Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32372e302f32342d3234203d3e20323133373531.roa
File:                     3138352e3137372e32372e302f32342d3234203d3e20323133373531.roa (raw, json)
Hash identifier:          dUSaT9o+loou+B+Gb1Usfq3YeI6cswoCoa7whrPKCkE=
Subject key identifier:   B9:F7:5A:D9:1E:80:B4:34:E2:A6:A2:E2:73:A2:DA:B9:73:08:18:F8
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6F38743EB964DA770181EB8C66F81B3D53BD8472
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32372e302f32342d3234203d3e20323133373531.roa
Signing time:             Wed 23 Apr 2025 05:39:54 +0000
ROA not before:           Wed 23 Apr 2025 05:34:54 +0000
ROA not after:            Wed 22 Apr 2026 05:39:54 +0000
asID:                     213751
IP address blocks:        185.177.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:38:74:3e:b9:64:da:77:01:81:eb:8c:66:f8:1b:3d:53:bd:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:54 2025 GMT
            Not After : Apr 22 05:39:54 2026 GMT
        Subject: CN=B9F75AD91E80B434E2A6A2E273A2DAB9730818F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:d4:e1:65:d0:36:98:86:15:1b:48:2c:5a:
                    1a:68:6a:8d:cb:42:d4:28:7a:57:e0:f1:9b:4c:65:
                    04:95:81:8a:c0:b8:ce:75:8e:07:ae:e9:42:aa:42:
                    82:0a:5c:85:38:ae:d5:6e:01:3f:d9:91:86:2b:e2:
                    0b:60:8b:e6:32:22:63:d9:ce:e5:45:24:3f:8a:7b:
                    8c:b4:fa:0e:c0:c5:0d:f2:05:77:ed:9e:8b:fb:2e:
                    0d:e0:24:2b:fe:59:ab:74:2e:28:7b:41:4e:3a:4e:
                    bb:76:26:51:cb:5b:84:01:c7:10:2f:f1:ea:e3:f1:
                    b8:df:9e:c2:55:24:af:79:80:9c:3a:75:73:4a:8f:
                    6b:98:f6:16:81:34:37:94:82:ce:f9:b2:03:da:37:
                    c8:03:72:d6:f3:e6:b0:e9:7c:cb:30:e8:ec:d6:f2:
                    c8:01:a7:9d:cb:b2:36:af:3c:16:95:4e:b1:e9:66:
                    1f:c7:a6:a3:6f:9b:39:64:9d:c6:a7:c0:4e:9d:3c:
                    65:c3:8e:78:e8:e1:f6:73:78:f7:73:d6:e2:82:24:
                    e7:22:19:29:5a:65:55:5e:ae:75:1a:7e:c7:0c:7b:
                    33:83:3c:00:36:f0:83:dd:44:c9:88:b3:e8:c5:21:
                    27:84:d7:06:58:63:08:69:95:ac:21:83:28:b4:b3:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F7:5A:D9:1E:80:B4:34:E2:A6:A2:E2:73:A2:DA:B9:73:08:18:F8
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32372e302f32342d3234203d3e20323133373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:40:8b:9f:f1:0c:65:09:fe:eb:91:56:60:fe:2b:81:f4:
         54:bc:79:c5:e0:3d:81:82:12:90:56:e2:06:a5:4a:18:b2:e4:
         11:08:93:6e:fb:b2:a3:63:a6:c4:d7:51:2a:ac:66:48:b9:42:
         a2:99:0c:60:e9:d3:ea:24:33:c7:41:72:7b:70:4a:25:96:29:
         c6:7e:1c:d1:3f:6c:d7:a5:a1:d8:65:f4:5d:2b:93:92:e2:cc:
         3b:aa:86:0f:fd:fa:1c:1e:8f:cb:5c:fe:06:62:27:b3:b6:2b:
         99:47:36:26:f6:5c:18:ac:8a:1c:ac:22:8f:1a:63:a9:d1:7d:
         6c:43:a7:9f:7c:12:ee:02:7f:2f:61:ae:5b:59:eb:9a:a1:7c:
         91:ef:e8:0f:97:93:5f:ff:55:a4:60:a7:58:b8:bf:dc:bc:c8:
         24:a0:46:ec:6c:22:dd:c3:97:fb:b1:0c:39:78:b9:b6:eb:52:
         4c:90:27:8c:39:5e:d8:da:85:d0:13:5d:0b:94:ee:2a:ac:85:
         15:f5:c2:65:4e:4a:2f:70:a5:90:77:86:70:85:9a:aa:c9:91:
         b6:a6:d4:b5:dc:c0:16:d9:0a:7c:4c:78:b5:16:4c:d2:6d:c2:
         cc:53:c1:d0:e0:06:98:f0:8d:98:39:d8:72:5e:e6:4a:41:0a:
         3a:5a:a5:85
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUbzh0Prlk2ncBgeuMZvgbPVO9hHIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUwNDIzMDUzNDU0WhcNMjYwNDIyMDUzOTU0
WjAzMTEwLwYDVQQDEyhCOUY3NUFEOTFFODBCNDM0RTJBNkEyRTI3M0EyREFCOTcz
MDgxOEY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dLU4WXQNpiG
FRtILFoaaGqNy0LUKHpX4PGbTGUElYGKwLjOdY4HrulCqkKCClyFOK7VbgE/2ZGG
K+ILYIvmMiJj2c7lRSQ/inuMtPoOwMUN8gV37Z6L+y4N4CQr/lmrdC4oe0FOOk67
diZRy1uEAccQL/Hq4/G4357CVSSveYCcOnVzSo9rmPYWgTQ3lILO+bID2jfIA3LW
8+aw6XzLMOjs1vLIAaedy7I2rzwWlU6x6WYfx6ajb5s5ZJ3Gp8BOnTxlw4546OH2
c3j3c9bigiTnIhkpWmVVXq51Gn7HDHszgzwANvCD3UTJiLPoxSEnhNcGWGMIaZWs
IYMotLOb9QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLn3WtkegLQ04qai4nOi2rlz
CBj4MB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzMxMzgzNTJlMzEzNzM3MmUzMjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMzMzczNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubEbMA0GCSqGSIb3DQEB
CwUAA4IBAQA6r0CLn/EMZQn+65FWYP4rgfRUvHnF4D2BghKQVuIGpUoYsuQRCJNu
+7KjY6bE11EqrGZIuUKimQxg6dPqJDPHQXJ7cEollinGfhzRP2zXpaHYZfRdK5OS
4sw7qoYP/focHo/LXP4GYieztiuZRzYm9lwYrIocrCKPGmOp0X1sQ6effBLuAn8v
Ya5bWeuaoXyR7+gPl5Nf/1WkYKdYuL/cvMgkoEbsbCLdw5f7sQw5eLm261JMkCeM
OV7Y2oXQE10LlO4qrIUV9cJlTkovcKWQd4ZwhZqqyZG2ptS13MAW2Qp8THi1FkzS
bcLMU8HQ4AaY8I2YOdhyXuZKQQo6WqWF
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:39:31 2025 by rpki-client