Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20343032323135.roa
File:                     3137362e3130352e3233302e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier:          /2QpDMPqBdwnjepL0yxogbdbb/ogBz44Ns/5r/5Hx80=
Subject key identifier:   B2:FD:88:10:7B:EB:71:CB:6E:BF:33:70:3E:65:EE:12:6E:88:F0:B6
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       4C9BBB7BAF9EECA58F43B4F6A3D175F2E276B54B
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20343032323135.roa
Signing time:             Mon 13 Jul 2026 08:31:27 +0000
ROA not before:           Mon 13 Jul 2026 08:26:27 +0000
ROA not after:            Mon 12 Jul 2027 08:31:27 +0000
asID:                     402215
IP address blocks:        176.105.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 02:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9b:bb:7b:af:9e:ec:a5:8f:43:b4:f6:a3:d1:75:f2:e2:76:b5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul 13 08:26:27 2026 GMT
            Not After : Jul 12 08:31:27 2027 GMT
        Subject: CN=B2FD88107BEB71CB6EBF33703E65EE126E88F0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:11:a9:94:0c:19:d2:7a:f1:57:7b:35:25:
                    9c:27:ea:bc:73:91:ad:71:2b:ac:1b:ee:23:b9:98:
                    d2:77:03:a5:01:07:80:d4:95:a3:c0:d5:7c:01:26:
                    60:d6:9e:92:ef:54:6c:a8:32:20:f7:ab:5e:ee:3f:
                    ba:c4:3e:dc:58:44:15:08:3e:e7:a1:c9:cb:11:15:
                    ee:d7:ac:20:7d:70:27:15:68:00:19:64:b4:56:7a:
                    15:ba:7e:c4:91:29:57:30:f5:fa:eb:b7:93:83:84:
                    d7:f8:62:38:0f:0e:3e:92:1a:ae:f2:1c:29:62:51:
                    63:80:db:2e:8f:46:3b:5c:cc:b5:ed:13:14:f0:7a:
                    e4:f2:b6:1a:ce:db:f6:f5:e1:df:ac:29:25:aa:d7:
                    ce:09:10:23:c7:e7:c9:39:e8:0b:b2:0c:b2:db:2c:
                    e1:9a:75:2a:89:9b:d5:fb:36:f1:50:a4:49:cc:fc:
                    f4:63:95:80:34:4d:7f:13:8a:a7:47:df:71:55:88:
                    a9:35:26:b0:43:14:2f:9a:e1:94:06:63:4e:e8:45:
                    f5:db:0a:58:a8:98:43:23:28:2c:82:a8:a8:af:bb:
                    49:a8:88:85:cc:10:09:9e:4a:7d:f7:53:da:32:6e:
                    a1:96:ca:f1:5b:29:85:01:9e:e2:32:bf:f0:5a:0d:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FD:88:10:7B:EB:71:CB:6E:BF:33:70:3E:65:EE:12:6E:88:F0:B6
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20343032323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:28:8d:e3:89:85:5e:e1:11:68:b1:03:fb:29:c4:45:18:28:
         bb:cf:b1:c4:28:57:e8:29:ce:8e:ff:b9:10:1e:6f:a4:58:3f:
         38:bd:e2:2d:5f:bd:de:f5:85:a7:80:6a:c4:a2:11:d9:ab:d7:
         cc:c1:89:ff:f9:96:2c:5d:0b:3d:a8:b5:21:73:e3:89:b3:47:
         fb:23:e1:af:d0:af:9d:98:b2:1b:2f:3a:24:04:7d:54:d2:47:
         c3:ae:e0:6f:3d:a7:39:6c:35:2e:5b:e4:d6:de:8e:d6:38:5c:
         c2:31:91:64:ee:c3:e1:d0:de:44:cf:5d:2e:67:d8:43:05:29:
         f6:d3:4f:1b:37:8c:8b:c2:97:93:6b:1d:f7:c6:54:35:d2:cb:
         5b:41:b5:35:85:87:c1:88:19:ba:9a:60:60:09:65:56:ad:70:
         2b:c0:86:7f:30:26:81:1c:1e:e1:91:91:b6:55:a0:7d:2e:6a:
         ba:50:77:67:79:22:e9:28:91:8f:bd:58:84:7a:8a:2f:8b:b3:
         bb:74:2e:94:e5:7a:2a:65:8f:b3:32:8b:a8:ab:30:0e:40:b6:
         73:40:21:8d:ce:64:65:f6:53:35:9f:39:f6:9a:74:9f:0b:26:
         9b:ce:ab:a8:f4:8e:89:30:b6:09:f8:76:a1:d8:5a:50:e9:eb:
         63:c6:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:42 2026 by rpki-client