Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS50225.roa
File:                     AS50225.roa (raw, json)
Hash identifier:          lTm3pWVuMQFWN5rG+FmOrrplO2fwNLsDJMgZkwgeQ5k=
Subject key identifier:   88:70:64:92:08:09:68:29:1B:D2:75:CF:34:75:DE:A7:45:8C:41:12
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2D82F8E68F711CFC0E5E2F3D1E514BC850F10763
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS50225.roa
Signing time:             Tue 07 Apr 2026 01:35:55 +0000
ROA not before:           Tue 07 Apr 2026 01:30:55 +0000
ROA not after:            Tue 06 Apr 2027 01:35:55 +0000
asID:                     50225
IP address blocks:        155.94.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:82:f8:e6:8f:71:1c:fc:0e:5e:2f:3d:1e:51:4b:c8:50:f1:07:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr  7 01:30:55 2026 GMT
            Not After : Apr  6 01:35:55 2027 GMT
        Subject: CN=88706492080968291BD275CF3475DEA7458C4112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:ee:ca:9f:21:51:78:05:f5:fa:5c:c4:04:
                    8f:34:eb:c6:09:34:88:6f:60:96:fe:b1:db:d7:96:
                    f8:08:d2:17:3c:75:e2:29:76:fe:d1:e8:ba:12:b0:
                    09:43:7a:c9:6a:c4:b1:26:2e:8c:e2:a6:7e:d7:be:
                    b7:f8:96:40:8e:5d:cc:49:13:c7:58:47:62:93:27:
                    d3:40:92:5b:b6:a9:bc:97:e9:fc:22:25:2e:ff:e0:
                    43:f1:74:fc:83:21:61:44:26:5c:80:23:ea:cd:8b:
                    c9:83:e8:3c:0d:5e:47:2d:51:f6:b3:50:65:56:f0:
                    18:bc:ef:f9:2f:b0:ff:78:7d:67:9a:59:c2:29:86:
                    db:21:ec:2f:c9:7c:8b:7d:ea:1f:2c:14:0a:bb:72:
                    27:7d:1f:0e:dd:91:4c:7e:4d:f4:2d:4b:7d:3b:c8:
                    65:55:34:98:5e:05:d5:63:a8:ed:07:6d:51:7f:85:
                    e2:d2:93:8a:00:aa:05:2a:dc:8a:d6:84:02:e5:37:
                    bf:38:66:3a:ad:f4:19:bc:05:81:98:ba:80:23:e9:
                    12:dc:33:24:c6:7f:cc:e2:6f:82:db:01:33:a0:1b:
                    85:95:66:69:0f:7e:c9:4e:3f:4a:60:e4:35:8b:54:
                    d5:94:7f:f6:f5:e2:6d:6c:7d:7f:ab:fa:66:c8:a4:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:64:92:08:09:68:29:1B:D2:75:CF:34:75:DE:A7:45:8C:41:12
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS50225.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:2b:eb:fd:1a:4a:64:85:c0:bf:97:2d:54:54:6e:76:22:b0:
         12:9e:92:ad:40:e0:e2:51:b7:99:79:ba:88:8a:f1:e4:cd:22:
         a3:3f:70:86:6b:8a:20:3a:e6:df:a9:76:e9:9c:2d:19:65:f7:
         04:e7:40:5b:d3:82:e2:5b:86:80:fc:4a:4d:e9:7a:bd:22:5c:
         30:7b:c6:2b:c3:a1:5b:6b:4f:0d:82:15:0c:3e:0b:99:10:0b:
         22:71:f2:73:5d:dd:8e:42:d3:4e:bc:ef:06:43:14:eb:19:d4:
         a8:c3:2c:1a:de:3c:06:c0:67:72:29:df:71:bc:c9:61:f4:14:
         0e:2b:a2:18:ab:66:d1:9e:e8:06:bc:3a:eb:59:15:3d:8a:75:
         68:2f:0f:87:6f:62:09:6d:98:df:42:a5:81:76:17:e0:9c:b0:
         ff:e6:66:6b:15:f2:c4:84:d4:b2:3e:fa:50:db:e5:6d:31:75:
         5b:79:ef:36:1c:34:88:f2:2f:20:39:b9:97:ac:e3:03:7f:da:
         8b:04:c6:cd:5b:d7:4b:63:e3:87:8f:7f:3a:7d:ce:b4:01:31:
         d8:ce:27:11:bb:fa:ac:78:f7:33:20:f5:a4:40:ad:f3:df:bd:
         5b:fe:06:0e:3b:62:b6:05:af:9e:d5:ff:0a:4a:47:35:6e:a1:
         56:b2:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:06 2026 by rpki-client