Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2c3352-74c1-3a16-a694-2f0e619cb99d.roa
File:                     2e2c3352-74c1-3a16-a694-2f0e619cb99d.roa (raw, json)
Hash identifier:          F6bokdH1RSOhvJjf616qsYJQfGNmy8eyydTEoB6L+/k=
Subject key identifier:   CA:0D:B2:F8:01:2A:63:AF:F5:EB:2F:90:2B:FC:CB:F8:BF:F6:99:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981FD56D9F163455D854000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2c3352-74c1-3a16-a694-2f0e619cb99d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        98.61.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:fd:56:d9:f1:63:45:5d:85:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=eb8a7e2e-fa0a-4552-9207-9f2dba88ce1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:23:a0:d0:5f:ed:1a:bf:6c:cd:fc:f3:18:
                    82:d0:63:80:86:f5:3c:0c:f1:1f:84:3d:fe:79:0d:
                    1d:71:f6:cc:f5:69:90:52:31:ad:69:9b:48:e5:0e:
                    70:8d:f4:ac:61:f1:2e:ac:8c:fb:f8:27:2a:26:50:
                    49:01:56:51:d5:80:3e:ae:f9:ad:ac:6f:a9:2e:4c:
                    c9:a8:3a:95:ee:96:89:9c:78:fd:94:87:70:2d:08:
                    92:b6:10:6a:67:00:7d:98:6a:55:34:71:d4:69:e0:
                    48:0a:d3:c1:00:24:46:18:16:72:4b:4c:87:21:9d:
                    f5:56:8b:00:07:a2:1c:64:c3:75:45:db:94:aa:07:
                    56:96:81:ad:e3:a7:3d:93:5b:53:62:22:17:31:48:
                    51:72:21:aa:f1:12:ca:68:f0:62:6b:9d:f5:39:fd:
                    66:99:13:fd:57:67:7e:f1:a5:34:26:49:90:63:a2:
                    36:19:36:41:e8:c1:ba:1e:5b:d1:2d:7e:d0:66:cc:
                    db:f4:a2:fd:c5:f1:61:20:95:2e:d3:98:d3:f1:96:
                    e2:7a:7f:ee:0f:ce:4d:a1:a5:8c:ce:fb:83:e4:be:
                    7e:13:57:2f:db:3e:28:fc:39:28:70:f3:09:08:3c:
                    fa:49:4a:b4:7d:3a:a6:46:07:24:11:95:3d:c8:7f:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0D:B2:F8:01:2A:63:AF:F5:EB:2F:90:2B:FC:CB:F8:BF:F6:99:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e2c3352-74c1-3a16-a694-2f0e619cb99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:c4:2b:fe:37:77:d1:ae:53:84:67:6a:ab:15:cf:3b:90:84:
         53:9b:ed:68:65:a7:14:d4:a2:8d:43:5e:b7:3b:2c:ba:e0:06:
         29:b3:4c:a3:31:6f:9b:18:76:cd:75:bc:83:76:eb:c5:f7:c3:
         01:d4:79:b2:4d:a4:d3:e2:e9:5e:12:2b:1f:61:57:6b:13:3b:
         92:ba:55:13:c7:f3:fa:12:b3:a0:ca:c8:28:2d:6e:8b:9a:d2:
         93:36:69:75:4b:42:09:cb:a0:89:de:63:c8:03:42:b9:3a:d3:
         4c:50:e8:1b:e5:86:24:b4:68:0c:95:79:57:36:1b:fd:6c:7f:
         c1:b2:f1:e2:52:4f:79:a2:d0:af:4f:b2:35:bb:44:5d:a4:39:
         f2:19:8c:73:47:d1:ce:86:a9:af:56:f5:c2:c3:a2:95:9b:13:
         5b:10:9a:81:ec:9d:af:81:ae:b3:e5:30:d3:21:76:5c:d2:12:
         69:e1:10:b2:a0:0b:68:8a:e1:fd:fe:b7:92:97:e4:6d:bb:41:
         3a:1f:ea:4d:8f:58:45:cf:ca:35:70:b3:ea:65:19:0f:77:3c:
         88:ff:03:d2:bf:54:94:e3:cc:a4:b5:cd:5c:77:5a:20:ad:9d:
         90:a7:c0:04:df:91:ff:de:d9:a5:a4:3a:43:fa:17:6f:1d:93:
         e3:b4:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:32:38 2026 by rpki-client