Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a110fa61-fde4-3531-8a97-2d34ca3dfbd9.roa
File:                     a110fa61-fde4-3531-8a97-2d34ca3dfbd9.roa (raw, json)
Hash identifier:          H0tva3Ebcr5d5Xsn/uSi4zIxwur2Jjd+IYC/+9SISyM=
Subject key identifier:   8D:FF:34:01:48:2C:B5:B1:47:B3:04:1C:84:7F:4D:28:DB:FC:89:85
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F34826D81B4EE5137D22827E0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a110fa61-fde4-3531-8a97-2d34ca3dfbd9.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     396253
IP address blocks:        149.19.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:6d:81:b4:ee:51:37:d2:28:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=694e0d7a-0cc1-4008-b29e-1304ca94af27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:9b:93:c2:0c:df:17:d3:c3:58:76:cd:cd:
                    a6:5c:42:01:6f:4d:24:a5:f0:e8:9f:18:ff:47:54:
                    db:b0:e6:6e:58:0f:4c:4e:cc:1e:ae:08:e9:ea:42:
                    51:9c:07:4b:8d:71:18:4a:bb:eb:08:84:bb:ea:26:
                    54:b3:b6:1e:48:78:c3:24:98:8b:15:8c:6a:5d:60:
                    0f:5d:69:58:c0:ec:ed:28:dd:96:8d:d7:41:b2:7c:
                    ea:d2:ac:1d:eb:ba:34:fd:88:67:91:47:b9:43:a8:
                    06:cb:f3:1d:eb:bf:ad:48:18:1d:a9:ac:1e:22:d9:
                    c3:55:b2:f9:2a:27:cc:40:78:e6:eb:ae:1f:f2:a8:
                    c4:84:a2:7a:37:d5:81:33:8f:f2:20:ac:e8:fb:f1:
                    6f:e5:70:23:4f:99:f8:39:cc:e8:2a:d6:94:5f:91:
                    1c:2c:36:0c:b3:5f:61:8b:2b:8e:a0:f9:15:fe:79:
                    1d:62:73:3a:b7:bc:1f:39:12:df:48:e2:d2:d5:de:
                    a1:22:ad:09:86:99:25:f3:2a:37:e2:46:eb:d3:d6:
                    56:1c:0e:59:bc:a5:3b:72:a8:80:ab:83:52:dd:9e:
                    e8:bc:91:34:f4:e9:50:7e:c1:38:a7:47:97:89:10:
                    b9:5b:d7:1a:65:fe:53:aa:5d:d4:bf:b6:7a:42:9b:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FF:34:01:48:2C:B5:B1:47:B3:04:1C:84:7F:4D:28:DB:FC:89:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a110fa61-fde4-3531-8a97-2d34ca3dfbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:c3:28:0f:b4:6a:9e:07:e9:e9:2f:20:3e:ce:61:8e:49:
         fc:20:8c:76:42:db:b9:6b:04:d8:59:b5:aa:15:f2:3d:05:db:
         b2:06:3b:cb:b4:ea:cc:be:dd:cc:30:06:f5:5a:0d:84:0b:36:
         34:fb:96:17:66:07:c9:ad:e8:5e:10:2d:31:a6:0d:81:98:df:
         d1:60:6e:58:e7:62:1b:1d:96:3c:17:0a:db:96:68:3e:7c:94:
         cf:bd:64:77:1b:7c:09:e9:1f:3f:55:a7:60:b5:b1:1a:4d:11:
         4c:75:dc:52:e5:49:68:85:8f:31:1d:c0:a9:43:11:58:2f:34:
         98:6b:92:5b:48:d3:30:f5:94:a2:78:02:14:f5:c6:b6:37:a7:
         d6:05:16:fe:66:e4:e0:02:6a:b8:34:5f:5c:55:54:8e:28:58:
         ab:7a:62:af:c8:9e:10:79:38:7e:bc:da:6b:49:10:ab:bf:21:
         89:16:3a:48:a0:7d:07:56:29:a4:97:9c:35:31:52:18:14:2d:
         36:d0:65:82:45:84:42:bc:77:2b:cf:6f:80:3a:85:f4:58:e2:
         83:f8:57:3b:86:26:f3:6b:f1:43:73:97:4a:33:7b:a9:b6:4e:
         28:dd:65:88:8d:96:8a:82:03:b4:5a:63:30:2a:16:66:b4:b6:
         44:06:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:28:42 2026 by rpki-client