Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20343032303033.roa
File:                     39312e3234342e3139392e302f32342d3234203d3e20343032303033.roa (raw, json)
Hash identifier:          KgX5gmzC+/29EjYIYeOmsClonWjqlfukKpfmGV3mUxQ=
Subject key identifier:   74:11:A6:C9:D2:09:32:6D:41:CE:6E:44:45:5D:CA:E9:06:BA:2D:64
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       1CA31F76B58EC7939AFC41923850FE1309DC9501
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20343032303033.roa
Signing time:             Tue 23 Sep 2025 13:26:51 +0000
ROA not before:           Tue 23 Sep 2025 13:21:51 +0000
ROA not after:            Tue 22 Sep 2026 13:26:51 +0000
asID:                     402003
IP address blocks:        91.244.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 17:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a3:1f:76:b5:8e:c7:93:9a:fc:41:92:38:50:fe:13:09:dc:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Sep 23 13:21:51 2025 GMT
            Not After : Sep 22 13:26:51 2026 GMT
        Subject: CN=7411A6C9D209326D41CE6E44455DCAE906BA2D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:23:5a:c7:09:5d:cc:be:fc:a8:b2:2e:61:
                    f6:a4:51:0b:c1:bd:a3:62:0d:72:a2:ef:21:c5:f6:
                    51:5f:6c:ba:dc:a5:25:8e:61:91:df:1d:5d:85:8f:
                    16:da:b1:b4:e3:3d:54:93:b0:85:b7:47:b5:59:2f:
                    bf:d7:d2:de:40:38:de:ce:12:fb:22:d2:88:bd:60:
                    95:ae:6d:3f:c9:32:af:29:ee:72:cc:35:fd:de:8b:
                    3d:82:4b:b0:7a:80:be:9d:a2:2c:07:ca:a9:f2:08:
                    05:d5:97:9d:ce:40:ff:3b:dd:c4:21:10:e5:9b:d5:
                    51:ca:d6:c7:e5:c6:84:c4:82:69:e1:4a:79:3e:45:
                    ee:5f:e0:e9:00:a7:5c:5a:ff:80:13:fd:c0:1f:95:
                    52:66:80:2b:e7:fe:14:65:c9:3a:e0:54:90:25:cf:
                    c1:db:f1:4f:30:09:8d:ce:71:2f:7b:87:d6:89:ca:
                    1c:86:20:40:96:a3:67:27:08:86:12:50:2d:08:61:
                    55:5e:b8:45:1c:61:dd:fb:c4:2d:8a:45:ca:87:64:
                    99:df:c2:17:34:c0:9d:52:ee:2f:98:8c:0b:26:51:
                    5f:3c:a8:27:45:8b:4c:76:73:88:7f:d2:ad:42:66:
                    6b:e9:55:72:6f:9a:2e:e4:47:06:54:2c:97:8d:32:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:11:A6:C9:D2:09:32:6D:41:CE:6E:44:45:5D:CA:E9:06:BA:2D:64
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20343032303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:4c:81:0b:1a:e7:08:e9:e1:2d:00:b5:c4:ef:35:d2:c8:
         63:04:7b:40:a9:d2:fc:0f:0f:16:87:09:ce:4a:64:78:a7:48:
         62:51:9d:55:f5:ab:06:f9:59:11:84:57:51:d6:df:72:19:68:
         6b:77:ce:10:42:b2:c0:2f:93:3b:4b:37:75:e2:25:d0:85:61:
         55:15:de:14:73:8c:4b:82:aa:0f:af:e7:2d:08:58:05:d6:e2:
         ea:e1:e2:12:54:2a:8b:93:9e:e0:c9:a2:52:02:aa:53:b3:80:
         82:4a:31:60:07:6d:67:17:e9:aa:51:d0:64:16:db:91:90:af:
         d0:b3:f6:bf:2e:4b:53:0e:85:d7:13:ca:ca:e5:43:50:ed:f7:
         40:ab:6d:9c:81:b0:9c:06:78:9d:2d:c9:ed:61:9b:24:3c:3b:
         0d:e3:93:53:7c:5f:34:96:8b:75:0e:f2:17:72:ec:43:57:09:
         51:8a:9a:89:c2:cb:4f:e3:28:49:20:19:53:47:95:f6:28:c9:
         59:f9:3a:8b:58:0f:58:a5:98:24:84:7a:4e:64:e0:ee:a2:be:
         ca:c9:a8:17:6c:32:34:73:6f:67:14:88:3a:7c:56:14:da:4a:
         0f:bc:05:20:6b:84:85:83:9c:7d:27:e4:30:3c:c3:fa:d3:0c:
         fc:fa:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:03:58 2025 by rpki-client