Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61eb0819-24be-37d8-926c-80c46cfd88e2.roa
File:                     61eb0819-24be-37d8-926c-80c46cfd88e2.roa (raw, json)
Hash identifier:          JegLQCVH8i1rv07Keq0w4qJ8V6IFcXH7ZThKKSPjvrA=
Subject key identifier:   40:E4:3C:CC:01:C1:D9:AF:03:E9:55:EA:F4:48:17:84:D3:4F:BE:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86472207FA8F4A23F3D0500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61eb0819-24be-37d8-926c-80c46cfd88e2.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        98.44.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:72:20:7f:a8:f4:a2:3f:3d:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=1a42029d-9881-4a73-be53-187e4c325469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:d8:1b:63:a5:7f:e4:3e:02:10:e5:73:13:
                    2c:e9:99:a0:34:cf:34:8e:5d:4f:34:2b:ce:4d:b5:
                    8c:10:d2:33:b6:70:86:fe:ae:00:ea:49:af:90:62:
                    ac:20:e0:eb:8d:00:75:c1:84:92:94:17:dd:b3:e4:
                    ce:f8:2f:53:7b:b6:3b:a4:f6:c1:fd:43:1a:d6:62:
                    04:f5:e7:28:25:c5:0a:96:36:e0:b5:e0:f9:7a:3a:
                    07:6d:95:94:88:59:42:68:51:9a:7e:98:32:03:7b:
                    47:28:6e:b6:ec:2b:55:cc:66:4d:0d:fd:a4:86:7a:
                    fd:a0:be:9e:59:84:a5:11:dc:8b:62:08:eb:ba:b9:
                    c8:36:db:7c:29:38:e1:52:7b:e4:e4:06:a8:a1:74:
                    de:d4:53:1f:05:f6:fb:08:7a:2b:60:46:9c:bd:61:
                    0d:0d:66:4c:b6:b2:39:3c:28:12:a8:dd:9b:8e:c5:
                    f4:f3:d2:b0:53:b5:21:50:88:27:68:dc:eb:4f:4d:
                    20:43:28:ca:5d:f3:2c:2e:b9:5c:94:64:9f:82:a2:
                    01:53:52:ac:81:c5:16:d4:96:2a:62:4c:f2:9b:63:
                    b4:cc:5b:65:86:b1:67:c0:ad:2b:66:2c:40:a1:ca:
                    7c:7e:a8:0e:2e:91:c2:72:d9:91:29:f7:f8:85:14:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E4:3C:CC:01:C1:D9:AF:03:E9:55:EA:F4:48:17:84:D3:4F:BE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61eb0819-24be-37d8-926c-80c46cfd88e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.44.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:df:1b:4a:3c:c0:04:56:78:ab:c4:da:70:63:70:09:47:85:
         b8:7e:44:0a:fb:8b:02:0f:40:93:32:10:85:19:9d:25:9c:cc:
         80:a7:f8:1d:a8:80:8d:40:28:f6:52:56:70:77:06:dc:68:9d:
         5c:d0:4f:39:bf:f6:4b:43:52:94:14:2b:b3:b8:ed:6b:ec:08:
         97:43:81:d2:ae:59:00:b9:04:de:cf:c1:17:a4:d3:6a:db:8b:
         b2:cf:44:34:14:34:f8:40:6d:5e:71:01:35:66:a6:52:11:12:
         f9:53:81:fb:6b:73:b2:0f:ab:33:7a:22:41:ed:f4:21:66:cd:
         58:36:28:ff:07:18:20:31:2d:eb:af:a7:07:d0:a3:dc:18:00:
         b3:f0:54:88:b3:1a:e0:90:98:03:ac:25:85:87:6f:99:48:c9:
         95:a7:17:8c:7b:61:0e:5b:af:0e:17:08:1d:a0:2b:47:e3:ce:
         ef:58:81:dd:d9:0c:7d:38:a6:6e:c7:8d:73:6a:8d:c2:13:c7:
         c0:bd:78:38:24:3a:3d:12:32:34:45:33:de:1d:ce:59:23:d0:
         31:0b:f0:9f:1e:2d:d6:d1:49:71:3a:81:80:e2:2f:c8:4e:4d:
         0d:32:99:5b:fa:a9:f5:29:2e:81:1a:f1:3a:c6:23:5f:70:1f:
         cb:d3:74:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZHIgf6j0oj89BQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
MWE0MjAyOWQtOTg4MS00YTczLWJlNTMtMTg3ZTRjMzI1NDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSrYG2Olf+Q+AhDlcxMs6ZmgNM80jl1PNCvO
TbWMENIztnCG/q4A6kmvkGKsIODrjQB1wYSSlBfds+TO+C9Te7Y7pPbB/UMa1mIE
9ecoJcUKljbgteD5ejoHbZWUiFlCaFGafpgyA3tHKG627CtVzGZNDf2khnr9oL6e
WYSlEdyLYgjrurnINtt8KTjhUnvk5AaooXTe1FMfBfb7CHorYEacvWENDWZMtrI5
PCgSqN2bjsX089KwU7UhUIgnaNzrT00gQyjKXfMsLrlclGSfgqIBU1KsgcUW1JYq
Ykzym2O0zFtlhrFnwK0rZixAocp8fqgOLpHCctmRKff4hRTh6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDkPMwBwdmvA+lV6vRIF4TTT75oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjFlYjA4MTktMjRiZS0z
N2Q4LTkyNmMtODBjNDZjZmQ4OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYix2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALHfG0o8wARWeKvE2nBjcAlHhbh+RAr7iwIPQJMyEIUZnSWczICn+B2o
gI1AKPZSVnB3BtxonVzQTzm/9ktDUpQUK7O47WvsCJdDgdKuWQC5BN7PwRek02rb
i7LPRDQUNPhAbV5xATVmplIREvlTgftrc7IPqzN6IkHt9CFmzVg2KP8HGCAxLeuv
pwfQo9wYALPwVIizGuCQmAOsJYWHb5lIyZWnF4x7YQ5brw4XCB2gK0fjzu9Ygd3Z
DH04pm7HjXNqjcITx8C9eDgkOj0SMjRFM94dzlkj0DEL8J8eLdbRSXE6gYDiL8hO
TQ0ymVv6qfUpLoEa8TrGI19wH8vTdF4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:22:55 2026 by rpki-client