Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ae968ef-1623-3b2b-8120-3c6da35b7312.roa
File:                     5ae968ef-1623-3b2b-8120-3c6da35b7312.roa (raw, json)
Hash identifier:          OFi+jWzlJloCMSdOm0c213cR19rZ/MhGDdaTrlSWJ5c=
Subject key identifier:   1A:1E:07:88:3F:48:E5:1B:14:48:53:9B:71:E7:64:12:7F:3E:91:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB3BA02602AA29BD346180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ae968ef-1623-3b2b-8120-3c6da35b7312.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        98.250.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:3b:a0:26:02:aa:29:bd:34:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=afe5b946-8601-40eb-9466-9ea1fd8b9eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9d:f0:ce:dc:f0:e0:d0:36:30:7e:5a:30:7f:
                    c4:a6:fa:fe:a9:67:35:05:82:9f:d0:4d:8c:5f:35:
                    09:ee:cb:6a:41:79:78:f0:c0:73:05:c2:8c:05:f4:
                    3d:c3:ad:b3:4e:55:48:52:b7:bb:9c:00:ec:2d:a2:
                    9f:b1:30:e8:c0:7c:45:13:5c:5e:93:cf:46:0a:0c:
                    1d:a9:07:18:37:1a:9c:bd:1a:c2:97:5d:94:a7:02:
                    a5:6b:21:59:1a:fa:0f:81:c1:c4:42:f2:c2:25:9b:
                    bc:24:db:bd:c6:b8:fc:e0:16:73:2b:37:a4:d6:8f:
                    60:35:99:7c:02:3b:ab:2b:51:1c:9b:27:bb:96:b7:
                    af:28:45:57:a3:3c:33:f2:d7:96:23:6c:a6:b9:6f:
                    bc:bd:08:5c:a6:b7:ad:d9:3d:54:90:ad:78:4f:f6:
                    8a:a6:a5:5e:d3:26:b3:c9:83:45:42:37:2a:6f:a5:
                    6c:67:43:0f:74:c5:c1:a0:20:85:2a:57:0e:38:f4:
                    10:09:33:59:35:be:e8:95:a7:9f:1d:81:d8:28:45:
                    fb:1f:4c:66:0d:a5:18:9b:d4:50:5b:ce:2f:d0:2f:
                    8b:df:87:1b:db:5e:d1:5b:1f:ab:b9:19:46:4f:f7:
                    78:c7:d6:3b:ce:00:02:b8:ed:a4:ad:d7:8e:77:dc:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1E:07:88:3F:48:E5:1B:14:48:53:9B:71:E7:64:12:7F:3E:91:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ae968ef-1623-3b2b-8120-3c6da35b7312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:77:bf:19:94:68:cb:8c:d7:4e:c7:22:13:74:02:0d:23:08:
         1e:65:d3:49:74:18:45:88:87:af:65:ff:26:2e:80:bc:b6:b2:
         f5:04:e0:8e:04:c5:7d:08:6f:38:85:b9:c9:2b:84:92:08:79:
         bf:fd:79:93:9b:2d:fd:e8:41:86:28:b0:2f:d8:51:de:83:d2:
         fd:95:40:96:65:ef:dd:21:a2:fb:79:d6:ae:9d:ec:5e:59:90:
         96:4a:54:df:67:21:40:38:3f:e5:0e:f5:2a:4f:f9:f6:af:4e:
         e1:e3:e4:af:0a:a5:a4:e9:8b:07:45:39:b3:b2:fa:5f:de:54:
         76:be:63:b3:19:5a:60:04:67:16:ea:82:11:9e:8e:f3:70:c9:
         c9:bb:cf:4f:61:c2:3f:d5:8f:5d:b4:6e:4a:d0:b9:08:c6:65:
         a3:51:32:1e:fe:1e:c1:73:41:78:1b:b3:7b:46:02:fa:3a:56:
         93:a8:0a:89:04:b7:a2:56:4e:ed:34:68:21:4a:fd:50:cf:6b:
         c3:e6:24:b9:ec:94:dc:e1:55:37:72:6a:64:b2:70:c7:25:88:
         78:23:96:a9:de:2f:a8:2c:b1:f8:7f:8c:b8:ca:e4:0c:1c:d3:
         81:e3:b5:01:83:04:89:f2:32:21:70:61:a5:31:17:56:87:c8:
         94:15:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:31 2026 by rpki-client