Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e20313938353834.roa
File:                     39312e3233382e39322e302f32342d3234203d3e20313938353834.roa (raw, json)
Hash identifier:          ELK46FWbwuNd6vZ31CA5VcSx3URzs14ICQYaIG4uPEE=
Subject key identifier:   4C:0C:F5:03:1A:CE:24:10:5E:40:14:B0:6A:41:32:CC:5C:D2:D9:1B
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       079657F49621D60C8AB0E8ADF87DD17FD5F5295C
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e20313938353834.roa
Signing time:             Fri 25 Jul 2025 12:12:51 +0000
ROA not before:           Fri 25 Jul 2025 12:07:51 +0000
ROA not after:            Fri 24 Jul 2026 12:12:51 +0000
asID:                     198584
IP address blocks:        91.238.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 04:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:96:57:f4:96:21:d6:0c:8a:b0:e8:ad:f8:7d:d1:7f:d5:f5:29:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul 25 12:07:51 2025 GMT
            Not After : Jul 24 12:12:51 2026 GMT
        Subject: CN=4C0CF5031ACE24105E4014B06A4132CC5CD2D91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:f4:ef:dc:46:71:a4:fb:15:9e:ba:9c:4f:
                    3e:cf:4a:0e:52:c7:f5:9f:fc:36:6c:b6:bf:a8:61:
                    41:24:4e:80:c3:07:c4:98:2a:2f:f7:d8:12:26:35:
                    ee:af:00:b8:c3:8a:3e:55:eb:f0:c7:25:fb:91:f4:
                    d4:dc:2d:76:79:0c:0f:0a:66:93:56:d8:3d:14:b7:
                    a1:f2:d7:17:f5:98:5b:e3:37:8b:54:4e:f0:76:f4:
                    ac:75:05:01:4f:ae:68:3d:d4:71:de:a4:b8:39:b9:
                    a8:da:d5:00:be:de:a9:4c:54:f2:57:26:1b:c8:bb:
                    1d:9f:6c:9d:33:61:8d:28:0d:4b:83:31:a8:52:3c:
                    10:5a:33:1c:e5:bb:01:b3:9f:03:d4:9e:ba:25:2a:
                    a9:00:16:2d:be:fa:f9:68:52:83:01:be:60:69:b2:
                    13:72:0c:d8:ff:3c:e0:05:a3:d9:b4:42:1f:57:c5:
                    7a:d7:32:09:55:11:5a:55:5c:17:28:75:9c:28:7e:
                    b1:45:a4:e7:3d:27:79:f1:d4:a7:87:a0:19:35:91:
                    10:e2:0d:35:f9:15:a8:5c:80:22:67:43:01:73:2c:
                    a6:09:76:f8:09:68:fc:a4:bb:4c:64:20:13:c4:6e:
                    6b:d7:38:54:1f:58:d4:76:2a:d9:3a:31:5a:11:a8:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:F5:03:1A:CE:24:10:5E:40:14:B0:6A:41:32:CC:5C:D2:D9:1B
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e20313938353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:59:01:79:fc:75:77:4f:9c:28:9e:4a:0f:01:4d:8f:22:
         98:14:a8:2a:02:45:dd:d7:c1:0f:7f:b1:12:22:e1:38:e8:74:
         85:35:e3:a8:9b:f4:96:a4:63:19:9d:b7:1f:31:30:53:4b:a2:
         74:87:c0:a8:ce:97:f5:1b:e2:53:9d:db:78:b6:d8:93:89:3d:
         b9:80:38:2f:26:a2:c6:37:69:7f:a2:9b:19:02:4d:2c:c1:6d:
         e6:52:00:e3:d1:b2:20:21:27:76:48:9d:a3:78:c5:a8:2e:70:
         28:cf:a2:93:41:71:71:f6:05:9a:4d:82:bf:20:41:da:ab:8a:
         00:1c:ff:a7:d0:27:18:01:e8:62:02:b2:d4:b4:49:85:5d:4a:
         0b:ff:2e:9e:6c:4d:f1:7d:ac:91:c5:2f:c4:92:74:50:bf:ca:
         1d:0c:74:c2:18:b6:8a:b4:66:da:ad:4a:f0:46:0c:36:37:14:
         23:b5:85:8c:81:09:2b:0e:c3:38:93:68:f6:21:f6:4d:44:5f:
         f2:80:41:69:bc:e5:bf:42:2c:0e:63:e9:f6:ca:23:15:ee:59:
         41:85:f8:3f:33:19:40:4d:66:cb:fa:a6:12:31:9a:c9:d2:ce:
         a2:72:ff:24:1a:00:cf:4e:7d:f7:68:d9:82:be:89:61:e8:cf:
         63:b8:50:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:27:58 2025 by rpki-client