Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e2039333034.roa
File:                     3137362e3130352e3233302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          kGeDH24hI7rdDBwGrG+d7tqtEKxfVu+iJkmFcZj1oIc=
Subject key identifier:   1F:36:F5:B3:9E:69:CD:EF:12:F4:3A:5A:AE:89:53:27:6F:0A:9A:BB
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       3207C76FE954BBAEC0DB474C454BF012291B517B
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:16 +0000
ROA not before:           Tue 08 Sep 2026 06:20:16 +0000
ROA not after:            Tue 07 Sep 2027 06:25:16 +0000
asID:                     9304
IP address blocks:        176.105.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:07:c7:6f:e9:54:bb:ae:c0:db:47:4c:45:4b:f0:12:29:1b:51:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Sep  8 06:20:16 2026 GMT
            Not After : Sep  7 06:25:16 2027 GMT
        Subject: CN=1F36F5B39E69CDEF12F43A5AAE8953276F0A9ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:68:97:70:7e:dd:09:fd:20:e8:bf:8c:11:
                    6f:04:96:27:b5:dd:1f:32:f6:7f:41:2b:c4:86:3b:
                    fc:b5:8c:19:6a:e4:c4:b1:a2:93:1b:0d:91:ce:61:
                    4a:f3:8f:df:ba:a2:1e:4d:c7:96:a3:ec:09:fb:ce:
                    97:87:aa:f7:d1:1a:39:b9:b3:22:1e:aa:96:49:43:
                    f3:cd:ed:8e:6a:2c:a6:ce:8f:e4:9d:71:67:80:0c:
                    81:8e:73:5c:03:74:00:16:a7:3b:31:42:be:3e:ae:
                    f8:ad:3d:d8:91:ce:3a:27:87:18:61:45:07:c5:a8:
                    b8:28:62:84:87:90:66:1c:41:f3:e0:f3:24:3e:4f:
                    f7:d5:8b:c3:e5:2b:df:3b:d5:d6:35:70:de:c5:9d:
                    ad:de:10:9a:00:05:8a:a5:7c:d2:22:38:5f:50:bd:
                    7d:4c:89:7c:cd:b0:98:41:90:3a:02:de:de:53:f2:
                    e4:c9:78:13:a2:63:f5:69:5f:0c:e9:d8:b3:c4:6b:
                    e9:c0:9e:c3:06:2b:51:c2:86:81:55:f4:21:e6:fa:
                    ef:2e:ec:2d:38:62:e2:14:12:ea:f5:57:b7:96:1a:
                    13:42:3d:24:27:33:5e:95:60:c7:bd:f9:44:e8:7c:
                    c5:fa:5c:ce:71:15:ff:cf:98:70:29:0b:90:cc:8c:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:F5:B3:9E:69:CD:EF:12:F4:3A:5A:AE:89:53:27:6F:0A:9A:BB
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:98:d2:3e:82:99:ce:77:19:3c:d6:f2:f8:d4:9e:1c:b1:
         6b:b8:fc:94:f8:f1:5b:ab:d9:4a:ae:4b:b2:1d:b9:97:06:c2:
         e5:4c:55:4e:b5:65:2b:fa:78:ba:86:91:63:ac:62:2c:0c:05:
         87:13:ea:ce:b6:ae:5d:01:fe:6f:8d:c5:a3:c1:af:ac:46:2f:
         52:e2:bc:b5:db:7b:85:7b:db:ed:0d:c1:0c:64:c9:27:44:92:
         5f:e6:1d:22:53:95:69:0d:2d:cd:9d:79:9b:a1:d0:5f:ed:07:
         f2:4c:ec:b6:6c:0b:bb:be:22:e1:c4:97:ed:ba:e9:b6:a7:56:
         43:a7:0f:a1:1b:0e:31:b0:c7:5c:a0:40:83:99:db:e0:19:05:
         35:20:f0:67:0c:b8:df:1e:c2:2e:aa:6a:56:70:fb:56:96:4b:
         22:c6:da:6e:d0:4b:21:c4:ca:a7:9c:0b:6f:94:14:76:33:25:
         72:e3:56:79:52:cd:ef:ad:aa:57:de:4d:e8:97:6d:2f:c8:85:
         3a:a9:30:7a:c8:73:c3:d7:50:62:bc:af:9c:8f:4d:1e:7d:a1:
         87:95:ba:61:ee:ec:e6:7a:d0:e1:85:b3:45:a0:56:e7:4f:66:
         71:71:87:ac:7e:85:e8:ca:06:04:54:ce:64:10:97:25:18:71:
         5e:59:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:50:59 2026 by rpki-client