Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e203232343339.roa
File:                     39352e3231342e3137372e302f32342d3234203d3e203232343339.roa (raw, json)
Hash identifier:          DaF2CkuNGpfEHHN1j/lQwiuu1a1TU4mm1T9ZAUYYJAQ=
Subject key identifier:   93:69:CA:18:A6:FF:8D:96:87:3A:1B:6F:BC:48:3D:74:EC:91:06:9E
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       013A3F75C07D44A172B4233B4EF607C6F2867361
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e203232343339.roa
Signing time:             Mon 19 May 2025 13:10:16 +0000
ROA not before:           Mon 19 May 2025 13:05:16 +0000
ROA not after:            Mon 18 May 2026 13:10:16 +0000
asID:                     22439
IP address blocks:        95.214.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 08:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3a:3f:75:c0:7d:44:a1:72:b4:23:3b:4e:f6:07:c6:f2:86:73:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: May 19 13:05:16 2025 GMT
            Not After : May 18 13:10:16 2026 GMT
        Subject: CN=9369CA18A6FF8D96873A1B6FBC483D74EC91069E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:9d:da:7b:ab:44:24:6e:17:52:11:50:8c:
                    39:bb:bf:b1:44:47:26:2b:94:79:5c:a2:40:42:77:
                    ac:a4:3a:1d:f6:89:55:ec:75:12:fd:9b:d8:66:1c:
                    c0:da:9d:07:c6:94:93:42:d8:fb:ea:f4:f8:4d:c8:
                    c6:83:8d:e9:07:a2:8a:95:f4:46:42:0b:15:47:b2:
                    45:f7:7c:10:4c:50:6f:bd:bf:22:d9:0a:3a:01:fe:
                    90:3b:bd:37:f6:b1:f5:cf:4b:de:09:7e:5b:aa:36:
                    03:ae:2a:3b:12:11:18:9f:13:29:b8:1e:e7:59:a0:
                    1a:06:f7:20:4c:77:25:9d:93:d7:c9:18:5d:15:c1:
                    2b:a9:8d:33:c3:ec:7b:3f:22:74:ed:2f:80:6d:ea:
                    a4:3c:18:0a:e0:c2:88:ee:7e:0f:0a:b7:bb:38:13:
                    d1:c8:b9:b8:35:67:ee:27:0a:5f:6d:86:a2:7b:d1:
                    3d:2b:74:4d:78:eb:90:26:64:2f:e3:9e:ef:d8:47:
                    20:5c:38:a7:c1:44:52:d4:a9:e9:52:2e:38:b1:25:
                    25:7f:53:d2:49:e2:66:8c:04:ee:10:d0:eb:62:3c:
                    ec:12:de:f7:85:b4:e2:b2:95:a1:ae:ba:80:b3:82:
                    55:73:00:97:b5:e5:ce:cd:08:b6:0d:f4:82:2f:30:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:69:CA:18:A6:FF:8D:96:87:3A:1B:6F:BC:48:3D:74:EC:91:06:9E
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e203232343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:97:91:51:53:da:c9:92:c0:8b:54:b7:3a:f3:b6:64:1f:c1:
         06:cf:c7:d5:80:64:e6:17:f9:7a:4d:3e:23:1a:8b:af:24:b3:
         c5:c6:b6:9c:9a:74:e6:ac:1f:58:6c:24:d8:9e:60:71:65:e8:
         0b:05:27:8b:39:17:e4:e9:61:69:ef:65:3d:83:8e:95:a8:d3:
         0f:3b:e1:6f:2d:47:e5:86:ad:47:b2:b6:47:97:37:d1:51:56:
         16:37:7a:87:85:ae:c7:6f:fd:8b:1d:23:47:5f:7f:d4:08:5c:
         e0:5f:14:c2:b7:ec:bd:f3:8c:84:34:d9:8d:28:fb:a7:22:95:
         17:03:9b:b8:0f:9f:7b:6a:97:fd:fb:3b:12:9f:98:03:d7:a8:
         c4:57:47:b5:ac:86:91:84:19:1f:24:d8:c9:49:c2:65:b8:a7:
         29:2a:a5:80:f4:a1:70:ad:62:ab:06:70:8b:34:8c:61:38:3c:
         17:58:dc:02:8f:5a:68:aa:e9:23:af:d8:9d:66:36:ff:3a:c7:
         f6:c8:86:9c:ec:a8:3e:c9:4d:ac:68:50:25:1c:e0:d0:e2:f5:
         a4:61:59:4c:76:53:8b:7b:be:cb:82:fe:2e:5f:78:8e:77:47:
         ee:20:6f:c1:1e:57:ed:ab:9d:eb:8f:29:3a:43:00:fb:62:03:
         2b:d3:34:2e
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUATo/dcB9RKFytCM7TvYHxvKGc2EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUwNTE5MTMwNTE2WhcNMjYwNTE4MTMxMDE2
WjAzMTEwLwYDVQQDEyg5MzY5Q0ExOEE2RkY4RDk2ODczQTFCNkZCQzQ4M0Q3NEVD
OTEwNjlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Cd2nurRCRu
F1IRUIw5u7+xREcmK5R5XKJAQnespDod9olV7HUS/ZvYZhzA2p0HxpSTQtj76vT4
TcjGg43pB6KKlfRGQgsVR7JF93wQTFBvvb8i2Qo6Af6QO7039rH1z0veCX5bqjYD
rio7EhEYnxMpuB7nWaAaBvcgTHclnZPXyRhdFcErqY0zw+x7PyJ07S+AbeqkPBgK
4MKI7n4PCre7OBPRyLm4NWfuJwpfbYaie9E9K3RNeOuQJmQv457v2EcgXDinwURS
1KnpUi44sSUlf1PSSeJmjATuENDrYjzsEt73hbTispWhrrqAs4JVcwCXteXOzQi2
DfSCLzB+TwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJNpyhim/42Whzobb7xIPXTs
kQaeMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzM5MzUyZTMyMzEzNDJlMzEzNzM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMjM0MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF/WsTANBgkqhkiG9w0BAQsF
AAOCAQEAVpeRUVPayZLAi1S3OvO2ZB/BBs/H1YBk5hf5ek0+IxqLrySzxca2nJp0
5qwfWGwk2J5gcWXoCwUnizkX5Olhae9lPYOOlajTDzvhby1H5YatR7K2R5c30VFW
Fjd6h4Wux2/9ix0jR19/1Ahc4F8UwrfsvfOMhDTZjSj7pyKVFwObuA+fe2qX/fs7
Ep+YA9eoxFdHtayGkYQZHyTYyUnCZbinKSqlgPShcK1iqwZwizSMYTg8F1jcAo9a
aKrpI6/YnWY2/zrH9siGnOyoPslNrGhQJRzg0OL1pGFZTHZTi3u+y4L+Ll94jndH
7iBvwR5X7aud648pOkMA+2IDK9M0Lg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 18:14:36 2025 by rpki-client