Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20313337343130.roa
File:                     3137362e3130352e3232392e302f32342d3234203d3e20313337343130.roa (raw, json)
Hash identifier:          Gk7qPN3iMbuM/NuQ/mxVe2KnXWIWJYHWC/2BM+50U0M=
Subject key identifier:   51:0D:14:63:49:E9:BB:0D:00:7C:89:92:6F:85:A9:D0:4A:FA:34:AE
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       3113404E656FD8093AB5F9766FB214018F895156
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20313337343130.roa
Signing time:             Wed 21 Oct 2026 07:45:52 +0000
ROA not before:           Wed 21 Oct 2026 07:40:52 +0000
ROA not after:            Wed 20 Oct 2027 07:45:52 +0000
asID:                     137410
IP address blocks:        176.105.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 00:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:13:40:4e:65:6f:d8:09:3a:b5:f9:76:6f:b2:14:01:8f:89:51:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Oct 21 07:40:52 2026 GMT
            Not After : Oct 20 07:45:52 2027 GMT
        Subject: CN=510D146349E9BB0D007C89926F85A9D04AFA34AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:4e:be:50:9c:38:b7:be:df:b9:bd:03:db:
                    49:05:04:5e:12:0d:48:d1:e2:29:fe:d2:a3:ca:95:
                    22:10:73:8b:c5:59:aa:00:cb:33:df:21:23:d2:59:
                    14:9b:31:a9:85:be:39:64:72:ac:39:ed:b2:6b:0d:
                    34:a5:26:36:63:3e:e8:e6:2f:33:4c:f2:58:27:c3:
                    22:e2:e2:df:04:62:a9:e4:81:e0:e9:d2:59:14:64:
                    fb:09:dc:d3:f8:14:b3:d5:16:22:ca:6a:c7:05:fb:
                    d1:ae:08:e5:ae:70:56:90:1a:20:2e:fd:89:ca:c4:
                    45:4d:fd:60:17:12:2e:80:01:2d:37:a5:14:97:0c:
                    e9:b3:43:ae:70:11:6b:c0:b4:0f:17:52:f4:d0:a7:
                    fd:ed:26:46:49:24:47:ad:3f:91:b0:22:b9:28:d5:
                    43:33:46:88:ac:f0:6e:b9:d6:c3:93:d1:58:98:15:
                    83:dd:4a:16:05:33:d1:3b:2f:b9:b0:d3:d4:15:93:
                    76:4f:05:5b:0f:43:6e:21:29:b0:96:7b:ad:90:af:
                    bb:37:38:17:28:2c:6a:91:21:34:0f:d3:f1:e9:ea:
                    7d:b4:b1:cd:49:ee:c4:27:97:83:09:e9:eb:8d:b9:
                    4a:83:d9:b2:c6:29:57:66:50:bf:e6:26:c2:d2:3c:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0D:14:63:49:E9:BB:0D:00:7C:89:92:6F:85:A9:D0:4A:FA:34:AE
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20313337343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:92:83:df:d8:1e:39:86:d5:78:e6:bf:32:e4:60:8b:94:
         de:d4:9b:31:4e:c5:ae:04:2b:b0:be:e2:cd:fb:3f:72:8d:39:
         bb:b4:f2:7b:f0:e5:f7:10:99:6d:ac:e6:10:72:11:97:46:0b:
         2c:94:62:7a:0b:86:27:15:e0:dc:30:92:a8:79:70:d9:32:5d:
         a0:1d:41:b5:25:00:94:8a:c4:f1:b3:63:57:11:e9:5b:e7:ad:
         0c:4d:75:c9:7e:25:f8:8d:f5:25:b0:52:fb:d4:a3:e1:5c:9e:
         62:bd:0d:51:a7:74:65:23:8c:d1:18:88:c7:cb:28:c8:ea:d0:
         b7:cf:d8:03:08:d4:95:f3:d9:50:c8:66:35:d1:41:9d:18:fe:
         eb:6a:d8:f5:28:53:71:8e:6e:a0:47:de:d8:d9:e7:06:03:3c:
         fe:b3:26:e8:6a:2b:9a:26:0d:17:c0:d0:ad:89:e5:b6:9f:18:
         dc:b3:51:52:07:a7:77:c7:11:91:94:fe:05:2e:c3:5d:37:25:
         b8:f2:6c:a6:6b:ee:3d:e6:30:ac:84:dd:84:89:b8:37:b1:1a:
         21:ae:a6:b1:bc:ee:6d:79:42:b3:7a:de:8a:90:e4:7c:29:04:
         f9:b2:e0:af:12:99:4b:13:7a:75:e3:23:fa:7f:fb:0f:da:ed:
         3c:40:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:58:45 2026 by rpki-client