Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20323036323836.roa
File:                     39352e3231342e3137372e302f32342d3234203d3e20323036323836.roa (raw, json)
Hash identifier:          z5uAcH6P8rS7/bBFHCmhxlCgNvwT2UBbsnVHu+izuQA=
Subject key identifier:   0A:73:32:4D:A7:E5:19:81:FA:38:5A:B2:EB:EC:7A:D8:2E:D1:2C:8C
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       5EFA5EF6CC44B9B7B712630D20AE36DEFD40B668
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20323036323836.roa
Signing time:             Wed 23 Apr 2025 05:38:52 +0000
ROA not before:           Wed 23 Apr 2025 05:33:52 +0000
ROA not after:            Wed 22 Apr 2026 05:38:52 +0000
asID:                     206286
IP address blocks:        95.214.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fa:5e:f6:cc:44:b9:b7:b7:12:63:0d:20:ae:36:de:fd:40:b6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:33:52 2025 GMT
            Not After : Apr 22 05:38:52 2026 GMT
        Subject: CN=0A73324DA7E51981FA385AB2EBEC7AD82ED12C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:e7:3c:3f:ab:df:f7:66:5b:85:2b:a4:cf:
                    84:59:35:b4:f8:9d:2a:37:e9:4f:31:9c:a5:19:76:
                    28:6a:24:2a:4d:65:dc:d4:e7:bf:3b:28:4b:66:74:
                    bd:7a:15:60:d9:97:2d:c4:18:18:f6:36:8f:34:17:
                    71:20:44:66:c8:b7:e8:b7:b0:81:d6:c9:42:b6:03:
                    17:93:ae:b6:e5:53:f6:50:cc:4f:c4:11:77:ef:4e:
                    fb:84:1d:a4:a3:af:d9:64:ac:3f:e3:f4:cf:ff:62:
                    e0:98:b0:10:c3:7b:fd:a0:d0:4c:e4:05:1c:d5:07:
                    31:cf:b0:84:50:1f:ef:fa:31:b5:90:e9:0b:91:5c:
                    b5:c3:0c:76:0b:a9:1c:b6:95:5e:b7:05:f9:06:c8:
                    3d:45:91:83:2e:cc:9c:b3:fc:ac:57:58:06:8d:33:
                    d7:76:be:28:7f:dd:40:52:14:06:37:95:0a:24:de:
                    34:50:ec:7e:81:48:b6:3f:02:b5:3d:69:b2:85:59:
                    4f:c9:f7:23:b2:a4:b3:17:7d:e4:28:49:f3:48:65:
                    50:17:73:f1:d6:d5:9a:76:76:a6:74:9a:ee:53:34:
                    fe:34:94:16:a2:88:8d:b0:9f:92:6a:12:cf:82:22:
                    bc:c3:91:7f:33:7d:19:94:83:e1:e4:24:3c:29:c4:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:32:4D:A7:E5:19:81:FA:38:5A:B2:EB:EC:7A:D8:2E:D1:2C:8C
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20323036323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:41:ca:1e:ef:83:a4:5e:2e:81:1b:1a:56:5a:5a:64:e7:87:
         12:46:03:93:16:29:c2:c3:15:27:ea:a8:2e:d1:26:68:d2:b7:
         7e:69:8c:0e:7c:1f:39:f1:8b:64:a4:a3:54:89:24:75:88:be:
         47:7f:dc:6c:68:81:ab:bf:c2:b9:22:18:bf:bf:70:43:7a:d8:
         bb:be:2e:14:43:4d:e2:d5:51:e0:e8:b8:5f:f4:c2:52:14:27:
         a9:e0:80:96:fc:75:e3:37:e3:fe:bd:28:5c:54:f2:b4:b4:58:
         03:6a:27:b6:d0:42:67:89:3b:79:01:d3:21:75:d9:a4:1e:c2:
         44:2c:2b:73:f4:61:a5:b9:27:79:13:70:d0:47:d6:bd:1e:c4:
         39:ff:0d:31:cf:aa:92:32:2d:6e:ab:af:a7:f5:37:aa:d5:c9:
         68:fb:98:7c:ef:f1:33:40:5e:c2:59:8b:b0:79:1a:24:18:6a:
         1b:46:7c:c7:f0:3f:9c:56:68:8b:e3:d2:fc:6f:24:4c:2c:61:
         98:5a:8a:c4:9d:38:c3:97:d2:fe:1e:b1:5c:fb:0e:2e:f2:59:
         df:1a:90:41:bc:3b:28:a6:5c:e9:68:e7:c9:98:93:1b:d0:66:
         b5:58:ab:49:1f:14:71:ab:00:a1:58:ca:0a:7b:e0:29:2b:cb:
         80:1d:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:21:57 2025 by rpki-client