Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa
File:                     95e25ce4-46b4-3dc7-8d32-675c222409ef.roa (raw, json)
Hash identifier:          yPRiKfpFuOgD1Umcod0s5/ujQyDfY8R1c6FLi93+OeE=
Subject key identifier:   12:11:FA:30:4A:2F:1F:A8:02:B4:CE:55:42:11:D5:9A:22:05:01:E8
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584D300A4E1F8F3E789DF1F02810
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     137922
IP address blocks:        149.19.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4e:1f:8f:3e:78:9d:f1:f0:28:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=19435c7e-7c89-412f-9231-6cdfaa2465cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:14:77:38:76:65:01:82:10:4c:e3:bc:d5:
                    d8:61:a1:81:0e:73:ec:8c:a3:f8:6b:70:24:2f:da:
                    9b:86:ac:aa:94:32:b5:3d:2c:64:c1:c9:56:04:a0:
                    68:a5:49:00:af:c2:5b:c9:60:72:61:12:c5:7e:e1:
                    6a:70:88:31:99:e7:2c:9b:61:15:e1:26:30:4e:de:
                    e9:81:ce:37:53:5a:18:65:53:d9:85:45:dc:1b:47:
                    e8:3d:03:45:c7:1e:54:9c:b7:19:be:54:36:64:31:
                    02:6f:7f:c6:cc:1c:98:91:36:80:2f:d2:7a:72:ce:
                    b4:ed:2d:3b:8d:14:ed:37:f7:62:e9:52:2b:38:4f:
                    42:8b:6a:2c:ba:98:bb:b7:69:a7:e7:25:a2:ee:f2:
                    04:f9:43:dc:82:8b:2a:a4:cc:39:72:2e:dc:0a:00:
                    1b:35:2c:6d:52:3e:88:74:cf:84:be:e2:f8:a9:97:
                    66:c8:76:74:f5:1e:db:8e:bf:6a:05:4a:db:b7:21:
                    13:2b:03:eb:b8:99:04:9f:ac:30:8d:c0:d7:de:e8:
                    0e:e1:9c:f5:98:44:aa:7f:ac:a8:22:44:11:10:af:
                    21:89:a0:79:42:68:b2:77:05:0e:a9:42:9e:1b:94:
                    85:8d:f5:c8:fe:fb:2d:c9:ac:b5:e9:1a:d0:db:0d:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:FA:30:4A:2F:1F:A8:02:B4:CE:55:42:11:D5:9A:22:05:01:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/95e25ce4-46b4-3dc7-8d32-675c222409ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:57:20:9f:5a:0f:5e:ea:cc:b8:f8:7a:d8:42:bd:10:95:
         69:ff:9e:5a:67:aa:63:dc:cd:82:2f:74:19:7f:e3:68:ed:ca:
         7d:a5:17:19:07:51:09:f0:19:9f:af:d8:3b:04:a4:d9:3f:f5:
         e0:e3:d7:e8:33:d7:f0:16:ea:4c:9a:f2:7d:f6:19:b3:4d:1b:
         97:ad:db:2a:11:2e:dc:34:6a:da:05:38:44:70:dc:b8:d1:8a:
         fa:c4:95:0c:72:22:73:a6:39:41:a0:db:75:7d:ce:f2:7c:02:
         76:0a:08:3c:d0:09:06:4f:97:bc:85:52:31:bb:cc:44:1c:fb:
         13:0f:2d:cb:19:b6:dd:55:68:18:6d:cc:9d:bc:a5:8e:37:a4:
         fd:94:6c:19:c6:a7:60:45:56:ef:8c:af:e6:b8:e2:2b:50:5f:
         bf:4a:79:9c:68:ea:c6:d6:1c:05:45:ea:d9:b8:6c:51:c5:90:
         8d:38:9c:e9:06:16:1b:ed:50:e4:9f:cf:1c:2c:6d:08:17:97:
         9e:8b:4c:b5:9d:0f:e8:2c:42:10:33:02:e1:fc:83:b3:2d:fd:
         42:b9:10:13:57:30:1b:20:6d:f3:ba:59:41:1e:59:aa:d5:1a:
         5c:21:b5:aa:af:2d:01:8c:00:bd:a8:0c:dd:eb:03:99:91:32:
         c4:d2:c3:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCk4fjz54nfHwKBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
MTk0MzVjN2UtN2M4OS00MTJmLTkyMzEtNmNkZmFhMjQ2NWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFcUdzh2ZQGCEEzjvNXYYaGBDnPsjKP4a3Ak
L9qbhqyqlDK1PSxkwclWBKBopUkAr8JbyWByYRLFfuFqcIgxmecsm2EV4SYwTt7p
gc43U1oYZVPZhUXcG0foPQNFxx5UnLcZvlQ2ZDECb3/GzByYkTaAL9J6cs607S07
jRTtN/di6VIrOE9Ci2osupi7t2mn5yWi7vIE+UPcgosqpMw5ci7cCgAbNSxtUj6I
dM+EvuL4qZdmyHZ09R7bjr9qBUrbtyETKwPruJkEn6wwjcDX3ugO4Zz1mESqf6yo
IkQREK8hiaB5QmiydwUOqUKeG5SFjfXI/vstyay16RrQ2w2zfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIR+jBKLx+oArTOVUIR1ZoiBQHoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvOTVlMjVjZTQtNDZiNC0z
ZGM3LThkMzItNjc1YzIyMjQwOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+uVyCfWg9e6sy4+HrYQr0QlWn/nlpnqmPczYIvdBl/42jtyn2lFxkH
UQnwGZ+v2DsEpNk/9eDj1+gz1/AW6kya8n32GbNNG5et2yoRLtw0atoFOERw3LjR
ivrElQxyInOmOUGg23V9zvJ8AnYKCDzQCQZPl7yFUjG7zEQc+xMPLcsZtt1VaBht
zJ28pY43pP2UbBnGp2BFVu+Mr+a44itQX79KeZxo6sbWHAVF6tm4bFHFkI04nOkG
FhvtUOSfzxwsbQgXl56LTLWdD+gsQhAzAuH8g7Mt/UK5EBNXMBsgbfO6WUEeWarV
GlwhtaqvLQGMAL2oDN3rA5mRMsTSw4Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:56 2026 by rpki-client