Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04702e17-685c-3cde-aff0-4a1bed8ed4a6.roa
File:                     04702e17-685c-3cde-aff0-4a1bed8ed4a6.roa (raw, json)
Hash identifier:          Lf1X1u9kKTCVURC7pZXFYRGvBfwUXkth9cH0xgQn6Qc=
Subject key identifier:   8E:C7:F1:22:E1:78:2A:17:2A:7C:8F:D9:50:22:A8:38:95:F4:DD:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3E68C7C9B0394DB2B66240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04702e17-685c-3cde-aff0-4a1bed8ed4a6.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        98.248.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:68:c7:c9:b0:39:4d:b2:b6:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=aed83987-cb37-467f-8d90-1b0de4dadb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:6c:42:6a:bb:fc:4d:67:5c:db:46:e2:aa:
                    ab:b0:1e:61:42:b9:12:c0:b3:c9:89:15:b0:b8:88:
                    82:65:bc:dd:5e:e6:76:79:e6:f6:9f:c3:3a:25:f6:
                    17:e2:4a:1e:a5:29:76:82:d0:2c:b5:7f:a3:5a:26:
                    d8:f8:58:36:69:a6:29:a0:be:ca:99:70:ad:cb:8c:
                    b7:1e:db:86:fa:1e:f3:48:5c:81:c1:42:99:4e:8f:
                    a6:ba:49:53:11:be:5e:04:09:f6:63:43:54:be:a2:
                    93:d5:13:24:a7:52:66:f4:e3:17:c4:82:9d:9b:ae:
                    7a:16:e7:61:ec:2b:b3:22:55:0b:d7:4f:c7:8d:0b:
                    e7:e0:44:d3:d0:2e:81:9d:b9:d8:d9:22:33:db:b0:
                    fa:53:b0:5a:1e:88:6f:20:91:c7:15:ee:3d:8f:c8:
                    19:52:61:b6:fc:74:61:db:90:19:ea:eb:2b:51:7f:
                    86:6e:a2:e7:e0:0a:87:2e:36:e0:ea:47:0b:1b:0f:
                    2c:52:1f:b6:7e:90:51:1e:33:b4:04:a5:f3:93:51:
                    36:b5:92:9d:40:47:78:52:85:f7:36:88:62:7c:c0:
                    9d:d1:dd:2c:38:5c:45:fc:61:9a:7b:15:44:28:a0:
                    c7:72:72:67:f4:9c:20:98:e0:73:98:e2:4c:89:78:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C7:F1:22:E1:78:2A:17:2A:7C:8F:D9:50:22:A8:38:95:F4:DD:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04702e17-685c-3cde-aff0-4a1bed8ed4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.248.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:bb:11:6d:aa:5f:af:fd:90:21:5e:4b:c9:67:a9:0c:37:
         d2:1a:75:10:37:eb:ea:fc:03:2a:5b:2c:48:b0:66:46:4f:f1:
         5f:eb:b3:c6:ea:58:e3:e7:04:58:6a:56:d4:e0:19:9f:e0:ed:
         47:9d:2c:5f:57:81:db:9d:7a:20:9f:62:a2:36:38:4a:d5:95:
         13:8d:70:aa:9f:e7:eb:17:14:89:40:45:b8:5d:06:88:4c:8c:
         7a:47:73:c4:e0:f0:64:9d:9f:13:1e:be:b4:17:9c:65:21:84:
         fa:e4:fa:71:e9:d6:b2:72:5f:9e:03:81:37:9e:23:cd:44:f1:
         11:a6:ab:e7:3e:8b:93:a2:e1:7c:98:2d:88:22:d4:79:ac:1d:
         00:64:ea:4b:51:68:06:2a:1a:25:b5:95:91:1c:20:01:83:5f:
         7f:b9:25:d3:f5:02:55:35:13:eb:d0:8d:ed:cf:be:5d:6c:68:
         63:f7:45:db:83:9b:33:22:f7:bc:79:bf:f8:de:b9:2c:46:e4:
         3c:78:33:c7:3f:93:f0:06:2a:09:db:c0:17:e9:b8:31:22:1e:
         7b:96:66:3e:4f:c7:4d:69:01:df:ae:8d:70:d1:2a:a9:35:d0:
         4e:fe:2e:4b:d0:e6:00:74:40:b4:e8:97:d2:87:65:cb:26:d1:
         40:12:4e:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPmjHybA5TbK2YkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
YWVkODM5ODctY2IzNy00NjdmLThkOTAtMWIwZGU0ZGFkYjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiZsQmq7/E1nXNtG4qqrsB5hQrkSwLPJiRWw
uIiCZbzdXuZ2eeb2n8M6JfYX4koepSl2gtAstX+jWibY+Fg2aaYpoL7KmXCty4y3
HtuG+h7zSFyBwUKZTo+muklTEb5eBAn2Y0NUvqKT1RMkp1Jm9OMXxIKdm656Fudh
7CuzIlUL10/HjQvn4ETT0C6BnbnY2SIz27D6U7BaHohvIJHHFe49j8gZUmG2/HRh
25AZ6usrUX+GbqLn4AqHLjbg6kcLGw8sUh+2fpBRHjO0BKXzk1E2tZKdQEd4UoX3
NohifMCd0d0sOFxF/GGaexVEKKDHcnJn9JwgmOBzmOJMiXg1XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7H8SLheCoXKnyP2VAiqDiV9N2WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ3MDJlMTctNjg1Yy0z
Y2RlLWFmZjAtNGExYmVkOGVkNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvj6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACn7uxFtql+v/ZAhXkvJZ6kMN9IadRA36+r8AypbLEiwZkZP8V/rs8bq
WOPnBFhqVtTgGZ/g7UedLF9XgdudeiCfYqI2OErVlRONcKqf5+sXFIlARbhdBohM
jHpHc8Tg8GSdnxMevrQXnGUhhPrk+nHp1rJyX54DgTeeI81E8RGmq+c+i5Oi4XyY
LYgi1HmsHQBk6ktRaAYqGiW1lZEcIAGDX3+5JdP1AlU1E+vQje3Pvl1saGP3RduD
mzMi97x5v/jeuSxG5Dx4M8c/k/AGKgnbwBfpuDEiHnuWZj5Px01pAd+ujXDRKqk1
0E7+LkvQ5gB0QLTol9KHZcsm0UASTmE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:35 2026 by rpki-client