Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aec4931e-039a-3ef8-bdf6-cfef08ad1807.roa
File:                     aec4931e-039a-3ef8-bdf6-cfef08ad1807.roa (raw, json)
Hash identifier:          QlfNMSrYsyUzDuKVtu+eeDO4BP9sbe0U6ZmNhKtWvLw=
Subject key identifier:   E0:EB:12:AF:E0:19:F7:AF:00:E4:B4:11:FA:2C:31:33:D2:8E:AC:27
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79C8F28FF95236A58CD5880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aec4931e-039a-3ef8-bdf6-cfef08ad1807.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        150.195.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:8f:28:ff:95:23:6a:58:cd:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a355a3fb-4413-4cb9-8259-629bae00bedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:7d:9d:b4:30:a6:f1:06:d1:0e:76:d7:53:
                    0e:47:e8:99:4b:51:51:89:0e:fe:46:61:f4:95:08:
                    f7:1d:ca:39:1a:30:34:46:af:52:dc:4f:00:84:6b:
                    ab:ed:d9:0c:75:df:92:4b:e7:37:ca:fa:20:cb:98:
                    90:44:b3:0b:62:c3:70:f9:33:f4:8a:59:37:93:6a:
                    2d:d4:b0:74:13:7c:bc:aa:77:68:ae:ee:c5:e4:0d:
                    02:7e:c8:bd:29:69:20:2c:74:85:81:b2:ed:9a:34:
                    00:89:7b:89:0d:1c:b4:38:d0:35:e2:d9:c4:3a:01:
                    08:34:52:86:0b:9b:99:ca:ef:a1:fc:89:62:7f:0d:
                    a8:d8:9a:7c:a6:53:56:e8:42:64:82:ba:24:db:99:
                    a2:7b:a1:7d:cb:2a:1e:82:d0:bb:3f:83:66:e2:b8:
                    eb:d9:d7:f3:a6:a4:60:00:42:63:05:70:3a:24:62:
                    ad:9b:f1:ec:ee:aa:5e:21:b5:e9:4c:de:44:49:71:
                    01:8d:22:18:e4:dd:de:78:a4:85:b4:73:c4:40:50:
                    5d:13:2d:08:c8:68:2a:b4:8a:94:dc:7a:e3:78:7c:
                    9d:42:b8:e5:e0:bc:81:03:f4:56:fb:5d:47:74:d3:
                    43:4d:92:b2:79:a4:9f:e8:82:31:32:08:a0:25:5a:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EB:12:AF:E0:19:F7:AF:00:E4:B4:11:FA:2C:31:33:D2:8E:AC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aec4931e-039a-3ef8-bdf6-cfef08ad1807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:65:13:e3:6f:c7:04:67:e9:a9:24:1d:8f:d8:87:4c:7a:
         bf:81:63:74:b3:0f:32:9f:15:21:1e:4d:6e:f7:83:51:78:8d:
         aa:52:f7:da:ad:83:d4:7d:1a:09:86:22:e5:78:e0:fc:0d:00:
         0e:94:49:a1:6c:18:4d:6e:16:ac:59:c0:91:3e:e0:1f:a7:90:
         5c:2f:cd:2f:db:a6:43:af:6e:b5:6d:e4:34:2c:b7:b4:81:28:
         7d:c2:be:09:14:7f:5d:70:4b:bb:91:88:97:05:93:f8:b3:d2:
         67:4d:f5:33:1b:29:86:7a:88:2b:ac:dc:f3:69:9f:e9:13:7d:
         9b:3d:bf:d2:c3:7b:15:7e:cc:bb:55:b2:07:e2:ae:b3:bc:e1:
         49:64:d9:f6:70:af:fe:55:f6:cd:05:c1:a2:aa:c8:08:5f:49:
         3a:0d:8f:27:9a:1f:55:50:e1:41:49:8f:a1:9d:1e:9c:58:8a:
         56:c8:37:c2:4d:63:79:b6:f4:25:c6:f9:16:30:36:60:4e:e0:
         98:31:bd:c0:d9:98:d7:ab:d7:8d:88:89:51:fb:25:6f:a5:04:
         a7:6d:73:f3:9c:0b:38:cd:5c:57:2a:1f:27:9c:70:0e:5e:56:
         ad:97:ce:22:ac:38:78:91:1c:76:4d:53:ad:59:b9:88:ec:8a:
         cf:4b:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:06:03 2026 by rpki-client