df:bc:d1:fa:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:D8:90:BB:FD:10:80:10:B2:C7:43:2A:93:BB:7A:B5:CF:0D:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/17aab2a6-e794-304a-b77b-c8e8324e4d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:00:bc:79:a3:2c:b7:aa:3d:dc:62:8a:27:4a:80:51:2d:04:
         d2:55:b3:a9:d9:0c:8d:3d:e8:51:dc:82:43:9f:f7:d0:17:75:
         9b:82:02:47:a0:b5:92:7f:c4:91:8d:d6:c5:58:8f:b4:a3:6d:
         f7:fc:e4:ff:63:3b:a0:42:51:1d:7e:d7:f2:ac:ef:ea:05:47:
         f5:4d:86:c2:6d:21:85:9a:29:63:1d:24:1b:df:3e:f4:a9:8d:
         08:07:5d:a8:2e:2d:61:f4:68:28:26:f0:d5:41:85:97:3d:2f:
         49:a5:f4:c9:d1:7c:98:6b:12:b9:87:cf:50:70:5d:e6:48:db:
         26:3c:a6:92:88:ed:4e:8e:92:b9:05:bb:b1:14:3b:9c:5e:fc:
         1d:a1:10:c0:58:4e:3b:1e:7b:4f:63:9c:74:90:3e:aa:e0:c7:
         d2:20:7e:41:50:e8:a5:42:c6:b3:2c:6a:87:79:40:c1:e2:57:
         25:81:6c:01:ce:38:81:68:fe:b8:ed:78:bb:6a:ec:dc:c9:bf:
         fa:6e:5e:fb:0f:d9:05:f7:d2:48:e9:62:5f:39:f1:14:ba:b4:
         d9:fb:3e:74:84:ed:2f:37:4c:d0:34:5e:bf:1b:de:50:fb:7d:
         69:7e:eb:aa:bb:4e:39:4f:83:07:95:b8:97:04:13:fb:57:3f:
         68:4c:83:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0Ja9pbY4dR3QtG6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDIyMzAyMDc0OFoXDTI2MDUyNDAxMDc0OFowLzEtMCsGA1UEAxMk
ODJlNDU4NGEtMzk2My00ZTRkLTgxYjEtMzAxN2UzM2U0MzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+h2nY2xZBNXY/1A3qj2lslAc45cWiDG164h
f9MLMjvo85UciQaHlBBEd8l0/UiDMn2lVMgDYOsb3SDIpok0qBmxbuOBmMU9U9yy
5v/MnaPSLU3GsHTvAjY8aFFDVhqPNtf0PdzqIyUCqzJ9xmGhqRq8Tv67CQUk7buY
Sp2gwiRrPTEHbQetqwfRE4+lILztS4rW+pJjWwqmtEqk3O0le4svLzRQzH8GFufc
uaDEV0P9ZoBuprBI6eW0DuVNNvHYFSCms/qjQo8rUBtfJN7X28CYjGHaJCNt4mNt
oJBZMW7x+FrK1LD5uRTx4ioKQJDRbGZcb2rz2d9RUd+80fo2OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEoc2JC7/RCAELLHQyqTu3q1zw2GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMTdhYWIyYTYtZTc5NC0z
MDRhLWI3N2ItYzhlODMyNGU0ZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgAvHmjLLeqPdxiiidKgFEtBNJVs6nZDI096FHcgkOf99AXdZuCAkeg
tZJ/xJGN1sVYj7Sjbff85P9jO6BCUR1+1/Ks7+oFR/VNhsJtIYWaKWMdJBvfPvSp
jQgHXaguLWH0aCgm8NVBhZc9L0ml9MnRfJhrErmHz1BwXeZI2yY8ppKI7U6OkrkF
u7EUO5xe/B2hEMBYTjsee09jnHSQPqrgx9IgfkFQ6KVCxrMsaod5QMHiVyWBbAHO
OIFo/rjteLtq7NzJv/puXvsP2QX30kjpYl858RS6tNn7PnSE7S83TNA0Xr8b3lD7
fWl+66q7TjlPgweVuJcEE/tXP2hMg9I=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:07 2026 by rpki-client