Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20313334313736.roa
File:                     3137362e3130352e3232392e302f32342d3234203d3e20313334313736.roa (raw, json)
Hash identifier:          DgGayQdtnWbMwOUNHfqKRDQbhfpA/XU5TRWmR7rJLlg=
Subject key identifier:   04:9B:36:4B:C3:4B:1C:A2:DE:00:67:3A:1E:15:31:2F:E9:1F:11:36
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       5A81D1D702DCA18F3F58A94B14D974A77553DAF4
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20313334313736.roa
Signing time:             Wed 23 Apr 2025 05:39:02 +0000
ROA not before:           Wed 23 Apr 2025 05:34:02 +0000
ROA not after:            Wed 22 Apr 2026 05:39:02 +0000
asID:                     134176
IP address blocks:        176.105.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:81:d1:d7:02:dc:a1:8f:3f:58:a9:4b:14:d9:74:a7:75:53:da:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:02 2025 GMT
            Not After : Apr 22 05:39:02 2026 GMT
        Subject: CN=049B364BC34B1CA2DE00673A1E15312FE91F1136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:14:e1:20:58:71:68:84:65:9e:3f:ec:50:
                    ac:70:c5:37:fd:a2:39:09:e4:c6:8c:08:7a:a4:fe:
                    ef:0b:a9:3f:c0:a2:58:f0:45:32:9b:53:a5:a9:2e:
                    68:a5:1b:b0:4a:37:df:85:12:11:ec:cb:a7:0c:a4:
                    f9:c7:49:6c:f3:26:c5:a9:dd:f3:60:b5:92:d1:b6:
                    31:d3:5b:44:9d:20:d9:03:62:27:7c:a8:a1:a9:5c:
                    96:ce:07:73:d4:7f:24:23:70:2d:c4:fc:92:ad:94:
                    c6:a1:47:7a:a2:b4:91:e9:81:86:ec:64:16:1e:d7:
                    7a:df:18:4e:4e:4b:fe:24:2c:48:6f:4d:b0:43:41:
                    f2:69:28:e3:4f:5a:d4:0f:50:27:97:ef:05:29:4d:
                    fc:9d:5b:b8:56:ef:29:dc:a6:49:3e:98:10:0b:b3:
                    32:1b:73:20:65:96:1d:db:42:b0:a8:43:54:e8:b8:
                    92:15:80:73:17:5b:5d:5e:86:c9:51:e7:08:11:ba:
                    44:b5:0c:19:d1:b3:de:f0:b5:a6:63:bc:44:2a:b1:
                    36:47:75:d6:2d:0c:fc:a6:b9:8f:78:3a:86:40:da:
                    28:46:dd:d7:e9:e3:b5:a2:8b:84:ef:1d:5f:d8:fa:
                    80:a0:ff:61:a6:0e:09:1e:40:ad:48:78:00:eb:fe:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:36:4B:C3:4B:1C:A2:DE:00:67:3A:1E:15:31:2F:E9:1F:11:36
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20313334313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:00:31:a2:e6:24:18:e9:f9:e6:e4:8f:00:c8:26:8d:a6:
         13:e4:cc:a9:71:1e:1a:55:03:4d:76:b6:b1:f8:44:2c:81:54:
         be:d1:05:75:1f:a7:b5:9b:e9:a6:76:9c:f6:c4:ad:56:1b:82:
         4b:3c:d6:65:12:4d:f4:d3:7c:30:0f:56:92:7d:8b:2c:7a:2e:
         44:ff:4f:b8:20:b6:a0:3e:5d:36:e5:49:28:56:fd:26:de:63:
         25:32:80:26:63:0b:b8:a1:a1:b7:1f:8b:61:87:dc:23:bc:8c:
         8d:3e:08:85:9e:b0:95:4a:c6:71:1a:ad:0d:89:ac:34:b0:56:
         2b:ec:b8:39:77:12:2e:e7:a0:73:12:06:b3:b5:74:88:18:28:
         ff:2b:c9:cb:1f:1f:53:81:83:00:bd:25:5e:e6:99:15:05:b9:
         3b:2b:dc:2d:f1:7c:fb:05:18:ba:8a:66:64:6a:93:f1:cc:69:
         69:85:44:96:4b:09:04:69:1c:49:b1:32:f7:e0:ab:88:04:5b:
         f2:ec:c8:60:d6:72:e2:a0:0b:89:05:a6:8a:83:b0:69:7a:d3:
         ee:a7:ba:61:4d:b8:ac:12:f3:70:96:b2:6e:78:5c:25:be:0a:
         09:de:e0:a1:18:0b:85:89:7a:2e:d0:ba:21:12:42:73:4f:54:
         b3:44:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:01:45 2025 by rpki-client