Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20323035373333.roa
File:                     3137362e3130352e3232392e302f32342d3234203d3e20323035373333.roa (raw, json)
Hash identifier:          gn6S0bTZ7afZo7Imo9J6V33w5eNjWE9MCukdR4rqj2M=
Subject key identifier:   7B:79:ED:9E:BA:3B:48:2C:5A:33:8F:DF:44:E8:A4:AD:0A:94:55:A8
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       1FF31442F11857561FB768F940ECBD4A71693E
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20323035373333.roa
Signing time:             Wed 23 Apr 2025 05:38:54 +0000
ROA not before:           Wed 23 Apr 2025 05:33:54 +0000
ROA not after:            Wed 22 Apr 2026 05:38:54 +0000
asID:                     205733
IP address blocks:        176.105.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f3:14:42:f1:18:57:56:1f:b7:68:f9:40:ec:bd:4a:71:69:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:33:54 2025 GMT
            Not After : Apr 22 05:38:54 2026 GMT
        Subject: CN=7B79ED9EBA3B482C5A338FDF44E8A4AD0A9455A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:f5:76:95:46:d7:f4:0d:93:c0:ae:64:3a:
                    01:87:f6:e4:03:bf:97:dd:4c:f1:b0:22:42:14:75:
                    1f:05:be:38:2f:5a:43:d4:64:47:90:bc:0b:a3:c7:
                    01:62:91:6e:d9:25:dc:47:70:a9:d2:f2:b8:51:38:
                    b2:31:61:e5:52:7d:45:86:2f:23:13:88:5e:35:48:
                    92:a1:56:d1:a5:9e:83:b0:01:22:41:45:83:7d:8c:
                    cb:64:a5:21:13:f1:42:de:94:10:8f:39:f6:96:f0:
                    96:a6:bd:9e:a3:e3:92:f9:28:2e:9a:37:3d:7e:11:
                    04:3f:d0:58:93:0e:94:28:6b:aa:70:07:6f:33:7f:
                    21:67:53:8a:6a:65:66:72:a6:74:06:34:1d:7a:f9:
                    cf:58:c0:a3:73:b6:f4:c1:5a:b1:be:29:0d:de:c1:
                    eb:f5:81:1a:91:23:7f:ea:aa:60:3a:11:1c:32:dc:
                    f2:86:15:f7:27:3a:b0:ee:6f:c7:dc:f5:e2:31:35:
                    da:b5:ef:b4:0a:74:ed:23:78:92:7c:4d:b2:3d:15:
                    bf:c4:ff:6f:d7:b1:72:da:01:6d:18:2c:0e:54:2b:
                    99:47:db:e0:6a:76:f7:f0:c8:99:b8:cd:9d:76:d5:
                    ec:ba:db:c4:4f:39:68:5e:b4:57:bf:dd:35:ef:5c:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:79:ED:9E:BA:3B:48:2C:5A:33:8F:DF:44:E8:A4:AD:0A:94:55:A8
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20323035373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:de:6b:f6:fa:54:ec:5f:40:8a:65:1b:2c:b0:87:a3:51:2f:
         a7:69:69:db:2f:92:93:09:db:cc:d4:56:de:36:68:70:04:1f:
         f8:c9:9f:86:9e:e6:93:72:10:99:db:de:a9:7d:7f:d8:48:7b:
         38:65:86:a1:66:ca:be:5f:35:bd:dd:e5:64:12:cc:13:0e:f8:
         99:6d:55:c2:ce:e4:10:b3:cf:8d:8b:4e:a0:7e:59:33:66:21:
         55:a5:c7:68:3f:0d:81:7e:cd:b7:85:d7:74:d9:82:51:44:64:
         2f:cd:56:bf:3a:c1:54:e9:09:5b:88:77:d8:63:b2:c9:2f:82:
         50:1f:1d:db:6f:87:8f:94:94:38:6d:1c:68:fc:1c:e7:fc:11:
         0b:dc:39:1d:4a:50:9c:f6:04:fc:f4:1b:5c:0f:f6:97:64:07:
         52:83:1f:e0:cb:4a:d3:33:1c:b7:59:dd:a9:0d:8d:24:3d:73:
         99:45:45:6c:57:90:10:c2:41:f4:b8:b6:51:5f:77:b1:8e:9e:
         23:0d:6e:bd:90:51:07:af:8c:39:26:07:d0:fb:d1:e4:17:39:
         08:d9:ca:cf:81:47:79:25:50:78:f7:18:32:ee:bb:84:2e:3f:
         a7:ee:82:db:91:d1:c3:44:8f:03:87:8d:d1:05:73:51:96:85:
         88:63:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:22 2025 by rpki-client