Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fe33f3ed-017e-3bd2-847e-44f13c7979c8.roa
File:                     fe33f3ed-017e-3bd2-847e-44f13c7979c8.roa (raw, json)
Hash identifier:          LdHm19aHZdd5VOQdCTuYjt8MJNuPujKqamsb8jh4SYY=
Subject key identifier:   66:5E:84:48:51:15:9C:B9:43:E0:C3:F3:6F:19:65:C9:0E:F3:BB:B5
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584B715C9FBA2AFA592361506E80
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fe33f3ed-017e-3bd2-847e-44f13c7979c8.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396253
IP address blocks:        149.19.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:9f:ba:2a:fa:59:23:61:50:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=f311b57c-8ab7-4197-bf47-1c9987ec7572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:0b:3f:2b:52:f7:e2:5d:01:78:90:7d:92:
                    40:d8:6e:dc:ae:d5:68:2a:22:bb:13:c9:d1:2e:28:
                    47:91:8a:d9:45:55:4b:06:03:c1:f4:2b:61:39:61:
                    c5:a6:ca:04:4d:b0:66:09:dc:6a:d5:a6:36:aa:51:
                    0b:93:56:6b:21:54:ca:cc:4d:d8:21:90:3e:b8:0c:
                    70:84:3e:f0:c1:d2:c6:86:82:3f:3d:35:97:b0:27:
                    47:4e:64:a2:4d:f2:af:c4:66:fb:49:c0:be:21:2d:
                    6d:98:58:0e:d4:77:f4:6c:eb:e7:d6:45:8c:93:ec:
                    1f:15:17:49:93:c6:51:aa:e7:e4:f1:f4:9f:c5:8b:
                    55:9c:99:11:0b:51:55:8a:42:ee:e4:2b:d1:b6:ec:
                    8a:93:ac:fb:f8:3f:57:31:26:00:aa:ba:ce:a2:27:
                    ef:bf:28:04:69:67:ce:0a:c8:a5:1a:e3:a0:30:0b:
                    55:85:be:7d:83:8f:ad:ba:8b:20:78:7d:32:06:d5:
                    f6:34:34:d0:5f:7b:01:f0:28:ff:bd:4a:dc:35:ad:
                    c6:00:f0:e4:15:6e:f9:6a:4c:5e:12:74:87:33:32:
                    b9:d3:f3:6f:53:86:5b:36:fc:fb:39:a9:e1:2e:84:
                    9f:40:ac:91:dd:d8:34:32:c1:55:a9:8b:0e:aa:be:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5E:84:48:51:15:9C:B9:43:E0:C3:F3:6F:19:65:C9:0E:F3:BB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fe33f3ed-017e-3bd2-847e-44f13c7979c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:2f:6a:7f:3d:48:55:36:0c:c7:9c:f5:2c:74:96:bf:ec:
         47:d5:b5:1d:46:8e:71:2f:ee:a9:5d:b4:bd:bf:97:f6:87:7e:
         dd:6e:71:45:a9:e2:be:32:51:7c:80:a8:4c:ca:6c:ac:90:c1:
         0d:db:33:d9:f2:6b:a7:e1:16:2d:cb:b7:ec:5f:b1:fe:58:e6:
         a1:00:60:4d:82:67:f4:9c:34:91:74:35:e1:32:60:19:a6:a2:
         10:fb:f9:e1:cd:16:f4:67:55:3a:5c:f9:34:35:7f:e3:fb:d1:
         37:10:90:d2:61:68:18:d3:d4:ae:a8:cd:54:df:b7:6c:e3:50:
         31:13:77:65:16:94:d0:78:a7:71:86:f6:8f:de:5b:0f:f0:10:
         0a:7a:d1:1b:19:39:16:2b:96:1c:52:04:46:55:6d:2c:27:b3:
         3e:c2:e6:75:30:60:16:07:29:2a:20:46:b8:2b:9d:34:95:86:
         74:9a:69:43:99:52:13:bd:e3:f7:3c:d1:e1:c9:d2:45:93:fc:
         e2:23:99:b8:1a:d3:3f:15:5a:72:cb:e7:5a:a5:8a:a9:e3:66:
         dd:f8:cc:db:0d:41:14:19:64:a7:d9:ca:cb:82:dd:9b:20:e6:
         80:6c:01:56:d3:dc:43:43:43:90:5f:cc:37:6f:a8:7d:89:12:
         07:5a:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:15 2025 by rpki-client