Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32332d3233203d3e20383334.roa
File:                     3139342e3137392e3134362e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier:          4i9Y6VXclWJCF9gEG9BwQR56/WAExHZmOay7SpJWnlo=
Subject key identifier:   86:DE:4F:42:31:A6:AB:E3:80:B6:4D:BC:16:54:B0:F8:F1:34:93:D2
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       3A07EA6286C9D01E47368C3E8222D25D5AFA4F89
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32332d3233203d3e20383334.roa
Signing time:             Wed 23 Apr 2025 05:39:30 +0000
ROA not before:           Wed 23 Apr 2025 05:34:30 +0000
ROA not after:            Wed 22 Apr 2026 05:39:30 +0000
asID:                     834
IP address blocks:        194.179.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:ea:62:86:c9:d0:1e:47:36:8c:3e:82:22:d2:5d:5a:fa:4f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:30 2025 GMT
            Not After : Apr 22 05:39:30 2026 GMT
        Subject: CN=86DE4F4231A6ABE380B64DBC1654B0F8F13493D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:02:d8:be:1f:ee:48:8a:76:98:5b:49:55:
                    7f:58:9b:e7:c0:d0:6e:67:8a:d4:d7:f0:1b:73:b7:
                    c5:8a:0c:21:96:fc:a3:23:88:d6:1d:18:27:bb:08:
                    38:cf:a2:f5:cd:e8:03:80:e6:01:fb:da:f0:83:f4:
                    d8:46:c4:8d:70:85:9c:c1:d7:29:15:e5:ef:b6:cc:
                    f4:88:86:4d:bb:6e:0d:7a:f6:6a:17:75:09:e3:c1:
                    11:73:13:a6:7b:bb:26:2f:f3:5c:e3:22:fb:2c:bc:
                    14:a9:24:b2:ac:ae:2a:21:77:f9:69:b8:b8:42:37:
                    d9:13:d3:9d:78:75:e4:f1:2e:0c:bc:35:2b:11:b1:
                    85:4f:00:cd:2e:d3:31:8f:23:91:de:38:74:5f:2f:
                    fe:1a:35:72:b4:25:42:0a:72:7b:78:8f:40:5a:10:
                    52:97:37:9b:75:f4:68:92:6a:f2:6d:70:53:c3:2c:
                    9b:37:3d:a9:0f:67:4d:67:e6:fb:fa:49:23:1a:66:
                    97:8c:d1:d8:7d:f8:62:ef:ef:7b:0a:fc:e4:96:d7:
                    4e:48:11:c9:fc:95:cd:c5:c6:0c:e7:0f:4b:f8:19:
                    3c:d0:c4:76:dc:5e:cf:b0:98:58:68:b4:d6:fb:93:
                    f8:d1:55:f8:01:18:1e:57:2f:d6:35:be:a4:83:cb:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DE:4F:42:31:A6:AB:E3:80:B6:4D:BC:16:54:B0:F8:F1:34:93:D2
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32332d3233203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:be:f4:d4:ec:f2:a1:46:88:24:66:32:77:f7:bf:c5:aa:cc:
         d4:6c:a7:a4:2d:e0:56:06:10:be:35:66:21:38:27:49:d6:94:
         61:75:c6:56:94:9a:8b:24:78:11:1e:ca:e8:81:66:e2:f9:65:
         7f:ad:d3:2a:6b:ab:a0:78:50:81:59:a4:a6:5a:a1:3c:25:64:
         74:b7:e6:8d:b5:22:3d:6b:77:8b:05:88:f0:57:dd:46:9b:9d:
         40:cb:c9:ab:91:04:9e:7d:7f:d8:8d:2f:14:b4:89:0d:9c:02:
         c3:6c:e0:e0:15:51:1a:1c:fe:6c:cd:72:01:89:82:b9:b0:ae:
         e0:fe:b7:bf:2b:fe:fd:72:40:3c:d9:2c:70:24:28:8e:32:57:
         57:1b:d0:27:e1:dc:ce:93:16:86:e5:31:60:4b:b9:f7:c9:15:
         88:29:2c:89:f4:a5:0b:89:6e:dc:b3:13:1e:a2:e3:62:81:b8:
         87:dd:26:1f:8e:48:34:8d:35:ec:b9:d6:2b:6c:98:0c:35:64:
         33:85:34:a5:42:ae:3c:98:0c:75:a8:1e:ac:6b:aa:66:b4:47:
         54:b3:42:8d:33:3c:bc:1f:68:f3:d8:fe:a4:99:6a:44:01:20:
         bd:ef:ee:14:02:f1:ef:fc:ef:bd:3c:fb:f1:9f:48:45:86:28:
         9c:b7:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:56:28 2025 by rpki-client