Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/236dffa0-0261-3f48-b7d8-3e03cc73c023.roa
File:                     236dffa0-0261-3f48-b7d8-3e03cc73c023.roa (raw, json)
Hash identifier:          FRJFbnPNmCtbOfg7v7aKkRzLxDS2rmbgIn9BNz4rDuo=
Subject key identifier:   F1:BD:ED:20:12:9E:DE:F5:82:2F:2E:E1:12:D7:F3:CF:0B:2A:98:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F11A1196748D0BBD3AB515200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/236dffa0-0261-3f48-b7d8-3e03cc73c023.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        98.45.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:19:67:48:d0:bb:d3:ab:51:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=0fce2c6c-9a71-4362-9d98-dffaf3d22c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:50:10:f2:ed:9f:28:62:4f:e4:43:0a:e0:df:
                    b5:b0:ad:1b:e9:11:a4:1f:1b:c3:96:38:69:3f:67:
                    e7:04:ae:a9:10:df:f5:3b:49:e5:cf:84:cb:88:ea:
                    40:77:2f:bb:35:ca:03:e4:3d:c1:76:20:93:59:7b:
                    d5:24:b3:8c:44:62:9e:58:98:85:98:80:d5:33:b9:
                    a0:87:fe:fa:05:d2:ae:00:98:54:65:9a:3b:de:24:
                    70:ba:08:f4:b1:34:c1:ec:19:78:e7:bc:50:24:b9:
                    e4:4c:51:75:f3:e7:ff:9e:2f:06:47:c6:1a:46:b6:
                    78:8d:d6:e8:d9:4f:46:7d:da:0a:42:7b:45:ef:a7:
                    e6:4d:1c:1d:4d:ee:a2:0e:47:fa:d5:53:14:2a:c8:
                    d6:85:76:c3:45:a5:d2:5b:e0:a9:7c:3d:e4:a2:55:
                    7f:36:a3:47:58:5a:91:af:81:90:85:44:84:a5:b6:
                    17:6e:3c:f8:cb:13:60:f7:97:a7:27:88:9d:3a:91:
                    08:e7:de:f9:6d:a2:ed:db:9d:b2:23:3b:4b:6b:b4:
                    16:52:cd:58:d0:0a:35:2f:e9:9b:ab:95:f9:69:33:
                    57:07:b0:58:75:2c:59:2b:15:0d:9b:2d:63:d5:c4:
                    e4:35:af:8d:0c:40:a1:10:31:da:5d:a4:f1:fa:9b:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BD:ED:20:12:9E:DE:F5:82:2F:2E:E1:12:D7:F3:CF:0B:2A:98:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/236dffa0-0261-3f48-b7d8-3e03cc73c023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.45.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:4e:81:4d:69:b0:36:0f:f2:31:37:0d:ec:e6:e0:04:3b:48:
         e9:ae:fa:9e:35:b0:84:7f:75:dc:1d:e9:84:83:2b:43:8d:1d:
         87:5f:ea:13:0b:b5:c4:1b:68:56:69:7a:3c:de:dd:eb:b6:1e:
         77:6a:73:81:56:39:37:56:bd:0c:f7:e8:21:69:9a:ed:12:a4:
         1e:d8:c0:84:28:ae:03:35:31:bc:cb:34:da:76:db:08:cf:4c:
         a3:f7:b3:ce:a2:3a:b9:76:af:54:c0:68:08:42:bc:bb:95:5f:
         4f:53:7e:26:dc:1c:49:60:ca:7e:28:d4:2e:0d:4b:69:ed:47:
         a2:37:b1:56:73:36:2b:f9:d1:53:6d:70:fb:8a:ec:86:be:9d:
         e6:b7:9e:a6:56:85:ec:3b:be:53:cb:77:01:b4:ac:81:e6:d0:
         bd:92:de:9d:4b:2e:33:66:57:a7:a1:cd:c6:99:28:5a:63:e3:
         8e:a5:c9:d3:af:c3:2a:43:11:3d:d1:25:c5:90:fe:05:5b:f8:
         6d:26:ac:3f:2e:81:f4:05:d3:8d:7d:8d:d6:de:07:59:7c:9e:
         51:ff:cf:8f:61:f8:02:7f:a9:2c:51:de:91:7a:db:09:25:96:
         72:eb:d7:74:1a:19:8e:9b:47:f1:2c:65:e4:d8:aa:e0:6d:85:
         0d:44:ca:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoRlnSNC706tRUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGZjZTJjNmMtOWE3MS00MzYyLTlkOTgtZGZmYWYzZDIyYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FAQ8u2fKGJP5EMK4N+1sK0b6RGkHxvDljhp
P2fnBK6pEN/1O0nlz4TLiOpAdy+7NcoD5D3BdiCTWXvVJLOMRGKeWJiFmIDVM7mg
h/76BdKuAJhUZZo73iRwugj0sTTB7Bl457xQJLnkTFF18+f/ni8GR8YaRrZ4jdbo
2U9GfdoKQntF76fmTRwdTe6iDkf61VMUKsjWhXbDRaXSW+CpfD3kolV/NqNHWFqR
r4GQhUSEpbYXbjz4yxNg95enJ4idOpEI5975baLt252yIztLa7QWUs1Y0Ao1L+mb
q5X5aTNXB7BYdSxZKxUNmy1j1cTkNa+NDEChEDHaXaTx+ps6wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPG97SASnt71gi8u4RLX888LKpjCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM2ZGZmYTAtMDI2MS0z
ZjQ4LWI3ZDgtM2UwM2NjNzNjMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYi2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL9OgU1psDYP8jE3Dezm4AQ7SOmu+p41sIR/ddwd6YSDK0ONHYdf6hML
tcQbaFZpejze3eu2Hndqc4FWOTdWvQz36CFpmu0SpB7YwIQorgM1MbzLNNp22wjP
TKP3s86iOrl2r1TAaAhCvLuVX09TfibcHElgyn4o1C4NS2ntR6I3sVZzNiv50VNt
cPuK7Ia+nea3nqZWhew7vlPLdwG0rIHm0L2S3p1LLjNmV6ehzcaZKFpj446lydOv
wypDET3RJcWQ/gVb+G0mrD8ugfQF0419jdbeB1l8nlH/z49h+AJ/qSxR3pF62wkl
lnLr13QaGY6bR/EsZeTYquBthQ1EyrA=
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:55:26 2026 by rpki-client