Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134382e302f32342d3234203d3e20313939303538.roa
File:                     39312e3233392e3134382e302f32342d3234203d3e20313939303538.roa (raw, json)
Hash identifier:          p9RiPhTQoM/IwQX+Qt2Zw/ahgMlZzAeURbZz9IvKgFM=
Subject key identifier:   71:0F:65:87:2F:91:A7:1F:F3:4B:E7:31:EA:F2:E2:EE:1D:0B:FD:C4
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       0B993C1BF68488333F052E9083AD2A34976C221D
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134382e302f32342d3234203d3e20313939303538.roa
Signing time:             Wed 23 Apr 2025 05:38:58 +0000
ROA not before:           Wed 23 Apr 2025 05:33:58 +0000
ROA not after:            Wed 22 Apr 2026 05:38:58 +0000
asID:                     199058
IP address blocks:        91.239.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:99:3c:1b:f6:84:88:33:3f:05:2e:90:83:ad:2a:34:97:6c:22:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:33:58 2025 GMT
            Not After : Apr 22 05:38:58 2026 GMT
        Subject: CN=710F65872F91A71FF34BE731EAF2E2EE1D0BFDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:9b:47:84:49:e0:bc:d9:55:85:b1:8b:19:
                    76:0d:d7:d2:a5:02:73:e8:26:86:31:a1:08:d3:bf:
                    58:e8:b7:11:30:36:a7:c2:83:fb:c1:82:4c:77:b7:
                    d1:40:c5:04:e4:79:b0:38:2e:92:f7:8f:67:a3:0e:
                    ac:11:09:69:d2:9b:24:db:b3:98:88:53:b8:13:34:
                    13:b0:31:5b:05:40:e3:ee:f9:78:98:67:62:15:4e:
                    47:49:ab:0a:da:3a:c0:f3:91:ea:b5:38:75:47:0b:
                    a1:1b:fe:8f:5a:a6:2e:36:18:0e:fa:9d:2e:b4:77:
                    b1:63:d2:29:d4:4e:f7:31:59:87:b7:ed:a4:50:8b:
                    7b:77:57:5d:08:72:1d:36:6b:da:35:48:c4:27:65:
                    59:90:ce:de:62:78:d8:d5:be:74:71:fb:d5:87:ee:
                    be:82:1e:df:b8:49:d1:74:0a:96:46:47:4c:d2:bf:
                    f0:08:28:53:b1:e8:7e:9b:d5:c6:5e:06:c0:ca:84:
                    9f:35:a1:f8:a8:32:a8:a8:69:b1:86:e8:c3:0a:87:
                    9f:2a:2f:b9:05:b1:56:3f:97:21:f7:a0:81:4f:d9:
                    07:0d:33:42:55:c1:65:60:64:8c:3e:15:bf:87:d7:
                    d0:f7:74:a1:f3:f5:c1:ae:3e:5b:25:4c:8f:5f:1e:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:65:87:2F:91:A7:1F:F3:4B:E7:31:EA:F2:E2:EE:1D:0B:FD:C4
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134382e302f32342d3234203d3e20313939303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:2a:c0:d2:68:bf:15:2b:a3:25:33:ff:3c:0f:41:7c:63:
         39:5e:12:92:d7:b2:8c:af:d2:31:a1:93:4b:cc:22:07:81:f4:
         3b:ae:e4:f6:8d:90:9a:22:66:b9:b2:39:d6:fe:54:68:89:e5:
         13:18:6e:08:8b:d1:75:46:86:e5:b7:bb:9a:42:81:a9:da:bc:
         e6:27:34:28:e2:eb:cc:f0:08:18:c9:12:49:db:ca:d5:7e:fb:
         db:d7:fa:61:ee:d9:4e:2c:48:fe:a7:87:42:2f:18:81:26:9d:
         b5:4b:ac:c4:e7:7d:8b:bb:32:d6:de:71:3e:db:41:98:7e:eb:
         36:46:9a:3f:7f:63:4d:c1:f8:f0:92:c6:e6:84:55:e7:73:9c:
         70:87:cd:cc:0f:1a:56:f9:3b:ad:60:37:bc:31:76:aa:b5:21:
         e1:d8:71:4d:d1:e1:ff:0e:c5:ab:e0:ec:87:aa:43:6e:a3:04:
         bb:48:00:13:ff:89:13:13:dc:ca:88:01:fd:15:e4:9c:0a:1c:
         0a:3c:c2:6e:39:a6:e6:0a:9f:2e:08:a6:09:99:37:d3:0a:81:
         33:9f:1a:e3:41:b0:46:35:a6:23:ee:37:f2:7f:0b:5a:75:19:
         78:91:45:c2:5a:e7:1c:93:3f:e8:4b:40:14:4e:db:a7:07:aa:
         0e:f7:a8:b3
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUC5k8G/aEiDM/BS6Qg60qNJdsIh0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUwNDIzMDUzMzU4WhcNMjYwNDIyMDUzODU4
WjAzMTEwLwYDVQQDEyg3MTBGNjU4NzJGOTFBNzFGRjM0QkU3MzFFQUYyRTJFRTFE
MEJGREM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiabR4RJ4LzZ
VYWxixl2DdfSpQJz6CaGMaEI079Y6LcRMDanwoP7wYJMd7fRQMUE5HmwOC6S949n
ow6sEQlp0psk27OYiFO4EzQTsDFbBUDj7vl4mGdiFU5HSasK2jrA85HqtTh1Rwuh
G/6PWqYuNhgO+p0utHexY9Ip1E73MVmHt+2kUIt7d1ddCHIdNmvaNUjEJ2VZkM7e
YnjY1b50cfvVh+6+gh7fuEnRdAqWRkdM0r/wCChTseh+m9XGXgbAyoSfNaH4qDKo
qGmxhujDCoefKi+5BbFWP5ch96CBT9kHDTNCVcFlYGSMPhW/h9fQ93Sh8/XBrj5b
JUyPXx5RVQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFHEPZYcvkacf80vnMery4u4d
C/3EMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzM5MzEyZTMyMzMzOTJlMzEzNDM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTM5MzAzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++UMA0GCSqGSIb3DQEB
CwUAA4IBAQANzSrA0mi/FSujJTP/PA9BfGM5XhKS17KMr9IxoZNLzCIHgfQ7ruT2
jZCaIma5sjnW/lRoieUTGG4Ii9F1Roblt7uaQoGp2rzmJzQo4uvM8AgYyRJJ28rV
fvvb1/ph7tlOLEj+p4dCLxiBJp21S6zE532LuzLW3nE+20GYfus2Rpo/f2NNwfjw
ksbmhFXnc5xwh83MDxpW+TutYDe8MXaqtSHh2HFN0eH/DsWr4OyHqkNuowS7SAAT
/4kTE9zKiAH9FeScChwKPMJuOabmCp8uCKYJmTfTCoEznxrjQbBGNaYj7jfyfwta
dRl4kUXCWucckz/oS0AUTtunB6oO96iz
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:30:37 2025 by rpki-client