Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20323135363037.roa
File:                     3137362e3130352e3232392e302f32342d3234203d3e20323135363037.roa (raw, json)
Hash identifier:          mPnuEEHNKWvOE65oszGh9SNh4kQCKXy1dla92v/bwyE=
Subject key identifier:   BD:BA:56:54:53:B6:4B:9E:B3:2A:C9:AA:93:0E:96:55:64:E6:63:5B
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       26586FFEA60B3C5ADC87F58D959D4605FCE2C94E
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20323135363037.roa
Signing time:             Wed 08 Jul 2026 20:48:22 +0000
ROA not before:           Wed 08 Jul 2026 20:43:22 +0000
ROA not after:            Wed 07 Jul 2027 20:48:22 +0000
asID:                     215607
IP address blocks:        176.105.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:58:6f:fe:a6:0b:3c:5a:dc:87:f5:8d:95:9d:46:05:fc:e2:c9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul  8 20:43:22 2026 GMT
            Not After : Jul  7 20:48:22 2027 GMT
        Subject: CN=BDBA565453B64B9EB32AC9AA930E965564E6635B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ca:5a:f2:3a:32:1d:05:47:3c:89:b7:9c:a9:
                    0d:e9:2d:e0:73:fa:25:44:9b:6e:1a:13:8d:a7:24:
                    b0:a8:aa:d3:82:86:3d:c2:b0:9b:bf:ff:b3:37:51:
                    23:38:57:17:9f:60:59:b6:ea:c2:d2:ae:0a:b6:19:
                    23:f7:fc:fb:9c:4c:5c:df:4c:59:6c:94:e1:f8:b2:
                    02:72:14:3c:7b:a2:9c:7b:25:78:0e:53:22:a4:63:
                    bd:46:5c:bb:c4:42:12:29:34:f3:89:f9:e3:fe:cc:
                    be:16:48:c7:82:b3:b5:10:c1:4f:b5:42:00:69:67:
                    eb:45:f6:f9:ba:fa:c8:74:36:ef:89:ca:5e:b7:ad:
                    76:ae:94:ba:e6:ac:53:d5:b6:26:78:4f:1c:aa:94:
                    f7:1e:46:c3:de:41:f5:82:f8:4b:43:84:f9:4a:1e:
                    4f:0b:00:ce:66:25:55:c1:90:c6:4a:bf:a5:02:f8:
                    c5:13:21:4b:e9:5a:42:9c:d3:2a:96:1c:aa:a0:99:
                    73:77:c5:fe:99:f7:6a:f4:fc:e9:b1:26:26:59:05:
                    9b:bb:34:f7:31:f4:89:1a:c7:85:74:8f:1f:45:0e:
                    ea:bb:a1:27:e6:8d:20:17:88:da:33:c3:f7:13:10:
                    36:61:5d:25:17:61:e3:df:96:aa:58:5d:4c:a8:31:
                    ca:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BA:56:54:53:B6:4B:9E:B3:2A:C9:AA:93:0E:96:55:64:E6:63:5B
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20323135363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:b5:d1:d2:33:27:bb:36:6d:9f:b4:40:da:a7:e9:18:39:
         15:19:28:25:82:e3:47:b0:23:6c:a6:ff:c3:ed:b2:7b:a7:8e:
         cf:85:77:08:89:9b:5f:4c:de:e0:bc:9e:a8:11:e7:f3:31:aa:
         23:ed:53:18:10:84:8b:7b:9b:23:c2:4d:d6:0c:48:d1:55:d6:
         8a:5b:cd:bf:61:e8:4a:d0:af:3f:c0:ab:49:00:24:7d:dc:2b:
         a0:54:8f:5b:84:c8:fc:62:49:50:3d:21:b2:ac:ca:c7:a9:bb:
         22:d7:a9:50:1e:b5:6d:68:36:32:25:5a:1b:53:fd:1c:00:f5:
         97:5d:f1:40:d9:3f:62:d5:fa:15:a2:81:2c:42:58:56:c5:20:
         18:24:c0:be:d6:28:2e:0a:16:46:d5:71:ea:a5:f8:ae:93:8e:
         c8:2e:a6:58:ae:96:93:26:ae:9a:8f:e8:bf:25:13:46:72:7d:
         17:07:36:a9:5a:97:ad:c7:5e:8f:b7:54:82:80:34:f3:e6:2e:
         fc:f3:e5:83:6d:30:75:78:bd:ee:90:03:07:fa:7b:29:c3:ae:
         f6:5d:2e:3e:46:6c:c9:af:f5:11:61:b7:4f:36:ee:76:69:cd:
         a4:10:20:64:33:84:55:19:3f:7c:9a:ef:41:2d:96:96:5f:27:
         42:7f:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:22:03 2026 by rpki-client