Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cbe6572-2225-3801-aa0e-44612dd9ac08.roa
File:                     1cbe6572-2225-3801-aa0e-44612dd9ac08.roa (raw, json)
Hash identifier:          3SZ/Kno3VCaNc5v7H9uGvNTRTWj+B5K8yV7Y5xu89a8=
Subject key identifier:   7E:B8:E5:25:DC:33:A1:40:95:08:21:1B:90:28:98:44:2A:F5:55:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86DC897E5FF988DB9A7780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cbe6572-2225-3801-aa0e-44612dd9ac08.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     395976
IP address blocks:        50.225.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:dc:89:7e:5f:f9:88:db:9a:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=38c48695-97fc-4ff9-90c4-ecbf77432065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:5e:67:34:e8:07:55:7b:ee:18:69:57:c3:
                    76:9e:02:2d:bb:99:f3:a3:a9:dd:46:05:e3:1e:3a:
                    51:a7:7d:b0:fe:aa:5b:ce:ee:f9:a8:eb:10:d7:20:
                    af:c2:dd:65:f0:cb:71:dd:71:e0:4f:b3:b4:08:9e:
                    8e:a9:ae:88:07:84:cc:0d:0f:ce:0f:97:73:66:cc:
                    55:08:fe:8b:93:2c:14:dd:aa:cd:52:a3:d0:17:d5:
                    61:4e:19:9d:f9:94:d7:20:6b:98:8f:1f:cc:a1:3f:
                    a8:9d:e0:46:86:50:80:18:90:f7:14:a5:54:b8:87:
                    b3:25:e1:9b:84:17:3f:83:f1:41:1f:fa:6c:5f:81:
                    6e:bd:9b:0f:32:7e:2c:85:43:12:ea:6f:92:58:bb:
                    92:bb:ec:2c:59:1b:4b:06:73:57:f5:92:26:f6:c5:
                    a6:1f:1a:0e:28:bb:be:d2:e1:26:c6:1a:9a:4e:06:
                    58:cd:60:fb:5c:f7:37:d0:aa:88:a3:ba:d2:bb:b5:
                    35:11:1f:47:42:84:c5:05:a1:da:03:4c:00:03:f4:
                    52:62:57:66:0d:0e:07:d6:ee:d5:6a:c1:1b:dd:6e:
                    38:ca:65:c0:2e:cb:cf:23:64:14:89:87:2e:b5:5a:
                    d5:ed:df:5e:3b:ae:4f:30:f4:3f:0f:3a:cb:73:cb:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B8:E5:25:DC:33:A1:40:95:08:21:1B:90:28:98:44:2A:F5:55:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cbe6572-2225-3801-aa0e-44612dd9ac08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.225.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:63:1e:1c:f8:8d:6c:46:68:52:8a:05:f1:a8:67:70:4f:30:
         6a:44:24:cb:4f:16:18:20:66:cf:3e:18:5f:2b:ff:37:f7:6d:
         5a:fe:08:97:f6:79:7c:c5:8e:27:8f:70:4c:49:89:97:ca:79:
         11:71:b5:5d:d5:0c:3f:32:fc:9b:c2:03:d7:74:ed:6e:91:0c:
         36:4f:06:9d:98:4d:a1:a1:68:36:7a:3a:9d:c8:32:e0:a6:ea:
         2a:14:a3:ac:d5:b3:cf:70:78:d7:e0:48:1b:f9:9a:2b:51:65:
         9b:f9:fc:f6:99:03:1b:fb:86:7c:c1:a2:d3:93:05:44:f3:f8:
         17:89:ea:9c:a0:2d:ab:e7:5e:0e:a9:5c:6b:3d:df:90:e7:4d:
         23:9e:ba:9f:51:57:0a:16:5d:fb:b5:71:09:89:db:66:ba:6a:
         26:a8:b5:ee:a2:22:ab:91:a2:8d:65:e8:72:ba:59:88:bc:c7:
         ae:aa:85:3a:37:44:08:61:56:10:5c:9d:92:65:16:68:6c:7c:
         c7:f8:28:49:2d:16:af:4a:4d:8b:bd:88:61:3b:61:31:6c:bd:
         5c:93:55:7c:67:72:bc:72:93:74:27:37:7b:0c:6d:f3:f7:4e:
         76:b1:d6:3b:02:bf:7b:0c:7e:17:b6:5d:4d:54:a3:93:f3:97:
         1e:c9:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:31:39 2026 by rpki-client