Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20343031343330.roa
File:                     39352e3231342e3137362e302f32342d3234203d3e20343031343330.roa (raw, json)
Hash identifier:          at7gMxjngtM6+gSuB0g9DHQer9qHrzyGcSFgovIoR+k=
Subject key identifier:   E1:C8:F1:FC:68:4E:19:6B:7C:12:11:D7:BE:C8:18:B4:91:03:3B:BC
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       1BD852401D869F56D9E4EF53620B15B15A2BC591
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20343031343330.roa
Signing time:             Sat 14 Jun 2025 19:33:24 +0000
ROA not before:           Sat 14 Jun 2025 19:28:24 +0000
ROA not after:            Sat 13 Jun 2026 19:33:24 +0000
asID:                     401430
IP address blocks:        95.214.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d8:52:40:1d:86:9f:56:d9:e4:ef:53:62:0b:15:b1:5a:2b:c5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 14 19:28:24 2025 GMT
            Not After : Jun 13 19:33:24 2026 GMT
        Subject: CN=E1C8F1FC684E196B7C1211D7BEC818B491033BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:eb:b2:b1:b1:a5:9b:f9:57:f5:84:62:90:
                    0f:ec:f7:71:7e:dd:12:f2:9d:eb:34:be:8e:2f:8e:
                    43:0a:0b:76:e3:10:e8:e4:65:24:03:ee:61:f6:0e:
                    00:1e:e2:37:94:e9:f3:6c:4e:7e:04:57:56:6d:d4:
                    8a:ed:6e:38:6d:e3:d0:00:7c:f8:e1:62:04:05:79:
                    0d:be:24:59:2c:f4:2a:2c:49:4d:34:48:b4:f8:d7:
                    bd:f1:cd:5a:0f:86:95:0d:ff:21:0f:74:6e:a0:82:
                    9d:fe:37:ec:ca:a4:26:ca:7f:18:ad:1d:21:c8:b3:
                    1f:d2:43:27:93:8b:44:2e:3c:92:74:2f:85:04:a9:
                    77:cc:44:49:8b:2a:fe:09:4f:58:39:9b:d8:9d:42:
                    c5:b0:99:5b:d9:4d:bb:f8:a8:0b:b3:ff:e0:d9:30:
                    cb:55:77:ab:7c:6f:f2:8d:f1:83:b6:74:0d:7e:94:
                    13:83:8d:6f:40:8c:fa:ac:30:3e:a2:64:ad:80:48:
                    37:52:9a:c9:65:8a:78:f2:68:1f:77:76:3e:14:ed:
                    0b:96:65:c0:3f:05:9b:a4:6e:70:34:b3:72:2c:9f:
                    bc:a8:e1:75:c2:b5:95:c1:52:29:76:13:79:74:13:
                    62:07:42:60:b4:3e:be:61:9c:ec:e4:12:8f:f5:01:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C8:F1:FC:68:4E:19:6B:7C:12:11:D7:BE:C8:18:B4:91:03:3B:BC
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20343031343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:92:0e:4b:ad:9f:b6:cd:9b:0b:93:3a:49:af:32:1e:a8:a5:
         c1:ea:e3:51:f8:5a:14:2e:30:28:9e:5a:6b:9f:d8:4b:66:5e:
         10:db:47:06:4b:db:9b:24:4b:43:d1:6c:c0:f9:2b:b3:5b:da:
         07:0b:8d:0e:15:55:26:8d:52:f9:68:f3:d2:fb:2f:ec:82:87:
         29:20:66:20:83:f3:f4:63:bb:e1:b1:0e:7a:ce:bd:02:db:c3:
         78:e5:dd:e4:63:8d:5f:97:d8:54:31:45:04:63:cd:57:4f:eb:
         37:c9:5f:bc:ff:48:1a:0d:da:aa:cc:cd:33:81:1c:c1:44:a6:
         f3:80:9a:f2:15:47:d5:86:72:1c:09:43:f6:03:7f:46:66:90:
         eb:fb:cf:7c:36:c8:91:6b:c9:94:12:cf:55:43:d4:ba:72:ac:
         39:33:6d:8d:d1:d0:8d:3f:78:0e:24:a2:03:a7:08:8f:8c:2c:
         94:06:8d:65:09:c7:27:54:ff:7c:ef:80:87:81:bf:93:6d:73:
         22:ec:97:7d:39:41:04:09:6f:bb:ae:05:85:a9:22:a6:45:0c:
         4a:dc:9b:d4:7d:b5:00:31:78:9b:d7:9b:a5:22:02:1f:d2:c1:
         b2:df:c9:d0:28:36:fe:dd:40:f3:94:b1:43:4d:a6:bd:86:ba:
         33:5e:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:28:22 2025 by rpki-client