Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203134363138.roa
File:                     3138352e3137372e32362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          aWw7uY6opLVHrDgK7iph7JZP5OM3KrVdjABoYeXixK4=
Subject key identifier:   6D:D3:AF:FB:41:18:85:DA:15:A5:36:B4:2B:FD:B6:BF:1A:5D:00:40
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       754A36E7397977691BEF53724AFBC20989A02D6D
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 29 Apr 2025 20:09:49 +0000
ROA not before:           Tue 29 Apr 2025 20:04:49 +0000
ROA not after:            Tue 28 Apr 2026 20:09:49 +0000
asID:                     14618
IP address blocks:        185.177.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 03:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4a:36:e7:39:79:77:69:1b:ef:53:72:4a:fb:c2:09:89:a0:2d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 29 20:04:49 2025 GMT
            Not After : Apr 28 20:09:49 2026 GMT
        Subject: CN=6DD3AFFB411885DA15A536B42BFDB6BF1A5D0040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:50:f4:28:94:a3:bd:e9:74:49:0e:48:19:
                    28:77:1e:30:8f:ca:46:bd:6b:d2:81:8f:a3:69:71:
                    09:8a:10:d0:6b:2f:66:59:b1:65:ba:ee:7f:00:4b:
                    11:6e:0a:75:d4:da:f1:a1:14:e0:1b:37:82:2e:ff:
                    a9:2c:05:08:76:00:2b:59:78:72:b3:da:a4:00:47:
                    dc:fe:5d:55:d5:a5:04:8a:71:0d:27:a0:76:f6:7f:
                    39:22:0b:c3:8d:54:2b:e2:f3:66:7a:ef:e8:04:41:
                    84:98:7a:75:6e:27:3b:57:90:c3:0d:d5:5b:ce:d4:
                    6d:15:1e:b6:50:a8:ee:55:59:61:29:8b:e8:c1:7a:
                    be:08:4d:23:e5:40:d6:a7:b6:bf:f7:dd:16:5e:39:
                    0f:3d:11:a6:bc:1d:99:3f:29:7f:64:d6:26:9a:37:
                    2e:4c:16:9e:cb:2f:a7:cb:19:0c:f3:55:32:89:c2:
                    96:77:b2:16:46:ef:f5:6c:6d:9c:20:e6:db:1f:b8:
                    6f:73:89:26:2c:06:52:e4:7e:6d:f0:e9:56:0e:7b:
                    6e:ce:3a:e0:63:26:1f:85:a6:b7:82:ae:7e:95:f9:
                    b7:9a:a2:fb:17:d9:e0:79:89:dd:bb:3f:a6:12:ee:
                    31:cc:5b:07:06:3a:74:98:80:be:8b:1d:2e:65:b2:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D3:AF:FB:41:18:85:DA:15:A5:36:B4:2B:FD:B6:BF:1A:5D:00:40
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:1b:a9:ba:ec:cd:40:ba:2f:49:e7:62:f3:a8:5d:1a:de:
         09:83:ac:47:2b:8c:7c:9f:3c:7f:bd:56:7d:8f:ac:04:fc:d1:
         55:6b:5b:bf:01:de:44:87:b8:6b:69:f4:8d:07:17:7d:d0:a5:
         31:c9:66:c5:89:97:1f:00:b0:fb:3e:29:17:80:c1:76:c9:8c:
         40:95:98:6d:96:db:20:cf:61:e1:c4:d9:a6:ac:b8:83:61:34:
         58:94:70:d8:a0:ad:01:8d:e1:99:1f:8c:03:41:b4:0f:1a:a6:
         9f:b9:6f:9e:34:c4:62:30:e4:4c:be:f0:33:b1:fc:cd:f2:dc:
         ef:82:01:79:33:21:77:9d:1e:3d:8b:81:ef:ba:fb:5b:b1:13:
         75:a1:0b:3a:04:c2:d4:93:4b:5f:3f:00:2e:c1:dd:61:68:08:
         84:be:a0:0b:1c:7a:94:4e:3d:58:d5:07:26:08:67:f6:cc:d5:
         90:3a:1c:14:f3:55:bd:28:a7:92:72:b2:4e:7e:0b:ec:66:6e:
         c1:3f:72:b9:42:39:a3:98:a3:74:a2:e5:0a:f1:0e:87:f9:75:
         01:47:63:5e:f7:32:89:ef:03:9e:98:c3:5e:42:11:27:24:5b:
         85:d5:79:26:a9:14:e8:1f:a9:4c:cf:90:66:c9:cd:1d:8d:1f:
         9a:7f:1a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:24:54 2025 by rpki-client