Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20343032343837.roa
File:                     3137362e3130352e3233302e302f32342d3234203d3e20343032343837.roa (raw, json)
Hash identifier:          7rliiclPL65TOyAWaIGlhZ2qbYJ7Gn5s//US7H3OP8k=
Subject key identifier:   D7:6A:06:FC:C4:AE:3C:1F:9B:A5:3B:1D:E1:C4:EB:3A:D2:A2:06:6B
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       77CB2D2CE0DAEAD054F05BA52C8716C41F813A4A
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20343032343837.roa
Signing time:             Fri 10 Jul 2026 02:03:49 +0000
ROA not before:           Fri 10 Jul 2026 01:58:49 +0000
ROA not after:            Fri 09 Jul 2027 02:03:49 +0000
asID:                     402487
IP address blocks:        176.105.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cb:2d:2c:e0:da:ea:d0:54:f0:5b:a5:2c:87:16:c4:1f:81:3a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul 10 01:58:49 2026 GMT
            Not After : Jul  9 02:03:49 2027 GMT
        Subject: CN=D76A06FCC4AE3C1F9BA53B1DE1C4EB3AD2A2066B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:b4:73:69:4f:14:0b:68:4b:a9:60:4c:bc:
                    09:e6:04:01:91:3b:53:d4:d9:60:c2:19:3f:26:1b:
                    89:03:dd:64:9a:19:9e:3b:3c:ba:04:92:d6:e4:bb:
                    e6:b1:cb:57:38:4e:7a:bd:06:08:c0:e5:9d:9b:ca:
                    ae:8c:b9:5a:91:36:8f:43:c2:ee:e5:a6:e6:50:60:
                    ae:37:f6:aa:ad:cd:c6:e8:3d:b9:b4:a4:52:22:ad:
                    38:c7:d5:7f:13:20:69:94:b6:30:78:ff:7f:ce:4d:
                    55:ed:49:b5:f4:45:f3:1f:7e:7d:02:dc:21:a0:9b:
                    18:a2:75:20:d8:e8:da:97:09:cc:3c:4a:1f:f8:b4:
                    56:07:8c:9f:39:de:88:1c:51:a6:3a:69:11:c7:bc:
                    ff:9c:ec:43:ec:7e:04:f8:6f:62:50:22:5e:cd:88:
                    8b:a2:01:ff:ac:59:0d:a4:92:fe:17:3a:91:a6:0c:
                    38:83:21:56:1d:eb:a2:d9:ab:50:fe:54:40:2d:79:
                    52:2f:1c:f1:d6:cd:51:54:ce:6c:74:fe:71:23:a4:
                    e2:f9:05:f0:35:02:5f:59:3a:05:a6:7b:2e:fb:84:
                    6c:64:4c:16:11:a4:83:2e:06:21:33:25:0e:80:5a:
                    bd:66:df:89:d3:5b:16:2a:d1:0f:85:70:11:50:0c:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:06:FC:C4:AE:3C:1F:9B:A5:3B:1D:E1:C4:EB:3A:D2:A2:06:6B
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20343032343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:e4:05:b2:89:4f:e3:49:42:62:6b:5e:82:49:56:3e:35:
         54:4b:e8:7a:e3:5b:9f:95:8d:f6:63:32:1b:3a:af:90:2e:99:
         51:5c:94:6b:d7:c5:c3:e7:2d:71:29:55:53:88:04:cf:d0:20:
         b8:c3:c5:b9:dc:dc:a4:3f:9e:e2:3e:28:67:86:a5:40:8f:ba:
         aa:a7:67:46:7e:86:1b:e6:33:3e:a0:b1:68:57:b5:56:3d:92:
         f7:56:31:e3:b0:2e:94:ab:59:ef:a1:a0:a8:7d:95:b1:f6:f0:
         7e:69:2f:57:57:35:c0:8f:33:e8:24:4e:2b:2a:46:44:f9:81:
         9e:69:31:8f:8c:ed:6a:7d:9d:45:48:ae:0f:90:e9:f2:2e:ac:
         7d:7c:dd:f1:bc:91:f6:1c:91:64:83:29:d5:14:64:f9:27:f4:
         79:09:de:a0:2b:74:c9:57:d1:74:23:b7:f6:cc:d6:ba:65:51:
         b3:84:53:38:69:7b:9b:14:c9:13:78:fb:dd:95:e4:9c:69:e3:
         5f:87:ed:99:f7:ab:f1:27:92:59:13:e3:3b:d3:3b:ac:28:c0:
         ff:92:99:fc:54:2a:34:32:a3:56:90:24:89:64:17:76:7f:df:
         8f:c7:83:d2:32:3c:8a:c8:b1:ef:97:6a:13:b1:df:e5:9e:be:
         43:f5:ce:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:27 2026 by rpki-client