Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32352e302f32342d3234203d3e20313339363432.roa
File:                     3138352e3137372e32352e302f32342d3234203d3e20313339363432.roa (raw, json)
Hash identifier:          jRjyeysCVfOPf1RJzl6OvSsBi9Tgkf3F1WhFqGWmkpw=
Subject key identifier:   88:5A:40:DE:B6:29:88:F6:B1:5A:55:C2:5B:F8:24:D0:99:AC:11:99
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6129279B5D5942B193455720F28F81F6B550CD24
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32352e302f32342d3234203d3e20313339363432.roa
Signing time:             Sat 17 Oct 2026 06:14:22 +0000
ROA not before:           Sat 17 Oct 2026 06:09:22 +0000
ROA not after:            Sat 16 Oct 2027 06:14:22 +0000
asID:                     139642
IP address blocks:        185.177.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:29:27:9b:5d:59:42:b1:93:45:57:20:f2:8f:81:f6:b5:50:cd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Oct 17 06:09:22 2026 GMT
            Not After : Oct 16 06:14:22 2027 GMT
        Subject: CN=885A40DEB62988F6B15A55C25BF824D099AC1199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:f0:75:54:14:47:9c:c3:9b:3f:a4:7a:ba:
                    30:17:25:e0:ad:c9:4d:11:39:fc:aa:7b:b3:e6:ca:
                    0c:85:8c:45:04:d2:ba:e0:4d:96:90:fa:59:b9:9e:
                    dc:92:25:6e:fb:3a:f3:9e:10:ce:54:6b:80:a6:a9:
                    38:3b:3a:e7:8a:21:9a:55:6f:10:5e:10:9d:7b:69:
                    20:a3:92:4c:cb:60:4c:27:6c:8d:80:cd:46:a7:a9:
                    08:ca:59:07:d3:34:e7:f2:6e:4c:d9:6b:2e:0d:8d:
                    a6:fd:c1:eb:71:23:bb:c3:86:39:92:aa:0f:0c:78:
                    7b:06:26:d1:85:e7:d2:cb:a0:ca:25:5c:be:1e:4b:
                    66:d3:b4:ac:ad:58:67:57:4a:d3:6c:2a:02:4e:96:
                    94:38:8a:43:2e:5c:8e:37:dc:c1:9b:da:bc:db:5f:
                    2a:f2:77:ae:1b:21:d0:b8:19:51:23:13:6c:a2:4b:
                    3a:ed:b9:7e:37:d9:24:a3:7d:53:2b:d5:c7:ee:74:
                    51:b0:0b:b5:1e:1c:98:fb:b9:a2:1c:39:7a:e9:7a:
                    0d:4b:c3:03:bd:c4:92:cc:38:1d:8e:1b:94:74:a5:
                    dd:18:62:8c:8d:45:bf:96:78:72:c3:c5:ac:f2:32:
                    73:a9:56:f4:3b:d4:b8:6f:8f:01:51:29:dd:12:16:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5A:40:DE:B6:29:88:F6:B1:5A:55:C2:5B:F8:24:D0:99:AC:11:99
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32352e302f32342d3234203d3e20313339363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:09:57:47:12:5e:bb:c0:6a:dc:41:09:c1:8f:d1:e2:17:09:
         c1:0f:59:f3:c4:36:b5:8b:6f:a3:c8:c7:3b:f6:92:f6:2e:71:
         df:77:49:9e:cc:1d:28:be:40:e6:13:73:cd:c9:c0:76:01:e9:
         99:1e:38:7c:35:d7:94:47:73:f6:81:dc:ef:5c:11:2e:44:f5:
         63:bf:78:b8:9a:8b:71:2f:57:1c:a0:d6:01:d8:d7:81:30:30:
         8a:64:03:c8:88:53:3d:26:7e:e4:a6:3b:0c:2b:2d:c1:d4:ab:
         54:d9:a7:c2:fd:2c:4e:a9:d9:e3:8b:6f:4c:54:87:f5:50:fb:
         4f:15:d5:45:e6:11:68:88:6b:f9:84:4f:90:b1:fa:8f:49:56:
         90:93:a8:5b:6f:1d:9b:6e:67:b2:47:0f:59:d1:6d:3d:d2:c3:
         e4:82:d7:16:15:14:0c:96:34:9d:03:a1:78:f3:55:0c:fe:cf:
         c2:71:7b:a4:50:9f:a8:68:e7:e5:ac:8f:62:9e:5c:b8:e9:d2:
         1a:64:0c:08:4d:c4:74:8e:86:e3:70:26:14:9d:57:a6:a0:41:
         91:f2:a3:50:06:0f:d1:2a:ee:06:b8:3b:24:ae:5c:95:9e:a2:
         d4:e3:4d:ef:07:71:78:d6:4b:65:8f:7b:c8:61:ef:6e:03:b9:
         1b:b9:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:59:08 2026 by rpki-client