Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32342d3234203d3e20313938303837.roa
File:                     3139342e3137392e3134362e302f32342d3234203d3e20313938303837.roa (raw, json)
Hash identifier:          h3NlsAQcL/yGSqzvoRu/LgJBGw8GU1X5rFWYZZdvU3k=
Subject key identifier:   50:D2:54:CF:36:FB:5C:D5:A5:0E:91:CF:97:43:B9:EF:BA:F7:F9:2E
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       7EFC8F87C19EF77F80FBE9AF806103F25BD2E30A
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32342d3234203d3e20313938303837.roa
Signing time:             Tue 30 Jun 2026 07:15:15 +0000
ROA not before:           Tue 30 Jun 2026 07:10:15 +0000
ROA not after:            Tue 29 Jun 2027 07:15:15 +0000
asID:                     198087
IP address blocks:        194.179.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fc:8f:87:c1:9e:f7:7f:80:fb:e9:af:80:61:03:f2:5b:d2:e3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 30 07:10:15 2026 GMT
            Not After : Jun 29 07:15:15 2027 GMT
        Subject: CN=50D254CF36FB5CD5A50E91CF9743B9EFBAF7F92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:82:7c:2d:48:62:60:d7:6f:98:f1:23:ad:
                    dc:34:47:8a:01:e9:7e:84:dc:80:49:b4:da:93:e4:
                    62:49:0c:42:6b:b6:06:86:67:14:c0:d1:61:87:c7:
                    da:fc:6f:bc:55:92:18:af:41:36:8b:83:6a:60:5b:
                    db:3e:f5:a3:14:fa:fc:51:25:d7:a1:df:1f:85:1a:
                    6e:89:15:8f:3a:fd:36:b2:a0:f2:34:13:d8:6b:c6:
                    c8:47:1d:e5:9c:5f:12:90:50:69:ce:d6:9d:cb:df:
                    8d:63:bd:30:ee:23:be:e6:e0:67:84:89:c3:1c:61:
                    bc:bd:46:cd:7e:64:4a:97:50:9d:66:91:a5:25:e4:
                    1e:06:df:57:7a:4b:6f:c6:52:d1:98:05:2d:db:9d:
                    68:51:0e:f9:80:9a:1e:57:42:c3:4d:62:df:84:02:
                    33:26:23:73:da:aa:3a:3c:d9:f8:11:9f:86:4a:87:
                    cc:32:8c:1c:6d:60:a1:54:43:bd:e1:01:96:ee:e3:
                    c0:24:5d:59:53:ed:c9:11:86:b9:76:30:e1:89:72:
                    3d:15:c8:43:5a:84:af:a2:fe:19:e1:20:f2:3f:7c:
                    88:bf:ec:43:00:55:c5:97:fe:47:96:a4:c9:fb:ab:
                    d7:49:f3:aa:d5:4c:e0:dd:ab:51:ca:21:13:60:f7:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D2:54:CF:36:FB:5C:D5:A5:0E:91:CF:97:43:B9:EF:BA:F7:F9:2E
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32342d3234203d3e20313938303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ef:37:f7:d4:cb:4c:82:cf:95:e9:7f:e8:5f:df:d3:e1:f8:
         5d:71:66:44:f0:85:35:b1:a5:83:d9:ed:6b:bd:65:26:6f:41:
         82:a0:7b:a0:91:6f:4f:37:13:f4:c3:cd:90:e7:31:86:e1:83:
         06:cc:9f:5e:ca:66:09:7b:a7:46:2b:88:f8:56:ec:e9:4e:14:
         c1:3f:1f:69:2f:89:be:02:13:a5:18:b5:29:c4:32:7c:65:10:
         30:56:1a:0c:d9:4b:44:63:fa:51:20:a9:15:99:5e:83:11:3c:
         e5:65:26:47:17:ba:77:c1:45:2c:8a:03:5c:93:55:b9:6f:fd:
         0d:1c:f3:14:fd:d6:15:cc:8a:8c:34:9c:8b:38:52:0d:96:7f:
         48:73:e8:39:9c:ee:ee:2c:08:0a:18:59:de:26:97:82:2c:41:
         15:b2:27:18:54:a5:60:b4:b0:38:ed:11:e7:65:e3:17:13:b7:
         6f:2e:bc:84:86:39:2f:70:1a:2e:03:db:e0:a1:75:a3:08:9c:
         36:5b:8c:82:fc:d7:23:43:a9:23:59:13:bb:64:67:65:22:0b:
         c9:5d:a1:50:35:a5:41:39:e9:20:c3:3e:d2:6a:6b:fe:ad:12:
         9a:c6:51:fc:0a:3e:b8:f4:38:95:31:e6:90:b6:16:67:93:46:
         50:20:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:22:07 2026 by rpki-client