Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5bb1d18f-7433-33b5-9315-377f669a0d06.roa
File:                     5bb1d18f-7433-33b5-9315-377f669a0d06.roa (raw, json)
Hash identifier:          rvPQPUhEejPHdBTxHZAPSpy9jDspFRnuDAhPIAI8YJc=
Subject key identifier:   59:78:5B:DA:15:EA:F4:06:4C:BE:A2:BF:5F:34:54:73:F0:11:63:B2
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F549D565FB6371314697B0664
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5bb1d18f-7433-33b5-9315-377f669a0d06.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396253
IP address blocks:        149.19.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:56:5f:b6:37:13:14:69:7b:06:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=0c90f9cd-e310-4f58-8aca-08854545590a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:0e:f3:70:59:4f:e4:19:f6:d7:75:10:00:
                    0b:3f:5e:45:28:19:81:fb:3e:62:df:cb:51:2e:03:
                    9b:2b:79:d5:85:78:e1:34:ca:c1:3c:85:9a:ff:11:
                    0f:3f:b9:02:94:98:2c:32:c6:fc:a6:03:96:ff:bc:
                    af:81:98:bc:60:50:37:0e:82:5f:cc:14:79:58:24:
                    d7:d1:ec:c6:53:45:2b:cb:3d:33:9f:b1:97:e8:da:
                    c6:07:18:a1:f9:a6:a1:2c:c1:9b:f2:c4:a8:4c:77:
                    35:06:3e:89:2d:76:55:6d:50:b0:29:ab:cc:e2:f4:
                    fe:10:5d:20:eb:44:b6:a6:aa:19:91:9f:0d:0c:62:
                    54:14:f5:70:09:0c:51:09:28:a2:eb:f8:48:fb:34:
                    80:6e:9a:5d:a5:a2:e8:11:4b:b6:8a:44:1d:36:dd:
                    94:a2:53:e0:63:67:6e:08:11:d1:85:d6:a9:ac:09:
                    f2:57:1f:00:9b:62:f8:08:2e:c8:26:0e:89:02:5e:
                    26:73:5f:cb:99:0e:97:dd:fe:02:4d:77:59:b9:a7:
                    79:68:13:f4:27:ee:1f:c7:6f:ee:85:b8:6c:f8:cf:
                    ca:75:08:89:7f:41:aa:82:b2:0b:bf:6a:35:a4:f4:
                    5c:fa:1b:7f:30:bd:4f:aa:85:6a:18:b9:9d:5d:a4:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:78:5B:DA:15:EA:F4:06:4C:BE:A2:BF:5F:34:54:73:F0:11:63:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5bb1d18f-7433-33b5-9315-377f669a0d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:93:99:c9:c6:1d:64:d4:f8:7c:e3:1b:99:a2:d9:55:0b:
         10:98:fd:49:63:99:07:f6:04:c1:a0:8e:d3:ce:c6:29:32:df:
         fb:c7:3a:c4:db:b7:37:9b:fc:26:ae:12:f6:8c:7a:86:8f:27:
         a2:c2:3b:e7:3d:c4:00:a0:b5:fa:c4:10:eb:02:1c:59:7a:a3:
         74:a5:c0:89:fc:56:2c:32:7b:f1:5c:95:3e:78:81:c2:fc:90:
         64:99:94:5b:e1:06:b8:9d:5a:f1:6f:73:8e:96:97:6f:e5:62:
         a5:c9:f3:bc:7f:28:fb:75:0c:d0:5f:d7:2e:9a:47:bb:00:17:
         4f:b6:22:51:e1:9e:5d:90:72:c8:2c:cd:f3:8e:52:0f:60:80:
         a3:e3:11:42:de:a6:69:1e:c0:0a:b1:f8:0e:f0:ea:19:15:15:
         23:13:a6:53:bd:ac:4c:ee:0b:dc:39:cb:99:79:34:4b:ce:1c:
         67:7e:05:02:43:79:e3:de:52:a3:ae:c3:cf:3e:cb:b8:f5:ab:
         2a:57:dd:ab:3c:37:15:65:90:16:59:f7:12:8b:51:43:5a:2f:
         51:50:4b:4a:65:42:bf:37:70:40:2b:a8:22:b6:a5:7c:4f:6d:
         11:d1:5e:73:26:33:a4:2c:70:7a:07:61:e8:c3:2f:6f:c4:fd:
         88:14:f9:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVZftjcTFGl7BmQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MGM5MGY5Y2QtZTMxMC00ZjU4LThhY2EtMDg4NTQ1NDU1OTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+wO83BZT+QZ9td1EAALP15FKBmB+z5i38tR
LgObK3nVhXjhNMrBPIWa/xEPP7kClJgsMsb8pgOW/7yvgZi8YFA3DoJfzBR5WCTX
0ezGU0Uryz0zn7GX6NrGBxih+aahLMGb8sSoTHc1Bj6JLXZVbVCwKavM4vT+EF0g
60S2pqoZkZ8NDGJUFPVwCQxRCSii6/hI+zSAbppdpaLoEUu2ikQdNt2UolPgY2du
CBHRhdaprAnyVx8Am2L4CC7IJg6JAl4mc1/LmQ6X3f4CTXdZuad5aBP0J+4fx2/u
hbhs+M/KdQiJf0GqgrILv2o1pPRc+ht/ML1PqoVqGLmdXaQiqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFl4W9oV6vQGTL6iv180VHPwEWOyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNWJiMWQxOGYtNzQzMy0z
M2I1LTkzMTUtMzc3ZjY2OWEwZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtDk5nJxh1k1Ph84xuZotlVCxCY/UljmQf2BMGgjtPOxiky3/vHOsTb
tzeb/CauEvaMeoaPJ6LCO+c9xACgtfrEEOsCHFl6o3SlwIn8Viwye/FclT54gcL8
kGSZlFvhBridWvFvc46Wl2/lYqXJ87x/KPt1DNBf1y6aR7sAF0+2IlHhnl2Qcsgs
zfOOUg9ggKPjEULepmkewAqx+A7w6hkVFSMTplO9rEzuC9w5y5l5NEvOHGd+BQJD
eePeUqOuw88+y7j1qypX3as8NxVlkBZZ9xKLUUNaL1FQS0plQr83cEArqCK2pXxP
bRHRXnMmM6QscHoHYejDL2/E/YgU+fE=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:10:00 2026 by rpki-client