Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3967954a-7f15-3ffa-ab5b-a9a0a4660120.roa
File:                     3967954a-7f15-3ffa-ab5b-a9a0a4660120.roa (raw, json)
Hash identifier:          ZTL7KPEzEXaurbHbbSp6FBhVseI71aiDxS/HK4zaC9U=
Subject key identifier:   BA:8F:11:2B:D5:59:2A:D9:95:39:E4:76:49:0B:AE:1F:F7:C9:9B:A7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584EAA51BB1DC05581D2E8106280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3967954a-7f15-3ffa-ab5b-a9a0a4660120.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        34.98.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:bb:1d:c0:55:81:d2:e8:10:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=4c27c447-0c49-4952-b31b-bdbcb67be665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:af:cd:33:b3:96:cd:da:6d:d3:e2:b8:a4:
                    c6:91:25:d9:c9:61:6d:54:6e:de:c7:71:1a:90:fc:
                    1b:84:2f:b1:6a:31:33:d6:3f:7c:48:c5:9c:29:9d:
                    78:95:ba:b9:f3:06:00:6c:8f:6f:39:6a:6b:b8:ea:
                    5b:48:c9:d3:6d:5a:24:73:d3:98:28:b0:8c:a3:9c:
                    82:2b:19:f7:56:93:2a:68:cf:75:e4:1d:ab:9a:b0:
                    22:c2:4b:36:04:9d:37:f9:61:93:90:b4:e9:8a:1d:
                    c4:45:2f:13:9d:93:60:55:91:59:59:76:4c:01:7b:
                    4e:a6:ee:cb:0f:71:61:3f:1e:4e:ec:ab:5e:47:94:
                    f4:a9:0a:42:4e:74:e4:3f:d0:45:be:6c:b7:bd:69:
                    96:82:0a:4e:9a:7e:49:17:ed:40:44:c3:9d:90:9a:
                    84:4a:dc:e9:25:a5:e2:9d:09:99:f4:61:0c:e5:3a:
                    9c:bc:5a:92:33:75:97:34:18:a6:7a:f4:99:3b:d0:
                    c2:ae:40:f9:08:11:70:aa:03:30:ac:5d:80:ff:37:
                    1e:92:7f:57:b6:28:d7:a6:0b:cb:0f:21:ca:02:6f:
                    8b:0c:89:69:4f:4b:8c:71:2f:45:c6:5e:0a:4f:5b:
                    7e:f1:ae:24:82:32:62:81:91:bd:87:ec:ab:58:0b:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:11:2B:D5:59:2A:D9:95:39:E4:76:49:0B:AE:1F:F7:C9:9B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3967954a-7f15-3ffa-ab5b-a9a0a4660120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:27:e0:a2:d8:47:7e:26:01:eb:8b:55:cb:8b:2f:68:23:7c:
         4d:83:53:81:f4:df:09:f9:77:9a:6c:62:30:9d:44:eb:8c:fc:
         6d:5a:1e:1c:a0:99:ec:a1:91:18:81:c0:6d:a3:5c:35:58:91:
         ab:e0:6e:8f:18:dd:21:b3:df:bc:4c:cc:6d:18:52:de:ef:e8:
         bc:0e:03:96:03:03:0f:d2:1e:5c:28:16:e5:2e:66:ec:58:d7:
         95:b3:f8:8b:d4:12:a5:6c:dc:dc:62:2a:b4:b5:6f:55:87:e6:
         69:6c:a3:ae:5b:6d:51:1f:6b:33:97:df:8e:fc:b3:c6:c1:68:
         4a:c1:6e:ea:6c:61:26:56:f1:1a:2a:5a:07:9e:9e:b6:e9:94:
         eb:d6:94:cf:d6:a6:1f:72:87:30:93:fd:de:b2:eb:a5:58:1a:
         15:4f:45:52:ed:1b:08:53:e7:73:e0:46:07:b0:90:dc:a1:0f:
         76:c3:d2:78:e1:c7:a2:33:ee:4e:e8:da:61:e5:5e:cb:a4:f6:
         67:b5:2a:5b:e4:b8:24:2d:be:01:ab:00:03:e7:ad:e3:7f:b1:
         5a:0b:ca:66:3f:76:3c:09:ff:0d:97:58:a4:47:1f:de:3b:32:
         01:16:08:37:08:7c:ef:f2:d1:b9:a4:a3:f4:48:15:d7:04:c6:
         d7:ec:7d:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUbsdwFWB0ugQYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
NGMyN2M0NDctMGM0OS00OTUyLWIzMWItYmRiY2I2N2JlNjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFmvzTOzls3abdPiuKTGkSXZyWFtVG7ex3Ea
kPwbhC+xajEz1j98SMWcKZ14lbq58wYAbI9vOWpruOpbSMnTbVokc9OYKLCMo5yC
Kxn3VpMqaM915B2rmrAiwks2BJ03+WGTkLTpih3ERS8TnZNgVZFZWXZMAXtOpu7L
D3FhPx5O7KteR5T0qQpCTnTkP9BFvmy3vWmWggpOmn5JF+1ARMOdkJqEStzpJaXi
nQmZ9GEM5TqcvFqSM3WXNBimevSZO9DCrkD5CBFwqgMwrF2A/zcekn9XtijXpgvL
DyHKAm+LDIlpT0uMcS9Fxl4KT1t+8a4kgjJigZG9h+yrWAvLJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqPESvVWSrZlTnkdkkLrh/3yZunMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzk2Nzk1NGEtN2YxNS0z
ZmZhLWFiNWItYTlhMGE0NjYwMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImKTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcn4KLYR34mAeuLVcuLL2gjfE2DU4H03wn5d5psYjCdROuM/G1aHhyg
meyhkRiBwG2jXDVYkavgbo8Y3SGz37xMzG0YUt7v6LwOA5YDAw/SHlwoFuUuZuxY
15Wz+IvUEqVs3NxiKrS1b1WH5mlso65bbVEfazOX3478s8bBaErBbupsYSZW8Roq
WgeenrbplOvWlM/Wph9yhzCT/d6y66VYGhVPRVLtGwhT53PgRgewkNyhD3bD0njh
x6Iz7k7o2mHlXsuk9me1KlvkuCQtvgGrAAPnreN/sVoLymY/djwJ/w2XWKRHH947
MgEWCDcIfO/y0bmko/RIFdcExtfsfdE=
-----END CERTIFICATE-----
Generated at Sat Aug 8 01:53:35 2026 by rpki-client