Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39332e302f32342d3234203d3e20313938353636.roa
File:                     39312e3233382e39332e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier:          SKhkGfSr0HLq0/MAialAIwzInaIZ+shmjH6vv1WdzhA=
Subject key identifier:   F1:B8:8F:6C:2D:F6:5A:8E:D2:37:F3:68:29:7C:AB:82:47:BC:7A:A7
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       169E78D7F5E7318ED5ED7824CB9375AF2756F5F1
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39332e302f32342d3234203d3e20313938353636.roa
Signing time:             Mon 17 Aug 2026 21:12:49 +0000
ROA not before:           Mon 17 Aug 2026 21:07:49 +0000
ROA not after:            Mon 16 Aug 2027 21:12:49 +0000
asID:                     198566
IP address blocks:        91.238.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9e:78:d7:f5:e7:31:8e:d5:ed:78:24:cb:93:75:af:27:56:f5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug 17 21:07:49 2026 GMT
            Not After : Aug 16 21:12:49 2027 GMT
        Subject: CN=F1B88F6C2DF65A8ED237F368297CAB8247BC7AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:72:6f:86:15:a1:fe:d3:17:90:a8:b4:ae:
                    e1:03:f7:b3:c4:7a:2e:18:e3:c0:a4:ed:00:c5:4c:
                    ca:85:f1:71:df:81:63:01:22:91:07:87:57:02:fc:
                    69:88:ca:71:2f:26:7c:c4:4b:72:d8:2b:cf:dd:9d:
                    dc:36:67:68:2d:f0:e2:f9:a4:ce:ed:0e:5b:a7:54:
                    73:c3:b6:bc:e4:10:74:78:39:17:a2:93:94:55:fa:
                    f3:c3:8e:b1:b2:6a:dc:50:ad:f2:7d:9d:21:c6:11:
                    58:20:4a:72:30:00:23:f4:53:45:11:31:fd:47:ff:
                    3e:25:fa:72:15:41:2b:63:cc:de:7a:a1:8b:48:ae:
                    63:8e:17:89:e9:0a:70:fa:0f:ef:67:a6:49:85:4c:
                    23:e7:82:c2:21:a6:36:1b:1a:d7:f0:e1:80:3e:a8:
                    03:fc:1f:3a:94:ae:bf:3b:e2:c2:64:5a:06:88:9a:
                    8c:f9:7e:fb:43:0d:43:4d:d3:fa:a5:ee:96:88:37:
                    a1:e4:63:0b:fa:67:13:08:f0:7a:65:91:fe:42:bb:
                    83:67:cb:ad:3f:13:5e:41:3a:6d:fd:a0:2c:07:16:
                    1a:28:12:0a:32:0e:8b:63:67:5f:96:c3:a9:38:44:
                    09:02:08:90:1a:d3:c4:34:b9:14:bc:ab:84:6b:9c:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B8:8F:6C:2D:F6:5A:8E:D2:37:F3:68:29:7C:AB:82:47:BC:7A:A7
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233382e39332e302f32342d3234203d3e20313938353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:54:89:e7:11:33:a7:07:2c:86:be:c0:69:81:2c:34:34:08:
         78:20:37:29:ef:4e:ab:1c:18:f1:d8:5b:ff:a0:46:cb:6b:c1:
         94:95:16:30:f8:e3:49:48:52:25:ef:d6:81:a0:57:1f:ef:13:
         44:9e:1e:1e:8c:a2:b9:20:a0:24:06:50:51:ad:c6:c8:e6:1f:
         1c:68:6e:3c:fd:1c:e7:48:98:31:77:63:38:d3:20:7b:f1:f9:
         2e:72:4f:c2:b2:e9:d2:cd:7a:5b:71:fc:65:5b:6c:7e:c4:71:
         dc:ed:7d:8a:c2:8a:63:3a:b1:73:5a:0d:ed:60:9b:6d:08:24:
         db:b3:49:f2:78:66:53:1f:99:e0:94:ff:48:57:fa:a6:b4:83:
         43:aa:99:24:8a:df:95:ff:a4:d6:29:61:ed:9a:c6:99:01:ee:
         38:cf:75:98:6c:50:d7:45:91:0d:e1:66:99:78:7a:f1:a8:d3:
         85:2e:5e:9b:2c:1e:49:6e:ad:3c:82:65:47:6a:49:a9:e6:43:
         8d:5b:7b:6c:3b:c5:e2:b5:09:82:41:17:d9:be:8a:25:16:c3:
         6e:e5:6b:23:05:2c:28:bd:74:9c:89:48:94:7e:d7:7e:50:e3:
         d6:77:f8:88:e5:df:b4:1a:ce:2a:94:09:10:8f:41:cd:b1:62:
         f3:56:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:53 2026 by rpki-client