Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203339393434.roa
File:                     39352e3231342e3137362e302f32342d3234203d3e203339393434.roa (raw, json)
Hash identifier:          H0h6A5EbeuuHOJAstE6hUs/Mu/iji8kWp81BFvB1BFE=
Subject key identifier:   D6:65:AC:93:94:2D:0B:EE:0C:8B:38:29:BB:5B:D5:75:5D:EC:08:48
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6DAA9E4F826B8B50C47E94A1EF850BEB0DE2FBCB
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203339393434.roa
Signing time:             Fri 12 Sep 2025 15:09:04 +0000
ROA not before:           Fri 12 Sep 2025 15:04:04 +0000
ROA not after:            Fri 11 Sep 2026 15:09:04 +0000
asID:                     39944
IP address blocks:        95.214.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 17:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:aa:9e:4f:82:6b:8b:50:c4:7e:94:a1:ef:85:0b:eb:0d:e2:fb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Sep 12 15:04:04 2025 GMT
            Not After : Sep 11 15:09:04 2026 GMT
        Subject: CN=D665AC93942D0BEE0C8B3829BB5BD5755DEC0848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:a9:12:04:1c:12:47:8b:07:e7:69:ae:aa:
                    8e:92:f1:63:1f:d8:76:39:4f:08:23:f0:ac:bc:a2:
                    f0:9f:cd:78:7b:0e:ff:ed:49:1e:99:da:3f:71:3d:
                    c0:a7:3e:ac:de:c8:9b:94:fb:b5:24:b6:30:3b:56:
                    96:8c:07:bd:7c:7f:9d:0b:e7:17:7f:06:d8:9d:a8:
                    0b:bc:68:b8:f7:83:f4:d2:69:3f:d4:94:94:7e:b8:
                    ba:18:77:49:f5:b0:8a:fe:42:5c:f2:0a:aa:9a:30:
                    53:62:bc:30:b6:3a:17:f9:bd:47:53:66:cd:c4:a2:
                    67:c6:d1:26:f5:07:cf:98:fa:ca:7c:b0:23:04:b1:
                    62:5b:34:76:16:f2:f7:75:b8:b8:bb:90:48:ef:23:
                    87:8d:44:ce:b4:ec:e6:44:b5:94:d4:16:f5:4b:f3:
                    d5:39:09:18:d9:91:06:c8:fb:ac:82:2d:ac:4f:b5:
                    b2:d2:2a:c2:05:31:e9:03:f4:4a:2c:fa:f5:3c:c5:
                    0e:30:2e:d3:d6:d7:8f:be:52:ec:6e:23:87:df:82:
                    c5:2a:08:fc:e9:6f:0f:81:20:85:39:06:c6:b4:70:
                    8a:52:06:34:9e:5e:b5:d1:04:3c:03:a3:2c:f6:cd:
                    a3:54:9c:97:e8:b5:da:6a:a3:ab:66:32:6d:96:5a:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:65:AC:93:94:2D:0B:EE:0C:8B:38:29:BB:5B:D5:75:5D:EC:08:48
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203339393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:8e:bb:f7:dd:d2:75:9e:10:6e:97:e2:8c:39:49:26:e8:
         8b:f3:a0:d6:5d:75:0b:06:70:01:2c:79:bf:ca:dc:48:2e:e7:
         be:10:ff:52:79:7a:19:5a:aa:4a:8c:d3:1b:b2:71:98:4d:7e:
         54:a3:92:ea:8e:41:f6:b1:a8:12:e6:35:fe:19:82:8b:9e:74:
         11:34:66:3f:81:48:22:63:bd:fb:b7:ce:da:b0:d4:e8:d9:ae:
         b1:24:47:5f:d0:88:e0:72:19:67:51:3a:02:48:86:48:be:6b:
         0c:25:9c:a9:95:f9:67:44:91:03:4d:bf:14:48:ee:f0:94:f1:
         10:bf:4d:5d:4f:78:7a:3a:b0:a7:fb:05:3e:c0:19:c2:ec:ba:
         ee:0e:bc:0d:69:2b:f7:25:9b:64:fc:a9:4d:d2:de:2f:13:62:
         79:4a:4d:fa:b0:9d:de:fc:8d:32:1f:bd:43:6d:53:dc:29:df:
         39:5b:93:36:d5:92:7f:1f:95:2e:1a:22:6d:f9:c7:61:2a:0a:
         6d:48:f1:44:59:c1:31:ae:bc:91:9c:b6:a4:b3:f6:d6:0f:78:
         c8:20:39:10:47:8f:b8:29:e9:7a:95:c1:b7:f5:fb:38:08:8c:
         ca:14:95:47:15:4f:1b:8e:12:ad:dc:59:4e:ad:20:27:21:e1:
         ae:95:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:03:56 2025 by rpki-client