Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203339393434.roa
File:                     39352e3231342e3137362e302f32342d3234203d3e203339393434.roa (raw, json)
Hash identifier:          zDB8ObldGFkGGJxkxKHy/oqKI1C3QemGYpodl7ltakk=
Subject key identifier:   8A:1F:C7:2F:0C:6D:A0:7D:5D:0A:F5:E1:DF:F6:12:46:24:2E:3B:89
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       7A9637239E36460CCF4741C9AF375638E1B8B167
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203339393434.roa
Signing time:             Fri 14 Aug 2026 15:36:20 +0000
ROA not before:           Fri 14 Aug 2026 15:31:20 +0000
ROA not after:            Fri 13 Aug 2027 15:36:20 +0000
asID:                     39944
IP address blocks:        95.214.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:96:37:23:9e:36:46:0c:cf:47:41:c9:af:37:56:38:e1:b8:b1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug 14 15:31:20 2026 GMT
            Not After : Aug 13 15:36:20 2027 GMT
        Subject: CN=8A1FC72F0C6DA07D5D0AF5E1DFF61246242E3B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:37:e5:da:49:ac:5d:ff:48:1c:d8:26:76:
                    3d:bc:8f:52:3b:c1:ea:54:cf:d8:0f:bc:2d:21:34:
                    0f:50:5a:12:60:c0:5b:ca:59:ea:e8:3c:2e:34:9d:
                    ea:e2:fe:a6:87:18:70:65:61:08:62:b0:46:7b:7a:
                    cc:6d:af:d0:ab:3e:45:60:5a:4e:c9:aa:ce:aa:fe:
                    56:41:fe:16:91:d8:88:12:3c:3e:dc:96:13:b6:7e:
                    55:47:19:7a:1d:fa:49:c1:c0:29:ef:8f:cd:3b:c0:
                    e9:fc:93:55:de:4c:fb:d8:56:c5:42:1b:5f:21:11:
                    78:02:6e:b5:f0:35:37:df:fe:9f:a9:99:c2:78:c8:
                    ea:d5:38:f2:a0:ef:a3:98:29:5b:95:41:0b:52:88:
                    01:fc:6f:f3:68:eb:26:0c:e6:f1:bd:98:55:6a:87:
                    25:1b:26:3f:47:f0:9d:ed:a0:95:ed:bb:2d:74:35:
                    22:a5:f3:db:b0:5b:43:23:1f:16:c1:ef:76:32:89:
                    c8:a3:cb:49:ad:c8:20:bd:8d:db:a9:d0:25:58:bd:
                    62:1d:d3:fb:d9:ff:38:cc:e9:1a:d4:b0:a2:cc:e6:
                    9c:18:e8:79:96:56:39:b1:eb:75:56:cc:af:ae:53:
                    c8:ad:6c:55:b3:39:e6:15:93:8c:02:6d:ec:59:df:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:C7:2F:0C:6D:A0:7D:5D:0A:F5:E1:DF:F6:12:46:24:2E:3B:89
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203339393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:84:43:3c:7d:a6:82:77:66:00:7a:c8:6a:ff:f2:c8:eb:
         75:75:4c:a7:06:4f:02:cb:b5:2d:d3:13:3c:b9:90:6b:1d:53:
         5a:e6:3c:70:60:e8:81:30:8c:66:6d:48:f2:75:0a:ca:39:22:
         4d:72:47:f0:cb:6f:78:80:b4:e5:e5:04:9a:95:e2:cc:39:c1:
         74:9b:14:e0:aa:ee:63:55:49:f6:a1:ac:c3:4a:b5:42:0f:26:
         4e:09:9e:8f:17:2e:ef:45:92:74:f3:98:fa:03:ee:93:8f:99:
         3f:73:e3:d6:1e:df:dc:c9:3c:02:bd:29:f7:73:09:d1:3e:47:
         ab:08:ad:4c:54:57:b2:d6:6f:7c:24:7a:8a:49:94:b5:b0:05:
         06:c7:f5:ef:ce:03:11:b1:26:dc:22:b9:80:61:95:eb:60:f6:
         12:e4:84:bb:71:84:55:79:53:89:93:6f:9d:d4:a1:f9:1f:0c:
         dc:1c:52:57:e3:f0:8b:49:b1:ac:24:42:37:a4:0b:4d:84:42:
         ff:e4:f0:6b:c1:97:c2:10:72:76:cf:a4:dd:c3:68:df:b8:4d:
         8a:2c:63:52:a7:58:b5:33:ac:89:4c:8c:ec:79:9b:c4:b8:dd:
         15:8e:7a:23:d6:1e:c3:c8:25:40:31:7b:da:c2:89:50:4c:68:
         0c:73:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:26:06 2026 by rpki-client