Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa
File:                     95e25ce4-46b4-3dc7-8d32-675c222409ef.roa (raw, json)
Hash identifier:          fo+Dp/PgWj9frQkGMfw1SP4MRiovDWSDmsICNwbsCBg=
Subject key identifier:   C3:08:F5:E1:50:E5:AC:27:23:1F:6B:CC:75:E6:DB:AA:08:6F:D8:78
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584EB2B1ACAB28DBCF20BEE89B00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     137922
IP address blocks:        149.19.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ac:ab:28:db:cf:20:be:e8:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=ab2f5514-8df1-49b9-b623-edc590e4566f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:f2:0d:e0:3c:58:70:ad:ef:d6:3b:f1:99:
                    86:6b:cf:4b:a0:b3:cf:6c:8b:ec:46:65:45:d9:dd:
                    7b:bc:8d:ce:21:06:19:4c:7f:b1:08:0b:f0:47:17:
                    b0:d0:18:23:f0:22:07:2b:c2:45:7b:1f:d3:39:6d:
                    6d:56:0e:91:b3:6d:5b:42:85:a0:66:a7:dd:68:6f:
                    8d:17:c7:52:9e:f6:8d:a8:56:d8:1f:9e:c8:6b:23:
                    ab:4b:32:f8:ad:1c:41:ce:35:34:ec:8e:f9:5f:3d:
                    4a:3c:3f:3b:f7:38:25:ea:fc:0a:d1:7b:7d:d5:05:
                    ab:f7:60:cc:f8:3a:21:e8:e7:49:22:21:37:c9:b7:
                    f9:7b:9b:68:13:ad:ea:05:77:0f:4b:1b:54:c2:41:
                    97:98:8e:e6:6b:57:b5:29:91:9e:a5:af:45:a5:b9:
                    a2:87:0a:0a:b3:1b:31:65:4f:30:13:98:6d:88:8d:
                    0c:3f:9a:f0:ba:87:66:18:77:e3:59:ba:a5:a2:d3:
                    7b:de:3b:2c:4d:de:d5:3b:27:e0:41:40:94:05:e0:
                    c6:4b:3a:75:a0:02:08:0c:56:44:08:1a:95:90:6b:
                    6b:14:44:a4:10:71:a6:6e:92:16:7e:bf:c5:0b:53:
                    97:ef:d6:b6:80:93:41:53:7b:52:34:3b:ce:4d:cb:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:08:F5:E1:50:E5:AC:27:23:1F:6B:CC:75:E6:DB:AA:08:6F:D8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c2:10:b3:3c:6d:bb:4e:2f:ad:7f:c4:08:04:94:e4:c2:45:
         c6:ae:12:d0:08:98:7c:d8:40:30:e2:96:58:b6:0c:50:cf:a3:
         a8:9e:57:41:15:ab:4c:4c:53:c9:7e:9b:81:48:07:e2:17:6b:
         65:8b:bb:2c:78:b5:67:f3:f8:35:af:a0:cf:36:6b:0e:aa:ea:
         61:71:cf:eb:02:99:97:5c:e6:0d:f2:e6:b2:7c:ca:91:cd:be:
         28:f4:5b:43:24:18:94:f9:7a:31:31:10:d9:e4:bf:d1:cb:27:
         8c:c0:99:be:a7:74:3c:1d:d0:e0:8b:d6:b1:bc:0b:d2:05:2f:
         c1:44:01:38:2c:8d:81:3a:22:9c:06:cd:8d:1d:35:fe:df:d9:
         bc:b0:d5:83:4d:a4:24:97:70:10:61:6d:dc:7e:48:2b:1d:27:
         88:e3:9e:45:e2:78:ae:5b:71:fd:01:5c:1a:a2:b2:75:aa:80:
         79:50:c8:c9:b7:20:47:25:1a:bc:cc:d3:f1:97:1f:c6:c3:14:
         6a:e3:3c:51:a0:9b:de:c2:b2:c3:a3:fa:8a:01:8f:83:66:e4:
         12:be:4c:b6:ac:19:3c:63:8e:f2:c7:1c:fb:ee:f3:8c:5d:9c:
         f1:c8:86:fc:69:9c:cd:e7:df:92:ac:a8:6b:0c:5a:17:75:0b:
         97:e2:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:24:34 2026 by rpki-client