Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ae49b1f-e7d5-307e-80df-ed321d3be4e1.roa
File:                     3ae49b1f-e7d5-307e-80df-ed321d3be4e1.roa (raw, json)
Hash identifier:          m8ZTao4aWARUhUQdDUafxdxqgirMycevh1wYE5FT7dM=
Subject key identifier:   8F:D4:B4:EC:0F:5D:F2:46:5D:5D:D7:FE:00:26:09:99:71:CD:52:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584FB3A7F2F77C22C860226371E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ae49b1f-e7d5-307e-80df-ed321d3be4e1.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     33651
IP address blocks:        98.37.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a7:f2:f7:7c:22:c8:60:22:63:71:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=7536fcdf-26d7-4dd6-96a0-277f6dc86ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:91:27:a6:68:7a:93:3b:e7:f4:87:d3:92:ab:
                    85:22:bd:7a:8a:0c:ff:10:cf:63:05:b6:6f:d6:6f:
                    8e:05:51:1b:50:30:4b:33:2b:b8:74:93:96:fb:36:
                    fb:e7:3d:9b:dc:1e:27:ac:26:19:bd:40:12:ee:f3:
                    fc:84:2c:a9:cf:a9:80:54:87:22:64:ea:7a:29:ba:
                    9a:f3:e8:fa:b3:ba:6b:87:70:f2:fa:7f:4c:44:6b:
                    aa:87:6d:e7:24:e6:2c:30:ad:63:1f:65:f8:16:cf:
                    c2:b3:c2:5c:39:28:37:bf:a5:f1:a3:33:54:9b:1e:
                    ef:55:61:0f:9e:0a:23:a5:27:6b:a6:1a:ba:0f:fa:
                    32:59:15:63:30:00:d8:3a:34:0e:30:d7:b0:5b:dd:
                    a5:f9:02:4d:f0:e8:e3:b7:9e:df:fb:3a:c3:07:9d:
                    a4:9a:47:86:1b:dd:05:f5:3f:ed:54:b2:55:e6:ca:
                    f3:ba:57:3d:43:56:7e:ca:85:16:ac:26:96:4b:23:
                    c6:c0:bd:05:90:18:2f:2e:a8:f9:ea:9c:ca:d8:f8:
                    98:f6:3d:48:a7:95:22:a7:ff:68:10:09:39:56:1f:
                    27:bb:19:ab:47:60:bf:1c:1e:44:71:3b:d2:aa:3a:
                    68:08:0f:82:24:f5:9e:ef:2b:b1:fe:6f:6c:8a:de:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:B4:EC:0F:5D:F2:46:5D:5D:D7:FE:00:26:09:99:71:CD:52:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ae49b1f-e7d5-307e-80df-ed321d3be4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.37.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:0d:39:14:43:36:a4:5d:f6:78:2d:2e:d8:18:7e:fb:4a:
         e8:68:d4:29:e3:64:b1:77:0c:5a:2b:e5:5a:95:ae:da:71:8f:
         18:8d:6e:19:9d:e1:6d:d6:91:51:7d:db:19:ce:07:47:e3:4c:
         63:76:6b:88:40:5b:f2:e7:a0:23:06:17:38:3d:a6:d2:d1:c9:
         97:92:9e:08:2e:09:65:16:0e:07:72:15:78:b9:9c:41:eb:00:
         ab:14:4b:6d:c2:0a:76:4a:ec:93:48:16:11:b4:27:35:da:60:
         73:49:bc:27:7e:5f:e6:ac:ae:86:ca:7a:a8:cd:d5:73:d5:95:
         e1:1b:0c:5a:e2:01:55:fc:5a:d0:06:fe:39:4c:e5:96:e4:3d:
         87:81:e8:d0:f9:24:33:a3:78:ab:5f:ad:e3:5a:58:a8:55:aa:
         a6:ed:3f:68:08:5d:7e:03:d1:74:29:f6:04:38:24:7c:de:86:
         c1:52:e2:52:71:af:6d:c0:89:14:13:8f:73:29:ca:19:34:0b:
         74:da:1b:68:13:d3:21:af:ac:e6:94:03:97:e8:f7:73:46:b4:
         db:31:4b:6b:c3:1c:c0:97:0b:3f:ce:1a:3f:3f:42:7d:9c:73:
         14:27:03:3c:9e:ab:02:20:ec:e5:10:e9:4e:30:53:67:31:55:
         5c:62:97:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zp/L3fCLIYCJjceAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk
NzUzNmZjZGYtMjZkNy00ZGQ2LTk2YTAtMjc3ZjZkYzg2YWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Enpmh6kzvn9IfTkquFIr16igz/EM9jBbZv
1m+OBVEbUDBLMyu4dJOW+zb75z2b3B4nrCYZvUAS7vP8hCypz6mAVIciZOp6Kbqa
8+j6s7prh3Dy+n9MRGuqh23nJOYsMK1jH2X4Fs/Cs8JcOSg3v6XxozNUmx7vVWEP
ngojpSdrphq6D/oyWRVjMADYOjQOMNewW92l+QJN8Ojjt57f+zrDB52kmkeGG90F
9T/tVLJV5srzulc9Q1Z+yoUWrCaWSyPGwL0FkBgvLqj56pzK2PiY9j1Ip5Uip/9o
EAk5Vh8nuxmrR2C/HB5EcTvSqjpoCA+CJPWe7yux/m9sit5sQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/UtOwPXfJGXV3X/gAmCZlxzVLjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FlNDliMWYtZTdkNS0z
MDdlLTgwZGYtZWQzMjFkM2JlNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiWWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpvDTkUQzakXfZ4LS7YGH77Suho1CnjZLF3DFor5VqVrtpxjxiNbhmd
4W3WkVF92xnOB0fjTGN2a4hAW/LnoCMGFzg9ptLRyZeSngguCWUWDgdyFXi5nEHr
AKsUS23CCnZK7JNIFhG0JzXaYHNJvCd+X+asrobKeqjN1XPVleEbDFriAVX8WtAG
/jlM5ZbkPYeB6ND5JDOjeKtfreNaWKhVqqbtP2gIXX4D0XQp9gQ4JHzehsFS4lJx
r23AiRQTj3Mpyhk0C3TaG2gT0yGvrOaUA5fo93NGtNsxS2vDHMCXCz/OGj8/Qn2c
cxQnAzyeqwIg7OUQ6U4wU2cxVVxilyQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:23 2026 by rpki-client