Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134382e302f32342d3234203d3e203235313938.roa
File:                     39312e3233392e3134382e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          oNjOLCtrlnF7MtBW7YqB2+i0XW98x41OWU30f2Vev/c=
Subject key identifier:   F2:B4:C1:E3:7F:10:32:92:BE:28:04:04:99:81:00:94:DB:6C:82:85
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       2029F9D16FBF9AAA1F9696F0052675506AC51762
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134382e302f32342d3234203d3e203235313938.roa
Signing time:             Thu 06 Aug 2026 14:45:31 +0000
ROA not before:           Thu 06 Aug 2026 14:40:31 +0000
ROA not after:            Thu 05 Aug 2027 14:45:31 +0000
asID:                     25198
IP address blocks:        91.239.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 02:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:29:f9:d1:6f:bf:9a:aa:1f:96:96:f0:05:26:75:50:6a:c5:17:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug  6 14:40:31 2026 GMT
            Not After : Aug  5 14:45:31 2027 GMT
        Subject: CN=F2B4C1E37F103292BE28040499810094DB6C8285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:fa:20:81:eb:e2:0d:43:9d:71:c9:79:f4:
                    7a:8d:dd:ce:a1:a7:c8:9f:5f:11:4e:aa:a7:18:28:
                    b9:66:2c:d3:d6:8d:bd:b1:7c:43:d6:ec:ca:43:10:
                    1c:97:d3:5a:66:65:49:a5:0f:42:05:59:a6:3f:4d:
                    fe:89:9c:6a:ae:9d:fe:2e:43:be:19:50:a8:2c:30:
                    9e:16:19:7b:45:ab:cf:05:2e:0e:85:d6:cc:d0:63:
                    47:c4:98:e6:f3:dd:09:37:a4:e9:cd:6c:2a:bb:66:
                    5b:4c:f1:35:c0:1d:2a:01:eb:51:b0:87:1b:ed:7a:
                    f5:66:d6:cf:0e:9f:ba:65:70:57:46:cc:76:f8:52:
                    50:2d:41:48:05:97:91:9e:3c:81:d8:47:7f:5a:2e:
                    8e:86:f8:66:45:4a:5e:68:6f:ca:2e:39:e9:c9:94:
                    ac:01:f1:8f:66:2d:00:0b:4d:19:c6:f3:c6:71:2f:
                    61:a9:6f:a8:2a:b3:5a:95:17:4f:a3:17:6e:17:c2:
                    48:33:71:ca:f4:91:f2:c7:61:f7:a1:c0:cc:82:3b:
                    12:d6:8d:7c:91:ad:f3:92:ba:40:d6:b7:bc:1f:de:
                    70:af:3f:7c:a7:60:1e:05:b7:f2:d4:53:19:0e:73:
                    71:96:69:0f:8b:f0:b0:ef:41:9c:82:93:a5:e5:3f:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:C1:E3:7F:10:32:92:BE:28:04:04:99:81:00:94:DB:6C:82:85
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134382e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:67:d6:de:8b:68:8f:c5:fd:c9:90:73:46:05:0c:af:0b:1e:
         a1:14:92:e0:d5:b0:d1:f2:19:32:d3:b8:01:37:74:6a:8f:0e:
         d3:0c:d9:70:77:65:05:62:1f:c3:24:4d:f3:86:c6:ae:b6:eb:
         38:6e:fa:c8:90:2f:7c:ba:55:22:98:4f:2e:63:48:eb:be:71:
         bf:86:d9:e8:29:75:f9:8b:60:77:ed:01:9c:62:f8:d5:11:49:
         f2:49:4c:cc:e6:a3:1c:bd:21:65:70:8c:0b:48:78:d9:d1:01:
         b2:25:d4:44:cc:0c:d9:76:bf:c8:d9:44:c8:d3:c3:67:97:06:
         70:ce:a9:ee:29:1e:13:d0:db:37:d1:fd:61:71:6d:b1:cb:25:
         75:6e:4e:82:f2:b9:77:59:d5:91:c5:8f:d0:88:1e:6a:86:ac:
         f5:e9:fa:2c:0a:d5:5d:84:0e:06:60:ab:aa:7f:f4:7c:ec:76:
         7a:65:ff:de:76:79:eb:e5:a5:65:5d:48:f8:28:3b:e7:d3:b8:
         52:5c:28:eb:a5:8d:d7:43:f7:53:fb:f3:19:57:bd:21:28:bd:
         75:56:3a:21:0b:4e:85:10:70:25:5a:56:cf:45:36:af:c6:ea:
         eb:4a:c6:fd:63:2f:61:e2:00:cf:34:4f:6e:53:cb:c5:55:2f:
         a0:e4:62:54
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUICn50W+/mqoflpbwBSZ1UGrFF2IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjYwODA2MTQ0MDMxWhcNMjcwODA1MTQ0NTMx
WjAzMTEwLwYDVQQDEyhGMkI0QzFFMzdGMTAzMjkyQkUyODA0MDQ5OTgxMDA5NERC
NkM4Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnb6IIHr4g1D
nXHJefR6jd3OoafIn18RTqqnGCi5ZizT1o29sXxD1uzKQxAcl9NaZmVJpQ9CBVmm
P03+iZxqrp3+LkO+GVCoLDCeFhl7RavPBS4OhdbM0GNHxJjm890JN6TpzWwqu2Zb
TPE1wB0qAetRsIcb7Xr1ZtbPDp+6ZXBXRsx2+FJQLUFIBZeRnjyB2Ed/Wi6Ohvhm
RUpeaG/KLjnpyZSsAfGPZi0AC00ZxvPGcS9hqW+oKrNalRdPoxduF8JIM3HK9JHy
x2H3ocDMgjsS1o18ka3zkrpA1re8H95wrz98p2AeBbfy1FMZDnNxlmkPi/Cw70Gc
gpOl5T9mNQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPK0weN/EDKSvigEBJmBAJTb
bIKFMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzM5MzEyZTMyMzMzOTJlMzEzNDM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvvlDANBgkqhkiG9w0BAQsF
AAOCAQEAmWfW3otoj8X9yZBzRgUMrwseoRSS4NWw0fIZMtO4ATd0ao8O0wzZcHdl
BWIfwyRN84bGrrbrOG76yJAvfLpVIphPLmNI675xv4bZ6Cl1+Ytgd+0BnGL41RFJ
8klMzOajHL0hZXCMC0h42dEBsiXURMwM2Xa/yNlEyNPDZ5cGcM6p7ikeE9DbN9H9
YXFtscsldW5OgvK5d1nVkcWP0Igeaoas9en6LArVXYQOBmCrqn/0fOx2emX/3nZ5
6+WlZV1I+Cg759O4Ulwo66WN10P3U/vzGVe9ISi9dVY6IQtOhRBwJVpWz0U2r8bq
60rG/WMvYeIAzzRPblPLxVUvoORiVA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:02 2026 by rpki-client