Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233312e302f32342d3234203d3e20343032343837.roa
File:                     3137362e3130352e3233312e302f32342d3234203d3e20343032343837.roa (raw, json)
Hash identifier:          0HN8mna45Z6e1PkFZ7zC/bDm/mQNtlcknVIVOtq9DYo=
Subject key identifier:   79:8C:23:B3:24:6A:00:5A:6A:B2:1E:26:15:7C:96:11:DC:BA:1F:62
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       7A6B819982E2B4B464EA2862B899272317225907
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233312e302f32342d3234203d3e20343032343837.roa
Signing time:             Fri 10 Jul 2026 02:03:42 +0000
ROA not before:           Fri 10 Jul 2026 01:58:42 +0000
ROA not after:            Fri 09 Jul 2027 02:03:42 +0000
asID:                     402487
IP address blocks:        176.105.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6b:81:99:82:e2:b4:b4:64:ea:28:62:b8:99:27:23:17:22:59:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul 10 01:58:42 2026 GMT
            Not After : Jul  9 02:03:42 2027 GMT
        Subject: CN=798C23B3246A005A6AB21E26157C9611DCBA1F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:ef:72:e4:47:37:ea:7b:89:5b:6c:ff:b5:
                    45:20:77:c4:36:5d:26:d3:0f:a6:3e:5d:9b:eb:55:
                    50:84:1e:40:36:a0:9c:85:07:c3:2d:b0:b6:c5:0a:
                    39:18:20:09:9f:60:e3:ba:50:9e:6e:92:41:b6:18:
                    5d:38:a2:e9:29:8c:83:80:e6:ea:bd:b7:43:22:fb:
                    70:e5:42:90:74:fe:f2:ed:dc:09:e5:c0:60:be:47:
                    83:93:5d:46:ac:fe:0a:a1:e0:f2:1f:b5:54:17:16:
                    41:e6:13:e6:59:f1:e1:c1:32:27:c8:52:4f:1e:56:
                    20:14:92:27:c9:bc:07:66:7a:0f:b8:78:b2:14:1f:
                    5e:b7:fb:5a:92:93:d5:70:4b:1d:d0:3c:62:d1:1a:
                    01:13:8f:bb:3b:bf:38:56:67:e9:ba:59:d7:92:94:
                    a4:80:d1:b3:de:19:02:5b:ed:19:45:a6:b1:77:37:
                    60:f9:69:7a:d5:7d:67:6b:44:84:97:43:4e:a9:a7:
                    ac:0b:09:7e:8c:25:96:3c:1c:ca:7c:cd:00:9c:c2:
                    9d:d9:87:81:ec:f2:82:c7:5a:14:89:8e:75:46:99:
                    da:e0:c0:97:35:2a:5a:52:d2:70:1e:32:74:cc:e0:
                    72:4f:65:d0:69:96:46:69:62:b2:3c:ff:f9:ec:61:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8C:23:B3:24:6A:00:5A:6A:B2:1E:26:15:7C:96:11:DC:BA:1F:62
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233312e302f32342d3234203d3e20343032343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:60:19:02:65:6c:4b:e1:6f:ca:a5:a2:7e:26:23:c8:3c:
         44:d2:96:24:8b:93:8c:40:3b:15:64:3d:20:f2:ee:9d:cb:92:
         e2:a3:6f:86:ff:c3:f9:28:38:e8:d0:0e:6a:af:c4:56:ff:dc:
         0a:e8:28:db:d6:e9:5a:69:79:7d:0d:e6:f0:c2:ed:8c:c9:13:
         71:63:a5:f9:72:07:2f:95:e6:20:ba:bd:f1:95:72:d8:11:f7:
         62:3a:aa:37:54:67:df:58:92:bc:f3:5a:46:b6:96:e9:fe:a8:
         a3:19:41:3c:50:75:25:3c:07:b3:1c:73:c0:9d:e2:83:1b:6b:
         27:c5:a7:e2:ed:c6:47:70:ca:4e:82:f8:63:84:91:e2:ef:cc:
         7f:95:e8:55:fc:86:59:10:4d:bb:37:d0:e0:bc:6c:9d:f9:f6:
         85:b7:6e:81:de:9c:1f:e3:c6:2c:ff:15:d2:62:b2:bc:b6:72:
         10:a7:6b:bd:af:c6:c4:f8:bc:d1:a3:29:eb:50:79:a7:03:59:
         fa:01:64:cc:df:83:b7:bf:a5:02:ea:81:e8:be:f4:b3:bd:50:
         39:70:33:4e:45:79:ce:a8:08:58:a6:dd:ed:28:47:6c:56:bd:
         bb:d5:90:6f:0c:5b:b3:6b:c5:44:93:20:7b:28:82:42:25:11:
         b3:9f:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:27 2026 by rpki-client