Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0a3c970-d3ae-3dad-ace2-cbd3be658a5e.roa
File:                     f0a3c970-d3ae-3dad-ace2-cbd3be658a5e.roa (raw, json)
Hash identifier:          mC0UObEZeWRSglZ+jufUD9/29jDAzIwO22ZmHnDX1wM=
Subject key identifier:   BD:42:06:76:01:A2:00:FF:9E:28:CE:38:D5:7A:1F:33:46:E9:E4:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF470A37B87049E7C95300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0a3c970-d3ae-3dad-ace2-cbd3be658a5e.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     22258
IP address blocks:        98.251.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:47:0a:37:b8:70:49:e7:c9:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=315b1a8e-5314-408d-92e0-99b590220955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:22:22:34:a5:f8:f7:e0:57:3d:ad:6f:2a:
                    83:32:0d:d5:06:31:d3:d1:2a:05:ce:ba:0f:81:83:
                    03:72:fe:09:08:3d:bb:7e:91:be:35:13:65:52:18:
                    51:9f:4d:b2:78:1b:58:c4:4b:68:79:ef:1d:b6:c5:
                    fb:68:55:d1:1e:d0:fe:d4:1e:a2:48:53:19:00:87:
                    60:16:3a:68:ca:0b:1a:c8:57:c4:77:8e:8d:7f:f7:
                    3d:af:cb:65:0d:11:5e:5d:6b:17:19:5d:4a:a4:68:
                    72:df:0a:83:e0:18:97:17:fd:94:09:46:64:f0:de:
                    d6:b1:c2:25:c3:89:10:22:10:66:73:8f:54:cd:32:
                    1e:da:0e:b3:8c:36:da:ef:f7:e8:2a:2f:c6:eb:ae:
                    30:ea:61:4e:5b:af:6e:05:e6:e7:27:a5:20:fa:61:
                    28:8c:28:7f:79:f1:a7:1b:8e:f5:e2:bc:ce:e7:35:
                    a7:d9:b0:cc:08:35:3e:28:aa:77:1a:41:8a:6c:d1:
                    fc:47:7b:6f:65:13:63:78:c3:62:91:f9:2b:01:18:
                    91:f5:92:75:5d:53:da:11:90:05:f7:73:62:3f:f7:
                    3e:f2:e5:3f:23:2b:a8:5e:c8:f0:dc:6d:8f:ae:17:
                    e9:46:c9:4d:26:ab:a9:3d:20:a9:a5:51:78:b6:4f:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:42:06:76:01:A2:00:FF:9E:28:CE:38:D5:7A:1F:33:46:E9:E4:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0a3c970-d3ae-3dad-ace2-cbd3be658a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:71:69:59:df:8e:39:df:91:2e:f8:5e:8d:a9:91:d7:ce:64:
         fb:89:85:c0:cc:c7:77:df:a5:ad:6d:81:bd:61:04:dd:14:00:
         d3:ba:d1:f7:3d:08:96:ca:93:8f:b4:04:a7:d6:b1:af:74:2b:
         93:52:5b:8c:0a:6f:f7:bc:96:ce:6a:25:5b:e0:41:ef:d3:83:
         65:4d:ca:ee:9f:d3:2c:eb:54:22:02:be:cd:8a:96:02:26:ef:
         9b:1b:f7:96:dd:6e:10:c9:7c:f3:3e:e6:da:e7:fe:d6:50:39:
         de:fb:cc:2b:e2:ea:08:48:9e:c4:13:a9:65:c4:51:d1:a4:11:
         b7:cb:c1:69:54:3e:9c:c2:21:f8:62:f3:bf:fa:21:24:76:65:
         89:62:11:d0:65:0a:a9:4c:fc:76:90:33:7b:3f:29:8c:40:26:
         80:5d:c1:de:27:6c:54:c8:38:ec:d6:c0:dd:9b:f7:25:ba:7d:
         76:6f:e5:c5:29:f3:63:3e:10:41:6d:a5:6c:b8:85:37:b5:0e:
         90:fc:d8:93:bf:c5:88:0d:dd:b9:94:dc:bf:c5:d6:0f:c6:79:
         01:b5:4d:da:67:08:e3:e6:7a:23:b7:00:86:ea:9f:73:60:76:
         61:cb:12:b9:01:01:e8:68:be:77:36:6c:ef:d6:91:28:7c:e1:
         61:fc:4b:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz0cKN7hwSefJUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
MzE1YjFhOGUtNTMxNC00MDhkLTkyZTAtOTliNTkwMjIwOTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOoiIjSl+PfgVz2tbyqDMg3VBjHT0SoFzroP
gYMDcv4JCD27fpG+NRNlUhhRn02yeBtYxEtoee8dtsX7aFXRHtD+1B6iSFMZAIdg
FjpoygsayFfEd46Nf/c9r8tlDRFeXWsXGV1KpGhy3wqD4BiXF/2UCUZk8N7WscIl
w4kQIhBmc49UzTIe2g6zjDba7/foKi/G664w6mFOW69uBebnJ6Ug+mEojCh/efGn
G4714rzO5zWn2bDMCDU+KKp3GkGKbNH8R3tvZRNjeMNikfkrARiR9ZJ1XVPaEZAF
93NiP/c+8uU/IyuoXsjw3G2PrhfpRslNJqupPSCppVF4tk/YdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1CBnYBogD/nijOONV6HzNG6eQJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjBhM2M5NzAtZDNhZS0z
ZGFkLWFjZTItY2JkM2JlNjU4YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvvRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9xaVnfjjnfkS74Xo2pkdfOZPuJhcDMx3ffpa1tgb1hBN0UANO60fc9
CJbKk4+0BKfWsa90K5NSW4wKb/e8ls5qJVvgQe/Tg2VNyu6f0yzrVCICvs2KlgIm
75sb95bdbhDJfPM+5trn/tZQOd77zCvi6ghInsQTqWXEUdGkEbfLwWlUPpzCIfhi
87/6ISR2ZYliEdBlCqlM/HaQM3s/KYxAJoBdwd4nbFTIOOzWwN2b9yW6fXZv5cUp
82M+EEFtpWy4hTe1DpD82JO/xYgN3bmU3L/F1g/GeQG1TdpnCOPmeiO3AIbqn3Ng
dmHLErkBAehovnc2bO/WkSh84WH8S7I=
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:10:36 2026 by rpki-client