Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39332e302f32342d3234203d3e203439393831.roa
File:                     39312e3233382e39332e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          B//Rdij6o/rWs+WZhKxW8bClnlqlSdc+Gc/OkciGJsY=
Subject key identifier:   9D:4C:1A:F8:88:AA:32:DD:62:AE:E7:74:A6:37:2D:AF:3F:A5:56:02
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       07FCFBA58893090BDE4FA11F303B17126B93546D
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39332e302f32342d3234203d3e203439393831.roa
Signing time:             Wed 23 Apr 2025 05:39:15 +0000
ROA not before:           Wed 23 Apr 2025 05:34:15 +0000
ROA not after:            Wed 22 Apr 2026 05:39:15 +0000
asID:                     49981
IP address blocks:        91.238.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fc:fb:a5:88:93:09:0b:de:4f:a1:1f:30:3b:17:12:6b:93:54:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:15 2025 GMT
            Not After : Apr 22 05:39:15 2026 GMT
        Subject: CN=9D4C1AF888AA32DD62AEE774A6372DAF3FA55602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:ce:e8:06:79:da:e6:eb:60:80:ec:08:3f:
                    6d:9b:54:be:b2:7b:9a:4b:6f:67:d8:53:a4:df:40:
                    f9:86:47:0a:ee:3f:5f:d2:91:31:90:8c:28:51:35:
                    ae:81:c4:f9:6d:c0:94:b3:70:bd:e2:a8:22:6d:68:
                    68:64:cc:be:e6:72:d4:cf:e0:33:af:c6:a0:43:c4:
                    5c:2e:e6:29:23:d2:d5:73:2c:b2:f0:c2:7d:c3:61:
                    2e:dc:ea:5d:f3:b1:62:ec:aa:a0:c5:dc:c5:83:f2:
                    90:1a:43:a1:f8:0d:a5:64:b1:92:37:1f:33:57:40:
                    53:4a:34:1e:d2:d4:bf:76:43:87:75:70:b6:1c:f5:
                    5a:9b:43:e9:14:5e:fa:2b:ec:c3:9b:f2:cd:47:1f:
                    b1:df:a0:49:9c:be:39:11:f0:59:90:79:d4:d9:e9:
                    db:ba:c7:19:36:84:ce:db:5e:79:eb:e3:d6:a8:dd:
                    82:fb:25:d2:d9:c3:b0:df:b4:5d:ce:8f:35:80:4a:
                    3f:61:51:01:4e:25:8c:e5:ad:d4:aa:cf:73:03:a1:
                    ce:65:ed:f0:99:0a:0d:fa:87:75:6a:59:6d:ad:82:
                    4f:bd:30:1e:6d:72:90:5f:23:a3:61:c8:33:e5:21:
                    03:03:6d:b5:7e:3f:3b:be:89:ca:ea:75:a8:c8:71:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4C:1A:F8:88:AA:32:DD:62:AE:E7:74:A6:37:2D:AF:3F:A5:56:02
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39332e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:71:d1:23:45:30:9b:44:9c:8a:3c:31:6d:9c:2a:a4:28:b6:
         1d:92:80:c4:8d:60:62:5a:29:99:a6:fd:af:b5:5b:83:1e:d4:
         b7:c4:56:08:61:32:37:28:6c:45:9c:cc:9f:d3:f1:f5:a9:44:
         eb:a3:e8:aa:1a:6a:7b:21:c4:fe:d6:82:4b:7a:bd:c0:26:49:
         b5:f8:81:4a:50:ce:65:30:f3:5e:17:fc:99:b0:61:a8:44:9a:
         8c:7c:c9:6e:e8:20:0f:c4:b4:c0:d6:c6:f5:e5:bf:f0:a0:66:
         69:8a:4c:77:78:95:bd:4a:14:e8:18:35:7a:77:61:c3:cb:a9:
         4e:ba:4d:9c:6a:d9:97:8b:a2:9c:0e:06:b6:45:75:e9:9c:f8:
         34:8e:c5:ab:81:9e:a5:20:99:7b:e9:3a:af:ec:7c:55:d4:29:
         eb:61:1f:c4:4c:04:c5:61:c2:b9:3d:96:dc:77:2d:1b:03:2a:
         00:a9:2f:dd:09:72:89:02:51:d7:51:44:68:04:f8:89:5e:95:
         ea:93:71:c7:b9:9b:64:d1:b4:29:45:27:6b:98:21:68:8b:83:
         5d:f7:53:ab:63:05:da:fe:0e:7d:8b:4b:b8:dd:12:68:39:a6:
         21:2b:e9:b9:fe:e0:73:ab:83:4c:41:32:00:78:ed:a4:20:ee:
         38:e4:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:21:55 2025 by rpki-client