Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f34a78-a5b8-37aa-b080-70adbd0f1454.roa
File:                     98f34a78-a5b8-37aa-b080-70adbd0f1454.roa (raw, json)
Hash identifier:          Ek1HTzC16c7/rnLYNNMMroUWZY84XWlqIZPoyMMvXNI=
Subject key identifier:   9A:27:1E:6D:E4:25:CE:10:AC:5D:1D:06:DA:47:CF:0C:7E:9A:E4:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57B10B3275351CC82710D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f34a78-a5b8-37aa-b080-70adbd0f1454.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        68.81.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:b1:0b:32:75:35:1c:c8:27:10:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=54f3a57a-07c6-47ea-9af0-ab0f54aa3070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:e4:2a:ce:65:38:a3:f0:59:93:e0:26:54:
                    a1:3e:b1:6d:57:fe:da:fd:27:85:a9:de:2f:ca:e2:
                    00:d5:55:9f:30:59:6b:98:6b:19:58:2d:25:b2:c5:
                    74:eb:5d:93:24:24:50:c1:51:4a:ea:70:b2:69:e0:
                    93:31:b4:2a:6b:27:6e:72:3f:30:44:07:12:b9:10:
                    7d:37:74:aa:bd:94:75:07:34:14:bf:41:c0:79:4f:
                    44:42:cf:7d:91:aa:c4:87:1b:97:e9:a6:92:8d:6b:
                    48:ce:68:0d:af:2d:60:15:da:6c:9a:32:d0:35:92:
                    00:2d:ee:e8:47:63:c5:87:f8:d0:01:36:13:c9:7f:
                    5b:47:1c:64:af:1e:24:eb:0f:dc:7d:6f:69:ce:98:
                    85:3a:45:75:25:d0:c0:73:0e:88:a1:59:09:9a:42:
                    39:7d:a4:a1:1f:b1:88:48:23:ef:17:03:a5:03:6c:
                    e5:50:a3:79:84:28:e0:8d:62:1c:5c:77:36:b5:b9:
                    42:b4:df:54:c5:bc:8c:31:32:b0:bf:dc:79:31:09:
                    e8:b7:0d:ac:60:03:c3:09:d3:59:89:6d:bd:c4:48:
                    8d:03:cc:3f:1d:0d:1e:3d:82:77:b0:af:bd:9e:6b:
                    99:b4:a1:0b:59:8a:79:d5:f7:d8:1e:8b:47:d4:c1:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:1E:6D:E4:25:CE:10:AC:5D:1D:06:DA:47:CF:0C:7E:9A:E4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f34a78-a5b8-37aa-b080-70adbd0f1454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.81.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:9e:9a:d4:1a:9b:0b:c3:69:01:22:4f:c9:22:18:45:b6:00:
         e6:8a:62:c5:7d:ac:21:38:cc:93:d5:ad:df:d9:68:95:1d:2c:
         3d:0f:df:f3:32:29:b4:99:2f:cc:fb:fc:73:55:50:0a:3c:f6:
         17:21:1b:fc:70:74:d2:ab:f2:47:fd:90:cc:28:8e:57:d4:a9:
         ac:85:f0:93:46:2b:e4:ca:4e:29:24:71:d0:7a:d1:6e:9d:38:
         d3:e4:29:8e:20:c8:9b:c2:c5:a4:3d:e8:b5:86:20:12:af:a8:
         4a:54:58:1b:4f:c7:61:f0:9e:49:78:ea:d5:8a:54:c0:80:01:
         2f:3e:42:fb:a7:70:99:a6:f1:f8:7f:b2:e3:e4:06:20:54:5f:
         d1:a0:e4:6c:db:4f:65:d3:7a:13:33:e9:c6:72:2a:f3:6c:d7:
         3a:5f:4d:57:f8:d4:2a:f8:d0:b2:db:fb:f1:ad:eb:d9:49:2d:
         c7:e4:da:9a:ee:99:04:23:6a:43:37:a1:2b:5d:52:a3:ad:65:
         70:7e:23:b4:6c:c7:f5:5c:d1:d8:88:88:9d:f1:6f:7c:6e:c3:
         71:c5:4b:ac:e6:1c:35:c7:a0:6f:b9:7a:79:2a:55:c1:4d:72:
         a9:b0:d3:14:76:f5:9b:12:b4:62:51:21:42:fb:c0:50:19:82:
         53:36:53:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV7ELMnU1HMgnENAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NTRmM2E1N2EtMDdjNi00N2VhLTlhZjAtYWIwZjU0YWEzMDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUXkKs5lOKPwWZPgJlShPrFtV/7a/SeFqd4v
yuIA1VWfMFlrmGsZWC0lssV0612TJCRQwVFK6nCyaeCTMbQqayducj8wRAcSuRB9
N3SqvZR1BzQUv0HAeU9EQs99karEhxuX6aaSjWtIzmgNry1gFdpsmjLQNZIALe7o
R2PFh/jQATYTyX9bRxxkrx4k6w/cfW9pzpiFOkV1JdDAcw6IoVkJmkI5faShH7GI
SCPvFwOlA2zlUKN5hCjgjWIcXHc2tblCtN9UxbyMMTKwv9x5MQnotw2sYAPDCdNZ
iW29xEiNA8w/HQ0ePYJ3sK+9nmuZtKELWYp51ffYHotH1MHGswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJonHm3kJc4QrF0dBtpHzwx+muRhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOThmMzRhNzgtYTViOC0z
N2FhLWIwODAtNzBhZGJkMGYxNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALyemtQamwvDaQEiT8kiGEW2AOaKYsV9rCE4zJPVrd/ZaJUdLD0P3/My
KbSZL8z7/HNVUAo89hchG/xwdNKr8kf9kMwojlfUqayF8JNGK+TKTikkcdB60W6d
ONPkKY4gyJvCxaQ96LWGIBKvqEpUWBtPx2Hwnkl46tWKVMCAAS8+QvuncJmm8fh/
suPkBiBUX9Gg5GzbT2XTehMz6cZyKvNs1zpfTVf41Cr40LLb+/Gt69lJLcfk2pru
mQQjakM3oStdUqOtZXB+I7Rsx/Vc0diIiJ3xb3xuw3HFS6zmHDXHoG+5enkqVcFN
cqmw0xR29ZsStGJRIUL7wFAZglM2U7Y=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:55 2026 by rpki-client