Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e20383334.roa
File:                     3138352e3137372e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Q+N3yKcqic2RTvEalW0PPtgHReCD3RNUtY6YE431TDc=
Subject key identifier:   BA:5F:1E:E6:FA:D8:13:0C:30:5F:C2:B8:9D:5B:29:33:DB:A5:99:9C
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       2617553DA8D7220DC3D51DA0FF8D0D82852B8F01
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e20383334.roa
Signing time:             Wed 23 Apr 2025 05:39:33 +0000
ROA not before:           Wed 23 Apr 2025 05:34:33 +0000
ROA not after:            Wed 22 Apr 2026 05:39:33 +0000
asID:                     834
IP address blocks:        185.177.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:17:55:3d:a8:d7:22:0d:c3:d5:1d:a0:ff:8d:0d:82:85:2b:8f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:33 2025 GMT
            Not After : Apr 22 05:39:33 2026 GMT
        Subject: CN=BA5F1EE6FAD8130C305FC2B89D5B2933DBA5999C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:ce:26:52:fc:71:4b:66:9d:54:12:36:3c:
                    d6:52:7c:ef:68:5f:65:4d:09:0d:f1:6b:4c:bf:91:
                    c8:95:12:fe:14:c0:65:ae:32:50:f1:b5:6c:7a:01:
                    bb:80:5e:49:6a:82:dc:e0:0d:c6:47:55:c6:25:d2:
                    51:e4:54:9e:c8:c9:b2:fc:bc:e0:88:33:c3:44:0d:
                    19:38:c1:ac:c5:d4:fe:d0:bb:b8:3b:2c:b1:aa:be:
                    6c:66:f9:fb:c0:fd:0f:8a:d2:50:02:4c:4f:e5:67:
                    4f:bd:37:5c:e0:28:2f:94:8e:b6:28:27:cc:e6:b3:
                    9e:00:f8:45:75:59:8f:bd:8b:47:04:fa:87:98:2b:
                    a6:e3:e8:4e:65:27:60:f2:26:33:0f:55:3f:fc:de:
                    0b:fe:b0:98:e2:f9:ce:df:d6:1b:c6:be:38:02:01:
                    08:ec:56:8c:96:51:ff:f9:23:33:6f:29:27:58:56:
                    81:44:2d:f3:d2:3d:3c:24:06:2c:b1:28:9c:82:88:
                    57:0d:4c:1e:eb:23:f1:d8:8f:b7:39:42:d0:f0:24:
                    b5:dd:9b:de:5b:47:de:91:59:be:55:be:d8:30:8d:
                    1a:43:4a:56:5e:dc:6a:91:75:5d:79:81:80:bd:01:
                    02:9c:bb:4d:3b:b1:f7:ec:80:6d:02:1a:b3:fb:58:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5F:1E:E6:FA:D8:13:0C:30:5F:C2:B8:9D:5B:29:33:DB:A5:99:9C
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:12:06:d9:13:e0:f8:6b:86:29:ce:a3:2e:c8:a9:c1:f4:57:
         12:e8:d3:7b:6b:f2:bc:43:bc:41:cd:81:1f:1f:50:8f:9e:5e:
         b0:24:cd:1b:a7:fb:bb:5d:b0:7b:b0:08:6f:11:76:15:0e:74:
         dd:f3:d5:52:e8:95:06:ba:4a:ae:94:ba:c8:89:7a:d7:c4:7a:
         aa:e7:81:ca:3e:c5:b8:0e:19:69:e4:4e:19:e5:45:16:aa:6d:
         32:7b:cb:cf:4f:0d:bd:36:5a:da:68:16:b9:a3:ce:fb:d3:fd:
         c4:a0:0b:1d:83:0d:52:b8:3b:35:6e:cf:33:67:c3:c7:bb:d9:
         ec:3f:b2:df:5c:1d:df:2d:ad:76:35:95:38:2d:ba:1c:cc:ca:
         72:8c:7a:71:a5:96:7a:ae:5f:a5:ff:70:53:6d:f5:4b:72:1f:
         2f:2b:33:18:de:be:6a:f7:02:8e:c4:7d:54:2f:7c:3a:d0:bf:
         c5:c8:15:f3:79:53:f1:4a:87:39:dd:25:4d:d3:e0:e7:26:03:
         38:ce:11:10:45:ea:d3:00:2e:d9:4b:7c:12:0d:48:7e:02:07:
         75:9e:f9:ad:a4:6c:ab:fd:a8:c6:01:f2:09:d1:0b:65:2c:62:
         7d:34:47:c6:31:2b:29:6c:7e:50:92:b1:0e:17:e1:aa:d3:fc:
         8f:e5:34:ee
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUJhdVPajXIg3D1R2g/40NgoUrjwEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUwNDIzMDUzNDMzWhcNMjYwNDIyMDUzOTMz
WjAzMTEwLwYDVQQDEyhCQTVGMUVFNkZBRDgxMzBDMzA1RkMyQjg5RDVCMjkzM0RC
QTU5OTlDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOfOJlL8cUtm
nVQSNjzWUnzvaF9lTQkN8WtMv5HIlRL+FMBlrjJQ8bVsegG7gF5JaoLc4A3GR1XG
JdJR5FSeyMmy/LzgiDPDRA0ZOMGsxdT+0Lu4Oyyxqr5sZvn7wP0PitJQAkxP5WdP
vTdc4CgvlI62KCfM5rOeAPhFdVmPvYtHBPqHmCum4+hOZSdg8iYzD1U//N4L/rCY
4vnO39Ybxr44AgEI7FaMllH/+SMzbyknWFaBRC3z0j08JAYssSicgohXDUwe6yPx
2I+3OULQ8CS13ZveW0fekVm+Vb7YMI0aQ0pWXtxqkXVdeYGAvQECnLtNO7H37IBt
Ahqz+1jCqwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLpfHub62BMMMF/CuJ1bKTPb
pZmcMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3
YzU3MzMwNTFjLzAvMzEzODM1MmUzMTM3MzcyZTMyMzYyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5sRowDQYJKoZIhvcNAQELBQADggEB
AJMSBtkT4PhrhinOoy7IqcH0VxLo03tr8rxDvEHNgR8fUI+eXrAkzRun+7tdsHuw
CG8RdhUOdN3z1VLolQa6Sq6UusiJetfEeqrngco+xbgOGWnkThnlRRaqbTJ7y89P
Db02WtpoFrmjzvvT/cSgCx2DDVK4OzVuzzNnw8e72ew/st9cHd8trXY1lTgtuhzM
ynKMenGllnquX6X/cFNt9UtyHy8rMxjevmr3Ao7EfVQvfDrQv8XIFfN5U/FKhznd
JU3T4OcmAzjOERBF6tMALtlLfBINSH4CB3We+a2kbKv9qMYB8gnRC2UsYn00R8Yx
KylsflCSsQ4X4arT/I/lNO4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:56:23 2025 by rpki-client