Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dfbc2fd-c830-315d-af22-bed1591d3562.roa
File:                     2dfbc2fd-c830-315d-af22-bed1591d3562.roa (raw, json)
Hash identifier:          NPoLp2VYgPEJXWus/hZAt1KL41WcUaczYQxMA7WXvvA=
Subject key identifier:   FE:CE:68:0F:93:99:72:E7:FE:AC:8C:6C:35:5C:E7:EE:F0:C7:7A:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980E4E26D4DD64A08D6E8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dfbc2fd-c830-315d-af22-bed1591d3562.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        98.37.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:e4:e2:6d:4d:d6:4a:08:d6:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1eea312b-9612-480a-bd6e-f4958d29b41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:ef:ff:50:ed:b1:73:a9:5c:ab:b7:4c:dd:
                    bf:c3:9e:35:44:72:c4:18:b9:59:21:63:7c:51:39:
                    d8:30:62:b7:23:54:d9:82:64:67:5e:78:e7:15:a6:
                    e4:d9:90:48:16:e2:e4:d6:25:ed:18:9a:79:31:74:
                    1f:b7:96:ac:6c:10:1b:8a:2c:21:c8:cb:2d:ea:9c:
                    29:07:f4:5e:54:cb:56:90:25:03:41:8a:37:7c:9f:
                    f3:e5:ac:1d:20:f7:ee:19:35:5d:d5:41:b5:6a:a3:
                    ee:d3:2e:05:a4:86:60:58:b8:c1:92:22:d2:52:94:
                    16:92:77:a6:4c:cb:46:91:29:dd:74:bb:59:e8:0d:
                    4c:62:23:a1:38:5e:5a:84:3e:8e:d1:83:c2:57:06:
                    c1:e0:20:f0:44:8f:ea:77:c9:8f:a1:ae:25:3c:ba:
                    af:32:b9:38:c1:08:98:54:98:8b:b6:10:84:2b:25:
                    1d:8f:ca:36:0e:6f:40:6f:fa:9f:7f:e3:b8:ca:6a:
                    54:9b:7e:b7:9c:c7:da:6c:e8:c5:67:51:09:00:dd:
                    14:19:d6:2f:cf:c2:35:3b:ae:88:14:82:d9:60:dc:
                    30:34:09:41:19:77:1b:ac:6e:f1:4d:13:25:41:93:
                    86:78:71:60:ca:58:4e:e0:cd:29:a5:67:11:2d:45:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CE:68:0F:93:99:72:E7:FE:AC:8C:6C:35:5C:E7:EE:F0:C7:7A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dfbc2fd-c830-315d-af22-bed1591d3562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:aa:e0:01:a3:3c:6e:75:eb:45:97:1a:dd:9d:8e:96:05:13:
         25:8a:af:09:16:a8:a2:00:31:8d:55:94:ca:b8:c9:0d:d2:07:
         76:6b:b1:73:1a:d5:39:71:a9:95:97:4d:74:d9:c8:c0:11:94:
         37:b1:f6:eb:10:be:7e:69:b1:8a:40:ef:88:1a:3a:dc:28:5a:
         ae:d6:30:6f:ec:ad:d4:c5:4d:31:77:17:26:5b:bf:ce:c8:b7:
         98:d5:a3:79:53:d3:c3:3d:77:ef:bc:f7:a5:91:4e:61:28:c0:
         62:81:fe:21:95:e2:fb:40:42:4b:f7:8d:dd:89:eb:53:59:6f:
         ff:48:c6:d7:87:c6:73:7e:0f:7a:4c:7c:de:b3:42:dc:e8:08:
         4d:6e:2f:01:f8:f0:ca:3a:89:b1:80:ac:f0:16:60:ca:7f:ad:
         b7:11:e8:2e:19:5f:5b:7c:97:c5:74:41:73:9e:c7:e0:8d:ae:
         40:2d:00:b9:6b:86:38:96:a1:1c:c9:29:d1:7c:9e:f1:d7:98:
         78:b2:07:78:e4:04:28:35:bb:17:c2:78:b0:ac:2b:26:a2:ef:
         07:fa:85:08:3a:a2:ca:4f:21:07:d2:02:10:74:20:fa:d0:72:
         50:f8:0a:49:16:8c:0e:21:84:67:7b:d5:2f:f4:f1:96:67:46:
         63:1a:a7:16
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JgOTibU3WSgjW6MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWVlYTMxMmItOTYxMi00ODBhLWJkNmUtZjQ5NThkMjliNDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTzv/1DtsXOpXKu3TN2/w541RHLEGLlZIWN8
UTnYMGK3I1TZgmRnXnjnFabk2ZBIFuLk1iXtGJp5MXQft5asbBAbiiwhyMst6pwp
B/ReVMtWkCUDQYo3fJ/z5awdIPfuGTVd1UG1aqPu0y4FpIZgWLjBkiLSUpQWknem
TMtGkSnddLtZ6A1MYiOhOF5ahD6O0YPCVwbB4CDwRI/qd8mPoa4lPLqvMrk4wQiY
VJiLthCEKyUdj8o2Dm9Ab/qff+O4ympUm363nMfabOjFZ1EJAN0UGdYvz8I1O66I
FILZYNwwNAlBGXcbrG7xTRMlQZOGeHFgylhO4M0ppWcRLUUl2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP7OaA+TmXLn/qyMbDVc5+7wx3onMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRmYmMyZmQtYzgzMC0z
MTVkLWFmMjItYmVkMTU5MWQzNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYiUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAW6rgAaM8bnXrRZca3Z2OlgUTJYqvCRaoogAxjVWUyrjJDdIHdmuxcxrV
OXGplZdNdNnIwBGUN7H26xC+fmmxikDviBo63ChartYwb+yt1MVNMXcXJlu/zsi3
mNWjeVPTwz1377z3pZFOYSjAYoH+IZXi+0BCS/eN3YnrU1lv/0jG14fGc34Pekx8
3rNC3OgITW4vAfjwyjqJsYCs8BZgyn+ttxHoLhlfW3yXxXRBc57H4I2uQC0AuWuG
OJahHMkp0Xye8deYeLIHeOQEKDW7F8J4sKwrJqLvB/qFCDqiyk8hB9ICEHQg+tBy
UPgKSRaMDiGEZ3vVL/TxlmdGYxqnFg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:47:03 2026 by rpki-client