Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203633303235.roa
File:                     39352e3231342e3137362e302f32342d3234203d3e203633303235.roa (raw, json)
Hash identifier:          MoA5mg8wSFmKXAPC7nERqtSiOCG8HbiGud0Ft4eAO5c=
Subject key identifier:   7A:23:E3:C7:A5:74:2E:C1:E4:C6:12:89:BD:4C:78:E9:61:60:82:98
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       2DD22DFD4E254DBB85A4030873CA1B02C66389D1
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203633303235.roa
Signing time:             Wed 23 Apr 2025 05:39:10 +0000
ROA not before:           Wed 23 Apr 2025 05:34:10 +0000
ROA not after:            Wed 22 Apr 2026 05:39:10 +0000
asID:                     63025
IP address blocks:        95.214.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d2:2d:fd:4e:25:4d:bb:85:a4:03:08:73:ca:1b:02:c6:63:89:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:10 2025 GMT
            Not After : Apr 22 05:39:10 2026 GMT
        Subject: CN=7A23E3C7A5742EC1E4C61289BD4C78E961608298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:be:6f:1b:ab:7d:7c:5a:f0:e6:ef:36:14:
                    35:6f:f0:e3:c8:ae:43:88:bc:a3:2c:e7:e5:bf:da:
                    f6:ee:64:52:a0:71:b4:b7:0d:19:e1:60:3b:64:9b:
                    c9:fb:ba:1f:7b:27:ec:85:2f:c6:42:bc:84:99:2f:
                    9a:e5:0f:16:2d:5d:1a:1c:4b:b5:66:ce:56:11:4d:
                    e8:c4:ba:6c:cf:cc:21:03:51:bf:3e:32:f5:5a:da:
                    1f:b1:3f:65:0a:8e:ab:c7:02:d6:80:71:f2:73:3e:
                    e4:87:61:dd:99:63:09:0d:fd:eb:95:03:d1:5c:e0:
                    66:40:f3:04:18:1c:28:f3:2f:a8:32:37:96:0a:c7:
                    80:bb:10:cf:ed:ee:00:49:c0:a4:31:20:6a:be:2e:
                    c8:cf:5d:bc:c4:2f:ea:36:db:f5:87:cb:02:38:4b:
                    c8:d8:3f:1a:e4:ad:54:ab:58:7f:c7:57:58:73:f0:
                    0e:51:84:05:31:93:9b:61:a4:70:a1:a7:68:65:02:
                    de:b1:40:3b:6c:95:84:07:4e:b4:4b:d8:3e:ec:8e:
                    35:ce:0f:21:40:4a:56:eb:31:10:91:06:41:b7:de:
                    9d:dc:e8:80:bc:d4:3a:9b:9f:de:8c:22:ce:c0:41:
                    5c:c2:7e:d8:1e:d4:46:db:de:2b:88:b5:8a:66:8d:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:23:E3:C7:A5:74:2E:C1:E4:C6:12:89:BD:4C:78:E9:61:60:82:98
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:5c:84:83:1d:b6:5a:60:b4:d0:eb:3e:e1:f1:0d:8b:fe:
         87:28:36:30:06:1e:38:36:3f:2d:7f:19:7d:c1:15:f1:72:33:
         8c:0e:44:7f:f3:ba:25:3b:b4:aa:48:3a:44:c5:48:9f:85:e4:
         a3:2d:74:6e:06:b3:07:b4:a1:8d:a2:ff:b7:da:56:87:b3:47:
         bd:e6:8a:28:db:8d:28:85:5b:33:b1:62:1f:ed:6d:07:79:4a:
         c6:e2:f4:8a:8b:d2:1f:98:e2:4d:5a:d3:ab:ac:c8:69:3e:f3:
         59:c6:fc:7b:c0:db:b6:34:5f:3f:c3:e5:6c:ff:d5:60:a7:67:
         2a:45:d2:96:07:be:54:27:96:e8:92:9e:66:be:72:d7:c6:42:
         06:30:2a:a9:a1:31:7c:6e:e4:59:7f:35:82:de:07:1b:90:92:
         8e:e3:c8:52:4b:f8:78:7b:89:d5:da:6a:30:28:43:d4:58:96:
         c4:6c:10:a0:61:d8:87:33:68:22:94:24:35:b6:c8:41:ce:09:
         77:6a:4f:48:c4:d6:ed:46:d2:f2:fb:86:6e:17:a5:a6:d9:0d:
         98:4f:c0:4c:63:10:28:96:7e:93:2f:6a:72:5f:a1:3c:5c:48:
         f1:e1:ea:a3:40:46:3e:42:2f:ee:83:93:f0:ee:1e:e0:44:33:
         5a:7c:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:32:12 2025 by rpki-client