Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa
File:                     a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa (raw, json)
Hash identifier:          YDkimM9nZY9bi58DZHlx7ZA1vPGwU6id2l5v0hlgwrk=
Subject key identifier:   0C:24:4E:11:A1:2A:01:0C:68:79:BC:BA:D5:B2:1D:9A:CA:A1:C9:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BCAB0F5AA58556148837C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        98.34.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:ab:0f:5a:a5:85:56:14:88:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=8fedf13b-c47a-4488-b719-dfa122bd8efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:d1:92:e1:58:4e:00:19:f1:21:0f:6d:8f:
                    4f:45:5c:83:5f:ba:75:d6:d5:82:e2:87:a0:90:ec:
                    e2:6e:00:4c:de:b8:35:35:44:30:dc:64:bd:47:4b:
                    07:b9:f5:ff:56:38:7e:0b:30:e2:d9:1a:41:71:57:
                    9e:5c:78:ac:de:12:07:15:41:fa:89:85:8f:04:28:
                    dd:fc:80:2c:4c:a4:29:c6:6c:b7:f5:9d:70:66:39:
                    99:5a:ed:ad:87:63:d2:47:6d:06:25:bb:a5:f8:a7:
                    90:41:8e:b0:9f:d7:dd:81:3e:be:54:c2:ca:17:41:
                    f5:3c:49:60:00:24:4a:d4:7d:99:21:21:24:25:ae:
                    c3:f8:ad:d1:c4:19:52:55:31:04:52:78:d0:1e:cb:
                    ce:aa:15:9b:30:c1:ca:94:69:c5:8b:fc:ec:7a:63:
                    bf:d6:52:33:d8:67:b6:c6:4c:f1:2c:26:69:fe:2f:
                    9d:7e:15:29:2f:15:4b:9a:bb:d8:31:ff:10:48:c2:
                    81:27:c0:45:27:36:19:65:48:e1:1b:77:3a:38:58:
                    ce:14:a0:75:55:65:f5:a9:2a:84:3e:6a:17:c4:b4:
                    a4:ac:0e:49:16:1f:79:bb:51:ad:ab:19:b2:3c:57:
                    55:13:11:37:7d:d3:50:53:71:f2:47:ce:ec:e2:93:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:24:4E:11:A1:2A:01:0C:68:79:BC:BA:D5:B2:1D:9A:CA:A1:C9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:57:53:b1:09:3f:31:5f:c1:fa:e3:9b:b0:f9:86:8d:86:
         17:52:52:5b:ca:ba:c1:ed:5b:05:42:30:5e:99:88:f3:fb:82:
         a5:a6:96:6e:72:26:7e:e8:2c:dc:66:40:bf:b2:b2:94:25:55:
         e9:a5:a2:e0:f8:be:1a:68:ad:b4:13:ea:12:0c:c3:2a:33:65:
         0d:52:3e:dc:47:d7:a7:97:cd:4b:6c:be:42:33:6e:f8:fa:d0:
         21:24:da:79:99:65:1a:a0:09:37:d0:43:80:ff:79:e7:d4:f1:
         a4:ca:ae:ed:4a:39:8e:5e:13:fc:53:e3:b0:30:eb:af:7b:9e:
         d4:d6:ce:01:23:91:fe:83:e3:05:9b:35:4c:a4:b4:69:4c:55:
         fb:b1:87:cf:99:68:9d:1c:e1:2f:0d:be:59:13:d7:83:62:80:
         db:0d:ac:57:71:fc:c3:5a:23:ac:d2:0e:9b:c2:3b:9d:c0:be:
         b3:6c:bb:0a:2e:ad:3e:6b:ee:46:68:0f:cc:a5:77:85:1d:04:
         21:f9:c0:e2:d1:da:42:f3:f0:e7:d9:2c:02:30:79:dc:b8:ac:
         24:f1:3b:7e:c0:8f:9b:77:77:81:50:52:18:3a:ca:23:f4:3b:
         ce:79:9f:3f:dc:2c:3f:85:c6:a1:20:9a:25:d5:8a:cb:ce:82:
         34:c1:98:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvKsPWqWFVhSIN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
OGZlZGYxM2ItYzQ3YS00NDg4LWI3MTktZGZhMTIyYmQ4ZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ/RkuFYTgAZ8SEPbY9PRVyDX7p11tWC4oeg
kOzibgBM3rg1NUQw3GS9R0sHufX/Vjh+CzDi2RpBcVeeXHis3hIHFUH6iYWPBCjd
/IAsTKQpxmy39Z1wZjmZWu2th2PSR20GJbul+KeQQY6wn9fdgT6+VMLKF0H1PElg
ACRK1H2ZISEkJa7D+K3RxBlSVTEEUnjQHsvOqhWbMMHKlGnFi/zsemO/1lIz2Ge2
xkzxLCZp/i+dfhUpLxVLmrvYMf8QSMKBJ8BFJzYZZUjhG3c6OFjOFKB1VWX1qSqE
PmoXxLSkrA5JFh95u1GtqxmyPFdVExE3fdNQU3HyR87s4pO9owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwkThGhKgEMaHm8utWyHZrKocmGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVjZGRlOWQtNjI1MS0z
NmQ2LTg0NGQtODlmZDQ3OGZlMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiK4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABM+V1OxCT8xX8H645uw+YaNhhdSUlvKusHtWwVCMF6ZiPP7gqWmlm5y
Jn7oLNxmQL+yspQlVemlouD4vhporbQT6hIMwyozZQ1SPtxH16eXzUtsvkIzbvj6
0CEk2nmZZRqgCTfQQ4D/eefU8aTKru1KOY5eE/xT47Aw6697ntTWzgEjkf6D4wWb
NUyktGlMVfuxh8+ZaJ0c4S8NvlkT14NigNsNrFdx/MNaI6zSDpvCO53AvrNsuwou
rT5r7kZoD8yld4UdBCH5wOLR2kLz8OfZLAIwedy4rCTxO37Aj5t3d4FQUhg6yiP0
O855nz/cLD+FxqEgmiXVisvOgjTBmBI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:33:23 2026 by rpki-client