Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32342d3234203d3e20323132333834.roa
File:                     3137362e3130352e3232382e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          4zVDIbLhrKYOGS916KEH8YzfA7LdBdzj8oIUHS68sZs=
Subject key identifier:   13:22:52:EB:5B:65:B4:6E:E7:7B:2F:80:50:DC:97:C8:0D:97:5C:41
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       28447024EC5E16106AAFE18C9775001A0CD711B6
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32342d3234203d3e20323132333834.roa
Signing time:             Wed 23 Apr 2025 05:39:51 +0000
ROA not before:           Wed 23 Apr 2025 05:34:51 +0000
ROA not after:            Wed 22 Apr 2026 05:39:51 +0000
asID:                     212384
IP address blocks:        176.105.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 03:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:44:70:24:ec:5e:16:10:6a:af:e1:8c:97:75:00:1a:0c:d7:11:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:51 2025 GMT
            Not After : Apr 22 05:39:51 2026 GMT
        Subject: CN=132252EB5B65B46EE77B2F8050DC97C80D975C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:06:b6:50:9d:78:8b:a2:29:97:89:04:47:
                    95:43:48:08:67:7d:51:ec:45:46:b5:82:40:66:cd:
                    39:27:b4:a2:7f:32:37:48:37:9a:1c:25:70:c9:59:
                    19:e4:a1:af:e4:9e:ce:cb:37:3b:50:f7:8f:aa:86:
                    9b:4d:dd:82:47:a2:c6:b4:bb:57:94:cb:73:9a:f5:
                    dd:d1:8a:61:28:38:bd:4c:49:ae:8a:77:26:78:bc:
                    6c:e0:7e:f8:00:11:03:a1:40:78:a7:a1:35:e9:f5:
                    26:4d:ef:36:f9:f4:73:44:de:bc:1b:9a:ba:37:a4:
                    51:d9:7c:c3:7d:da:76:72:89:39:f8:74:14:ac:33:
                    33:33:15:95:5b:51:d2:35:66:2a:60:29:93:62:a2:
                    18:23:8a:1a:5a:e7:1f:c5:51:37:22:6b:ef:41:36:
                    0c:bf:50:85:96:7d:39:96:93:fb:09:39:49:18:60:
                    7d:80:01:03:f4:48:7d:83:db:74:29:3b:72:ee:fe:
                    06:0b:e2:65:83:82:79:4b:1c:7a:b6:ac:d6:af:cc:
                    8b:06:5b:ab:12:e8:37:79:6b:79:2c:9f:f4:f9:1c:
                    19:04:f6:f9:ca:f9:37:f0:16:ed:8a:96:bc:62:f7:
                    bc:10:37:27:9f:bc:7a:7e:eb:4e:a8:c6:f5:59:f8:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:22:52:EB:5B:65:B4:6E:E7:7B:2F:80:50:DC:97:C8:0D:97:5C:41
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:f7:69:58:54:d7:bc:40:ff:d3:a9:4e:cb:bf:bd:82:09:
         8a:f1:fa:2e:1e:5a:6f:d2:40:3b:98:8d:cf:8c:fd:4f:ed:83:
         d1:9c:c8:56:11:da:80:74:16:1f:67:15:d1:fd:cb:f5:eb:5f:
         af:10:06:43:d9:b2:84:61:3e:3e:74:16:28:a8:fc:2a:5f:30:
         59:26:f6:06:54:a7:2d:13:5b:ac:c2:b1:83:4c:67:2f:2c:7e:
         3d:3a:87:4e:a2:ad:62:4f:2b:f3:9e:df:5c:50:a8:68:35:95:
         d1:c7:51:70:95:5e:d6:ec:d3:51:50:3b:84:ba:a4:db:60:14:
         fe:70:41:be:54:03:b8:a0:da:6f:57:04:2e:35:8f:19:99:1d:
         48:9a:ea:df:b9:8a:65:d3:14:2d:43:93:18:bc:f5:a6:b2:e8:
         59:ce:a5:47:ef:ef:4c:f3:6a:f3:2e:5b:d5:61:71:3e:aa:22:
         7f:11:4e:7f:12:4b:1f:f2:5d:c6:41:a1:8a:87:d3:5c:29:81:
         fa:8b:b6:02:0d:dd:a0:ab:53:93:74:7e:e1:10:9c:a7:69:39:
         d1:78:3a:ae:74:ba:37:d2:f6:3d:e4:3e:42:7e:ce:ae:bb:99:
         a2:11:ee:53:ea:94:1a:6d:45:b5:67:98:b4:67:69:b1:a1:41:
         05:db:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:45:47 2025 by rpki-client