Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc29dfe4-fe44-322b-a558-4f182e5ac856.roa
File:                     bc29dfe4-fe44-322b-a558-4f182e5ac856.roa (raw, json)
Hash identifier:          JNurbeyDVDix0kg2sZy9GvQzrbOx94RgmoJxHgSVrgA=
Subject key identifier:   DB:07:4D:5B:D7:E4:6E:CF:6F:2D:8B:B4:66:65:50:C1:55:76:78:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86441D77BF57C79139354C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc29dfe4-fe44-322b-a558-4f182e5ac856.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.198.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:41:d7:7b:f5:7c:79:13:93:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=7d36e44b-13bd-497f-9acd-b0f78f68305b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:dd:4a:fe:9d:3e:a5:15:05:53:53:a9:f5:
                    05:c6:d1:a8:eb:81:b2:5f:68:90:27:e0:76:c9:e8:
                    9b:f0:45:16:16:ea:10:5a:47:7d:d2:89:fa:80:20:
                    86:c1:10:dd:8c:90:a8:fb:bc:e0:5d:16:14:82:67:
                    32:d7:a0:0a:f4:ac:c2:e0:a7:e1:ce:fa:61:fa:ce:
                    8d:b1:62:1e:58:b0:15:77:81:04:38:5c:bf:b2:f1:
                    a9:88:59:c3:11:3e:36:7e:17:dd:4f:62:2e:e4:15:
                    25:23:3f:7b:da:8a:43:35:1c:fe:35:03:6c:68:65:
                    54:08:e0:19:aa:da:f6:d6:c1:0f:b1:b2:04:86:94:
                    e4:df:02:62:42:53:65:2e:9e:e5:47:33:0d:4d:c8:
                    95:ca:94:46:53:68:fd:b4:74:20:3f:93:f5:79:17:
                    74:73:d6:c8:96:ca:48:f1:50:90:dc:47:c0:9f:7b:
                    0c:0d:e8:32:99:70:80:10:5f:8b:ba:08:fd:ea:43:
                    90:a8:29:27:b9:47:bb:68:38:e0:2c:84:78:c3:67:
                    17:6b:5b:11:ab:c7:2d:29:9c:04:ad:a1:c6:b6:6e:
                    37:d8:92:e1:c8:83:98:75:41:4d:26:6f:40:f3:c7:
                    67:9f:bf:f0:6a:88:c1:e4:02:d6:38:a3:c2:82:43:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:07:4D:5B:D7:E4:6E:CF:6F:2D:8B:B4:66:65:50:C1:55:76:78:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc29dfe4-fe44-322b-a558-4f182e5ac856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.198.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:b9:fb:ad:cd:a3:13:e0:e9:9f:6e:9f:cf:6c:bf:1d:02:
         87:f9:a0:33:83:03:e6:cb:e2:ca:f6:d7:36:e3:15:5d:4b:ba:
         9e:eb:e7:27:ae:f3:c1:6b:2c:9c:a2:d7:3c:54:f0:58:e9:50:
         dd:74:b5:66:c5:cd:45:61:c1:f4:0d:7b:69:13:aa:e0:eb:3c:
         e0:72:e7:a3:53:d9:cd:d4:71:4f:2a:05:aa:28:3d:40:d6:56:
         7d:13:6e:fb:ac:e5:6e:96:38:dd:c4:e2:a1:e9:aa:d9:0e:69:
         01:8e:e4:b9:e7:4d:23:52:53:2a:a2:43:61:54:4b:14:2d:d1:
         12:17:58:0d:d1:03:09:6e:a3:cc:28:85:fe:08:af:40:b6:a5:
         60:6f:c9:43:01:85:d4:99:1a:fc:49:22:23:19:b9:2e:ff:b3:
         88:be:ca:d4:48:af:70:38:c4:3d:2d:dc:6f:8a:1c:d0:54:4a:
         9b:1e:32:fe:c3:38:20:28:a7:f7:55:83:12:2d:4b:66:4d:b7:
         ec:e6:aa:57:c7:e9:49:5a:5a:d3:52:f0:64:02:9f:35:64:a7:
         21:3b:68:d8:a4:6b:88:bd:1a:67:68:43:27:c7:bc:67:69:c3:
         a8:4f:49:7e:1b:06:6b:73:7e:50:e2:c0:87:f4:fb:11:e4:95:
         01:32:8d:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZEHXe/V8eROTVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
N2QzNmU0NGItMTNiZC00OTdmLTlhY2QtYjBmNzhmNjgzMDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRLdSv6dPqUVBVNTqfUFxtGo64GyX2iQJ+B2
yeib8EUWFuoQWkd90on6gCCGwRDdjJCo+7zgXRYUgmcy16AK9KzC4Kfhzvph+s6N
sWIeWLAVd4EEOFy/svGpiFnDET42fhfdT2Iu5BUlIz972opDNRz+NQNsaGVUCOAZ
qtr21sEPsbIEhpTk3wJiQlNlLp7lRzMNTciVypRGU2j9tHQgP5P1eRd0c9bIlspI
8VCQ3EfAn3sMDegymXCAEF+Lugj96kOQqCknuUe7aDjgLIR4w2cXa1sRq8ctKZwE
raHGtm432JLhyIOYdUFNJm9A88dnn7/waojB5ALWOKPCgkPi0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsHTVvX5G7Pby2LtGZlUMFVdniOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmMyOWRmZTQtZmU0NC0z
MjJiLWE1NTgtNGYxODJlNWFjODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsZ6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtSufutzaMT4Omfbp/PbL8dAof5oDODA+bL4sr21zbjFV1Lup7r5yeu
88FrLJyi1zxU8FjpUN10tWbFzUVhwfQNe2kTquDrPOBy56NT2c3UcU8qBaooPUDW
Vn0Tbvus5W6WON3E4qHpqtkOaQGO5LnnTSNSUyqiQ2FUSxQt0RIXWA3RAwluo8wo
hf4Ir0C2pWBvyUMBhdSZGvxJIiMZuS7/s4i+ytRIr3A4xD0t3G+KHNBUSpseMv7D
OCAop/dVgxItS2ZNt+zmqlfH6UlaWtNS8GQCnzVkpyE7aNika4i9GmdoQyfHvGdp
w6hPSX4bBmtzflDiwIf0+xHklQEyjdU=
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:51:55 2026 by rpki-client