Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e203432383331.roa
File:                     39312e3233392e3134392e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          27s5Nh9QrQsBxzLYbL7a6tD2iU3TQJJ/xjVRUZMt8dc=
Subject key identifier:   9E:F9:8A:1C:68:81:8F:B1:3E:EE:98:32:63:32:72:35:C3:2A:79:D8
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6D4B5AD533341420CA7536E24100B17D0E3AD951
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e203432383331.roa
Signing time:             Wed 23 Apr 2025 05:39:17 +0000
ROA not before:           Wed 23 Apr 2025 05:34:17 +0000
ROA not after:            Wed 22 Apr 2026 05:39:17 +0000
asID:                     42831
IP address blocks:        91.239.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4b:5a:d5:33:34:14:20:ca:75:36:e2:41:00:b1:7d:0e:3a:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:17 2025 GMT
            Not After : Apr 22 05:39:17 2026 GMT
        Subject: CN=9EF98A1C68818FB13EEE983263327235C32A79D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:17:82:92:99:b2:b6:4b:3a:20:9b:72:c6:
                    9c:f6:11:10:c6:9e:bd:4e:ba:33:40:5a:58:86:4e:
                    7b:bf:cc:d9:23:93:f9:49:1b:ac:11:95:45:23:0a:
                    72:3c:f0:ef:33:62:29:2b:b9:52:31:71:7a:37:86:
                    a3:5e:42:20:ba:28:41:d4:94:c3:1a:3a:7c:93:83:
                    8f:24:d5:aa:cc:dd:f1:ec:21:22:b0:a1:fe:1a:c4:
                    f2:62:fc:90:48:57:53:ba:24:9a:e4:29:55:ae:4b:
                    72:35:3a:51:b2:3a:42:41:53:8f:31:46:f6:2e:04:
                    26:0d:a6:79:9e:8b:6c:36:5d:21:a4:2a:47:b1:10:
                    04:a2:8d:3d:2f:0c:f0:09:50:65:c2:ea:8d:9c:d7:
                    e7:e1:b3:ad:c2:9e:5b:31:ec:8f:28:21:f7:85:dc:
                    40:d3:39:e5:87:2d:7a:06:3c:a8:c3:ab:f4:fd:f0:
                    09:10:d0:5e:90:7e:c0:66:43:ff:5b:55:ef:8f:6a:
                    55:b2:22:86:c8:bc:8a:36:69:9d:f0:d5:2f:0e:93:
                    3b:6b:ac:c2:a6:06:ae:f7:6d:c3:37:9f:c5:1d:78:
                    3c:31:ff:4a:36:61:82:49:04:1d:e6:e6:2f:7c:05:
                    00:41:a3:71:3b:45:68:25:c0:dd:a7:7e:98:37:f7:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F9:8A:1C:68:81:8F:B1:3E:EE:98:32:63:32:72:35:C3:2A:79:D8
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c0:13:8a:21:32:43:d8:bb:b8:67:ca:57:b0:3c:a7:45:43:
         e4:96:6a:ff:a7:8b:3c:50:e3:7a:8e:16:f4:39:ea:f9:b6:99:
         00:cf:73:26:91:71:54:d4:48:eb:b6:1e:4f:9e:b4:bb:9e:b6:
         1c:56:9b:fa:c4:d8:b0:8c:ef:88:05:3d:0f:39:b0:d3:a2:69:
         aa:43:80:fe:23:aa:f4:95:b3:c7:00:c8:7f:24:dc:54:fc:f0:
         7e:c6:93:a5:0a:4f:58:a4:34:7c:2c:6f:d5:ac:d1:81:21:9f:
         17:05:2e:3d:eb:40:4a:d7:a5:6d:6e:61:61:4f:5c:c4:38:93:
         ee:58:b0:8c:ce:21:e9:47:5b:c8:35:d4:96:87:65:2c:d9:62:
         24:6d:da:21:bf:78:9b:de:77:9c:98:08:2c:41:55:5b:70:01:
         25:8a:11:fb:eb:ec:1f:2c:45:e4:45:06:a2:9e:09:85:46:69:
         76:d2:c4:97:be:b8:40:3e:4b:4b:a1:2b:29:38:e1:34:b9:9d:
         ae:55:6f:41:57:82:67:44:a4:c3:f0:4d:51:2e:59:46:2b:cf:
         46:a9:fd:b1:14:5f:d6:89:e0:7a:d2:1c:69:bb:36:ac:9c:d1:
         a9:15:2e:8b:81:ca:ec:a8:fe:51:85:5f:de:43:c2:32:12:54:
         4c:f8:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:13 2025 by rpki-client