Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e20313938353834.roa
File:                     39312e3233382e39322e302f32342d3234203d3e20313938353834.roa (raw, json)
Hash identifier:          7UhqEbaiUg32VuoH4yeLPCUhpbzRyEt1NRwi736Ds88=
Subject key identifier:   B8:1B:C6:75:20:77:3B:6F:75:63:12:57:00:9F:C5:A9:A5:59:7A:F6
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       4A5EE0BE5BAC49148C928ECCE231408CF554745F
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e20313938353834.roa
Signing time:             Fri 29 Aug 2025 10:59:52 +0000
ROA not before:           Fri 29 Aug 2025 10:54:52 +0000
ROA not after:            Fri 28 Aug 2026 10:59:52 +0000
asID:                     198584
IP address blocks:        91.238.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 17:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5e:e0:be:5b:ac:49:14:8c:92:8e:cc:e2:31:40:8c:f5:54:74:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug 29 10:54:52 2025 GMT
            Not After : Aug 28 10:59:52 2026 GMT
        Subject: CN=B81BC67520773B6F75631257009FC5A9A5597AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:cb:b6:93:96:59:93:f7:12:66:9d:95:b0:
                    5c:ac:f7:5c:39:81:1b:b5:c1:fd:00:57:3d:55:5a:
                    5f:46:8d:72:dd:2c:5f:20:42:4d:7d:b5:40:05:6d:
                    5f:16:9e:29:e8:f7:38:8e:98:bd:ac:46:eb:f7:a5:
                    7f:14:d2:06:ef:12:37:bc:f2:c2:5f:88:90:e6:b3:
                    35:2e:e6:17:47:94:f6:98:d0:e2:8e:17:e6:8c:f0:
                    06:e0:cb:b1:c1:db:a0:18:ef:e1:ee:9a:00:0f:7f:
                    88:af:b9:ee:88:b8:d5:c9:48:e8:c0:12:92:75:63:
                    c3:5d:07:9c:91:ff:92:77:55:87:93:db:34:f2:c1:
                    80:84:9e:8a:dc:a2:c3:d6:8a:ef:54:6e:51:50:cb:
                    b7:a1:f1:27:0f:5e:90:63:e2:67:16:39:02:49:f9:
                    78:9f:6d:c2:66:d0:5e:3b:ed:b9:61:96:5f:57:55:
                    5b:af:11:6e:0e:08:44:93:c0:da:66:bb:d7:3e:aa:
                    86:e0:a2:eb:41:eb:30:d0:18:38:27:a4:b2:fe:a6:
                    85:bc:51:87:ed:21:65:c9:9e:ff:9f:e7:ba:4d:b7:
                    13:f6:eb:3c:5c:8f:26:f4:04:06:cc:64:12:60:65:
                    4f:3b:12:04:b0:4f:a8:06:eb:73:14:1f:38:e4:eb:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1B:C6:75:20:77:3B:6F:75:63:12:57:00:9F:C5:A9:A5:59:7A:F6
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39322e302f32342d3234203d3e20313938353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:99:c2:b3:1a:e7:53:08:03:22:2d:21:3f:9d:17:f7:ee:97:
         60:3b:88:2c:0b:81:8a:d3:b9:ea:a5:58:63:0c:81:f3:73:99:
         9b:49:96:33:90:45:d4:56:07:b9:79:00:7b:06:af:eb:61:9a:
         da:98:9e:d1:52:55:59:19:f4:c8:2a:c7:fc:c4:a6:4e:f0:bc:
         7d:63:0e:5a:94:b1:e0:dd:86:c7:cd:59:0b:31:11:1e:9d:06:
         7e:0f:e8:28:9f:8c:b4:54:5d:c2:13:d5:a4:88:a3:9b:0e:b6:
         15:1b:6e:ec:d7:60:6d:11:7e:6e:ef:8f:39:46:ea:63:03:2d:
         f5:97:3e:77:3c:d5:80:20:eb:4c:a9:c8:6a:07:56:5c:49:35:
         d7:9e:1c:ba:3d:0e:b1:be:91:bd:ac:8b:f8:ed:0d:f2:f4:1f:
         09:c4:55:1c:f6:93:8a:a0:df:05:cf:d2:89:b1:2b:cc:7f:17:
         c5:0f:53:ea:2f:d1:66:c3:85:e8:d9:3f:89:1d:75:1a:a2:aa:
         78:66:f0:fc:d3:ba:a6:26:ae:b8:08:61:9a:b6:73:bd:0c:67:
         05:90:a9:51:93:db:e4:10:2c:6b:58:5d:19:44:fc:0f:40:46:
         bc:42:88:62:1f:4f:aa:53:01:d3:b7:8f:59:93:7e:7b:36:88:
         6a:cf:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:10 2025 by rpki-client