Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa
File:                     95e25ce4-46b4-3dc7-8d32-675c222409ef.roa (raw, json)
Hash identifier:          a2MAr3PyeGPtNIsSQEskcNviTZIe4cqxiFxzVqrN9qQ=
Subject key identifier:   8B:10:51:44:57:AB:AD:6F:50:5F:5C:75:08:A3:E3:94:F5:54:60:EF
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285847EFEF81D12FD83EC78D92ECC0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     137922
IP address blocks:        149.19.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:81:d1:2f:d8:3e:c7:8d:92:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=2005704e-80a7-4d07-9d18-4b4c84b9bb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:76:76:54:e5:2a:06:05:68:fa:af:3c:28:
                    c7:da:20:bd:27:02:0f:c7:64:0e:56:29:15:65:d0:
                    2c:8a:10:3b:83:d7:70:35:92:8a:59:2d:19:eb:61:
                    b8:90:84:84:ed:ce:d6:68:78:ee:6d:6f:bc:1b:55:
                    af:85:8c:6f:78:c9:5e:40:f9:ca:3d:69:f6:32:d3:
                    00:e4:ea:44:ba:09:37:f4:33:26:e4:5f:35:de:1d:
                    ef:09:4e:08:7a:3e:6d:69:9c:4b:8e:dd:62:a3:7a:
                    86:15:bb:a6:c9:81:4f:25:66:f9:d8:26:6e:95:db:
                    5c:5a:bc:d5:09:a1:44:86:54:e3:3a:06:e8:a8:c8:
                    50:d8:33:d9:3a:cd:b9:77:4a:7e:03:2d:6f:63:b2:
                    5a:b6:c0:4d:62:e3:e6:eb:f3:bf:39:9c:2e:0c:3b:
                    24:df:de:60:b5:5d:da:a2:7f:9f:60:18:43:40:39:
                    52:5f:a8:be:18:fb:52:84:e2:1f:dc:48:58:09:77:
                    44:65:7b:a1:36:60:5e:f9:86:5d:91:0f:0a:53:47:
                    ff:12:19:44:63:10:13:44:a3:2a:40:71:18:d4:87:
                    07:45:5c:5f:d8:1e:39:87:34:7a:5b:5b:65:1e:77:
                    ca:cd:99:bc:6f:8d:8e:94:68:27:67:b7:51:61:96:
                    ea:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:10:51:44:57:AB:AD:6F:50:5F:5C:75:08:A3:E3:94:F5:54:60:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:5f:72:a7:c2:27:bf:0c:c4:d9:39:4d:bd:4e:9c:88:a5:
         66:d9:34:c4:9a:18:f8:46:d2:b6:d6:1c:30:65:51:46:f1:45:
         30:29:f6:7e:fb:0e:73:2d:62:50:70:80:64:4b:cc:63:cd:4f:
         5e:b6:4c:e0:d3:ad:eb:89:b4:ea:bb:b4:9a:52:b0:c5:ab:34:
         16:11:ec:ad:ac:6d:72:73:e8:46:50:5a:aa:b4:fd:aa:9c:39:
         09:d8:dc:b6:49:9c:27:92:a9:4e:37:35:ee:28:c0:73:9b:74:
         52:be:17:9b:0e:e5:f8:e3:bd:eb:6f:b1:7b:82:63:b8:bb:e2:
         72:fc:8a:98:00:02:e1:81:1c:2d:13:41:82:d4:6d:ed:2f:52:
         24:a9:1e:c6:e0:6b:dd:02:71:82:92:2f:7d:71:3d:c1:ec:9b:
         88:a6:5d:85:f1:25:f4:4d:cb:0e:8d:8d:ca:6b:69:19:50:62:
         6f:66:eb:52:0f:8e:1c:3d:e0:bc:4d:d3:52:e9:37:69:f3:2d:
         37:86:5d:6b:f1:ca:41:d1:b2:5b:ff:9f:0b:29:e8:c1:0c:ea:
         4f:0b:cd:2d:51:8b:c2:d5:9d:17:6a:e6:70:9f:88:d2:23:c9:
         07:10:de:84:a5:ba:d9:59:c0:be:35:86:5d:6e:72:2b:70:d1:
         50:ba:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org