Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ca4364-42dc-3b75-86df-0e52ceecdfa0.roa
File:                     e2ca4364-42dc-3b75-86df-0e52ceecdfa0.roa (raw, json)
Hash identifier:          QZmMYX7dOmE36rLZjbwDwqTA6B7bOtTeYHETUgCnVsY=
Subject key identifier:   17:91:F7:81:75:C4:DA:1D:24:FE:7C:E4:C8:1F:13:7B:E7:85:98:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5911E35491DA1F712067F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ca4364-42dc-3b75-86df-0e52ceecdfa0.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        98.35.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:11:e3:54:91:da:1f:71:20:67:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=46aff60a-a2bd-43a4-a35a-9904b649b964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:18:21:f2:d0:d0:18:38:18:f7:f0:5c:aa:
                    44:07:fe:e2:f7:55:3e:da:78:d7:f0:28:01:02:4e:
                    41:5e:a0:fa:0a:64:81:f7:e3:35:52:6c:a2:2e:a6:
                    b2:9c:69:de:d3:4c:27:27:29:05:00:53:0e:34:69:
                    07:94:ed:27:0d:e7:04:4a:ad:21:a0:ae:e3:64:fc:
                    1d:1c:08:77:35:3f:22:c5:af:7f:45:42:97:44:31:
                    c5:19:97:8c:d1:29:82:54:6c:19:52:59:e2:16:4f:
                    d3:eb:34:e8:92:36:05:6f:6b:30:66:fb:ec:47:58:
                    e5:d9:55:a3:5b:19:76:9f:62:b0:e5:7d:c9:4e:71:
                    fc:5a:8a:72:bd:bc:16:f0:b2:fa:38:51:05:4a:9f:
                    89:49:2f:1f:00:af:c1:f4:53:4e:e6:ca:88:c1:1d:
                    ae:97:dd:a7:c8:51:22:18:c6:38:a0:11:c7:74:aa:
                    3d:b8:d9:fc:3f:e7:e0:da:dc:f6:d2:66:4d:75:c9:
                    fc:04:5a:7e:af:c7:b3:71:63:e5:d9:61:17:9c:bd:
                    e5:9c:1d:37:a1:39:1a:35:f3:4c:00:c6:b3:c9:01:
                    2e:ac:be:c6:08:ba:bb:b8:88:b9:a9:91:6a:38:49:
                    92:6a:00:8b:68:d1:69:55:4d:e3:16:51:e2:c8:96:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:91:F7:81:75:C4:DA:1D:24:FE:7C:E4:C8:1F:13:7B:E7:85:98:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ca4364-42dc-3b75-86df-0e52ceecdfa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.35.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:6d:9c:45:70:bb:23:48:13:dd:3b:39:e0:a8:5a:24:55:
         6f:0e:4b:28:45:46:36:2f:8f:41:b3:20:3d:4c:43:ea:6d:3c:
         c4:4b:b1:2a:d7:be:7f:49:58:b2:80:f6:bc:f3:17:66:55:48:
         e5:12:c0:6a:8d:9f:63:49:b4:74:10:e4:04:13:8c:b6:65:0a:
         17:a7:9f:c7:a2:7b:41:a2:82:47:4c:a1:91:4b:b0:13:8c:ff:
         a3:d6:86:e1:50:79:e7:31:ab:1f:ac:59:e3:6c:00:c4:9c:90:
         bc:b1:61:61:be:6e:b4:b8:01:d9:25:d9:af:35:3a:e0:d0:0f:
         05:61:0e:aa:88:26:12:17:2f:0e:0a:18:62:b1:3c:67:ac:e3:
         a3:b9:c0:a5:7b:92:6b:e4:8a:6c:2c:4e:33:f3:fd:d2:7a:d3:
         1d:0d:86:f3:76:cd:ad:8f:53:81:d1:ec:f3:61:cf:76:61:ad:
         2e:14:79:af:87:f2:8e:bd:bd:af:9e:03:59:62:b2:0e:1b:ab:
         f7:07:7b:d3:a3:76:9e:95:5f:d3:78:7d:0b:3c:21:61:99:72:
         c0:fc:42:a6:36:10:76:87:27:a4:81:3e:82:bc:9d:d8:95:ee:
         24:47:db:08:1a:c3:df:3e:4d:49:48:9e:07:b8:8c:d9:d7:99:
         f7:70:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:50 2026 by rpki-client