Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139362e302f32342d3234203d3e20343030303430.roa
File:                     39312e3234342e3139362e302f32342d3234203d3e20343030303430.roa (raw, json)
Hash identifier:          iHywTovBEzB/S/TpOVZ9TNP86S3zwfj34pjca2K8RrE=
Subject key identifier:   BE:3C:2C:75:06:78:53:9F:8E:18:4A:2D:E0:B0:35:A4:56:F1:15:ED
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       1D74EFEF4BBA4C2F91DDDECB741C9B9B7C5F656B
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139362e302f32342d3234203d3e20343030303430.roa
Signing time:             Wed 23 Apr 2025 05:39:36 +0000
ROA not before:           Wed 23 Apr 2025 05:34:36 +0000
ROA not after:            Wed 22 Apr 2026 05:39:36 +0000
asID:                     400040
IP address blocks:        91.244.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:74:ef:ef:4b:ba:4c:2f:91:dd:de:cb:74:1c:9b:9b:7c:5f:65:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:36 2025 GMT
            Not After : Apr 22 05:39:36 2026 GMT
        Subject: CN=BE3C2C750678539F8E184A2DE0B035A456F115ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:0e:93:62:e9:f0:f3:3a:d9:07:08:35:02:
                    49:fa:96:9f:df:75:b2:73:c1:f6:41:42:8d:f1:b3:
                    60:59:aa:9e:97:4d:0c:01:ca:1c:4e:50:0e:7f:02:
                    a6:90:58:56:78:53:6e:a9:99:59:fb:fb:dc:b4:14:
                    1d:3c:e2:b2:19:ad:ba:81:15:6b:75:c4:cc:3a:54:
                    12:13:af:92:69:3c:fc:8c:a1:3d:a8:40:f1:a7:b4:
                    9a:1a:98:fc:60:c7:ef:33:a0:34:c9:a7:a2:e9:70:
                    5f:10:82:f2:05:67:b5:d3:38:e0:fd:21:71:c9:5c:
                    8c:ca:b2:94:61:e7:10:2d:b6:6b:fa:24:c0:b8:34:
                    c8:23:a7:0c:bc:c3:03:18:e1:bd:22:69:c4:57:df:
                    1e:5d:46:1e:5e:69:2a:8d:69:b9:76:c3:1a:26:53:
                    5a:89:ab:4a:71:e1:2b:49:16:a8:c3:ef:98:07:db:
                    e8:12:1d:05:95:26:98:af:a5:c1:7c:45:0e:cc:08:
                    62:76:4c:6a:9e:ea:77:df:a3:e4:11:3a:17:c2:0d:
                    58:a5:f7:5b:57:20:8f:cf:40:20:cf:19:d3:f0:6c:
                    bf:0a:64:4a:25:31:fb:46:00:19:b4:61:f5:54:3a:
                    de:4e:21:3d:d1:5b:ef:db:7d:15:4e:53:d1:e7:ef:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3C:2C:75:06:78:53:9F:8E:18:4A:2D:E0:B0:35:A4:56:F1:15:ED
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139362e302f32342d3234203d3e20343030303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:93:a8:4a:11:f0:1e:81:b8:61:63:d0:65:b2:60:b0:38:fd:
         1f:d8:47:88:77:41:57:ec:66:d3:71:6a:4a:50:e5:04:7f:f6:
         aa:6c:5e:95:b3:2a:03:d6:b3:44:9b:c5:1b:26:55:94:e3:68:
         e3:04:78:1e:81:18:85:b0:7b:9c:b6:09:82:2b:bc:6e:5d:a5:
         71:09:4e:1c:d5:8d:73:d3:a0:08:0e:fd:46:ad:c7:09:43:48:
         3d:38:e1:cf:4d:e0:c3:55:a4:9a:06:d3:c5:f1:0e:16:d5:88:
         85:d8:53:d2:85:16:4a:2e:55:2a:07:f0:83:71:0c:48:b8:8b:
         d3:41:e7:52:85:7a:06:3c:e3:6b:40:34:c3:dc:6a:fd:4e:31:
         9c:97:9c:e0:1e:ea:53:d6:64:44:cc:5a:a8:f3:3b:d1:a0:15:
         1e:39:b9:1c:80:e7:0a:15:11:6a:ba:fa:75:d7:ea:6f:74:a1:
         fb:60:b8:f5:7e:9a:e7:6d:54:d9:a6:b7:ff:59:84:74:11:47:
         e9:20:56:84:11:b6:12:48:94:c4:a6:8b:49:8f:2d:42:3c:1c:
         da:0b:a0:ba:ff:d0:0d:1b:38:68:84:b1:9d:27:64:4a:8f:6c:
         0b:c4:3f:47:91:62:9f:83:85:3c:28:4f:07:e5:e5:ec:f9:01:
         f3:02:aa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:57 2025 by rpki-client