Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1da7d09d-545a-3a8d-8863-4356df5602e7.roa
File:                     1da7d09d-545a-3a8d-8863-4356df5602e7.roa (raw, json)
Hash identifier:          w5AH6PSp5V2uTlBcIhBf65qN9hapbgAwv26KZ5GMf28=
Subject key identifier:   29:16:C7:EC:17:BE:50:54:01:6B:99:5F:A6:64:21:1E:4E:A1:39:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862DED443DD494BECA27A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1da7d09d-545a-3a8d-8863-4356df5602e7.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        98.250.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:de:d4:43:dd:49:4b:ec:a2:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=ac615f60-c332-4292-8850-30c69dd2966c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:11:52:a6:3b:ca:cd:40:b8:18:99:50:24:
                    dd:ba:f8:b6:6a:59:1a:5f:fe:20:1a:cd:fc:1d:d0:
                    3e:07:39:73:86:72:6f:12:fb:ef:28:d6:be:61:db:
                    83:9a:0f:3c:ec:90:39:9e:50:3a:92:cf:59:4a:4c:
                    69:77:c5:c8:4a:2d:ba:ac:20:3e:d9:25:c7:3d:39:
                    d3:0e:5a:22:2b:db:12:d5:dc:ee:5c:70:c9:0e:13:
                    f3:db:cf:96:ed:e9:7e:4c:54:e2:a6:23:6e:95:b1:
                    08:68:e7:83:e0:10:48:87:c0:13:d8:03:4d:43:70:
                    7c:5a:ad:a7:af:50:c5:51:05:6e:dd:2e:1d:14:8b:
                    6d:46:30:64:fd:37:13:41:c5:0e:1d:e0:10:7d:3b:
                    a8:09:d3:5c:16:e5:0e:61:6b:b9:f7:21:9b:5d:08:
                    21:69:09:a3:f9:0b:59:e2:c4:db:bf:93:a6:96:29:
                    d3:89:1d:7f:48:58:eb:c3:e7:86:8c:94:50:e1:81:
                    7d:3b:f8:15:62:db:6b:5d:af:78:62:b4:4c:14:1a:
                    20:fc:cf:49:dc:1b:63:88:c1:f0:fa:ad:f3:41:cf:
                    e3:4b:e8:02:0a:87:61:dc:77:d7:4a:c9:a4:b9:fc:
                    17:6c:25:77:6e:9a:b5:d9:a7:b9:29:a0:55:7c:6f:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:16:C7:EC:17:BE:50:54:01:6B:99:5F:A6:64:21:1E:4E:A1:39:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1da7d09d-545a-3a8d-8863-4356df5602e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:7e:af:36:80:19:be:a0:b3:66:71:f2:ab:70:f8:96:f9:
         4e:98:b5:3d:82:0f:ba:60:f6:6e:48:94:20:00:95:92:ba:45:
         57:03:d7:68:81:68:04:b0:de:92:c4:26:33:41:36:66:41:68:
         76:d7:2a:67:1f:55:44:ff:49:f6:fc:ce:35:bc:ff:3f:5a:47:
         d5:b0:3c:54:ee:57:ee:2e:70:83:99:cd:31:ca:be:5a:70:44:
         a5:da:1d:fd:eb:5c:cb:e0:5b:5c:72:c8:e3:ee:d7:4d:4d:56:
         07:36:18:82:41:24:7f:2a:6c:91:2e:1f:b7:0a:77:f4:c9:bc:
         06:fc:69:82:ae:31:e4:3e:d2:2d:83:10:fd:44:f3:98:d4:42:
         c0:76:88:d9:2b:0c:a9:67:16:39:06:c1:fa:23:79:79:d8:ff:
         e2:d5:20:d8:12:e9:6b:37:17:d3:06:0d:2b:60:42:e4:92:a7:
         8d:85:26:62:31:7a:ac:99:a1:2b:2a:9f:6f:1e:e7:21:c4:8c:
         3b:9d:c4:c6:e3:c0:3a:4b:76:88:37:ab:cd:be:5f:6b:ed:5a:
         81:cf:df:12:c4:db:f6:0c:14:aa:40:e4:6c:42:e0:5c:e4:74:
         d5:f2:2b:a1:ee:03:d4:9c:53:39:db:39:9e:7d:fd:2c:62:13:
         0a:d6:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:13:48 2026 by rpki-client