Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32342d3234203d3e20323134363437.roa
File:                     3137362e3130352e3232382e302f32342d3234203d3e20323134363437.roa (raw, json)
Hash identifier:          hStQfRGJoYEYLe3KmuwGH2cRXh/n95d2D0ZSo9Oqp/A=
Subject key identifier:   16:62:FF:A7:D1:90:6B:D9:13:D3:77:C4:9A:52:DB:ED:51:01:4C:DE
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       0306AF4D14F6F816062911E1F3C8B48C1C46640F
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32342d3234203d3e20323134363437.roa
Signing time:             Thu 02 Jul 2026 21:26:45 +0000
ROA not before:           Thu 02 Jul 2026 21:21:45 +0000
ROA not after:            Thu 01 Jul 2027 21:26:45 +0000
asID:                     214647
IP address blocks:        176.105.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:06:af:4d:14:f6:f8:16:06:29:11:e1:f3:c8:b4:8c:1c:46:64:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul  2 21:21:45 2026 GMT
            Not After : Jul  1 21:26:45 2027 GMT
        Subject: CN=1662FFA7D1906BD913D377C49A52DBED51014CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:f4:48:94:e8:95:c4:dd:84:21:60:c1:fd:
                    ec:bd:96:1d:c1:f0:bb:99:7c:f9:20:83:fb:a5:63:
                    22:f6:0f:81:9d:f9:de:d7:77:d5:09:83:65:36:8e:
                    ac:19:66:68:d8:d9:d6:7c:9f:83:a4:e8:f2:57:93:
                    5d:0d:44:66:28:40:0e:41:fe:8a:9f:0e:79:86:27:
                    8d:c2:db:9d:0d:ea:c7:79:da:bd:5e:7e:54:fd:50:
                    99:00:f2:b4:a5:e0:33:36:d5:34:a3:7b:40:0b:88:
                    c2:d8:68:bd:6a:03:28:f2:00:48:cf:27:b8:d3:a7:
                    ac:3a:8a:11:19:0e:1f:47:06:9a:11:96:c0:4c:72:
                    ae:4f:b8:bb:34:d0:51:1a:59:76:92:0c:b6:c9:bf:
                    d7:b0:a8:6a:99:7b:c3:33:1d:31:9a:33:39:d3:b9:
                    74:57:72:ea:03:92:f9:e8:a6:4c:ae:4d:f2:61:4e:
                    7c:a0:90:6e:88:57:c2:eb:8d:c9:ce:3f:c3:bc:30:
                    e7:68:ea:5d:bc:51:ea:9c:e3:6f:e6:47:bd:94:4c:
                    e3:bb:4b:b3:b0:55:f4:32:f7:06:76:9a:a9:b3:9c:
                    12:3f:09:f6:42:05:64:28:88:3b:2c:4f:d5:dc:86:
                    c4:2d:69:20:86:bf:fe:e8:c3:ec:b7:f0:fa:08:54:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:62:FF:A7:D1:90:6B:D9:13:D3:77:C4:9A:52:DB:ED:51:01:4C:DE
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32342d3234203d3e20323134363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:4d:3f:ec:ab:2b:01:e3:9a:78:b6:e2:94:48:a3:20:a0:
         fb:6a:01:66:f6:ff:08:6c:4a:88:86:46:53:90:e5:e6:0f:21:
         e7:8b:b4:cb:97:0e:99:8e:d1:6d:a1:b1:62:39:69:c8:37:e3:
         76:63:3b:42:18:77:5b:cb:dc:03:62:d0:93:94:df:dd:c3:83:
         9e:9a:12:77:63:1a:c1:84:e0:f6:40:da:85:44:05:c5:a2:fb:
         a9:5d:e5:ea:46:92:5f:e6:6b:09:4a:f5:63:02:bc:c6:a2:39:
         53:f8:bf:1e:42:f6:87:95:ac:3b:bd:6e:73:96:48:c6:72:28:
         09:9c:70:3b:31:79:b2:26:ad:a0:0e:e9:04:2e:93:06:99:3a:
         1a:47:6a:a2:04:fc:93:19:02:45:1a:40:7b:21:fc:8d:b6:77:
         8c:2c:20:5f:25:a9:a5:c7:c3:69:6d:d2:3b:3e:74:ec:89:95:
         a6:4f:36:98:44:89:92:32:17:93:6f:a9:3b:cb:a4:15:15:10:
         ad:57:99:10:7d:b4:5c:63:50:10:25:4a:4f:1d:1d:85:f1:1a:
         63:8a:18:8a:73:e6:19:2e:55:c1:5b:57:07:86:df:e2:48:eb:
         d8:66:f9:3a:ef:38:45:82:e0:99:95:56:dd:3b:b0:eb:a5:e2:
         dc:28:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:21:20 2026 by rpki-client