Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e20383334.roa
File:                     39312e3233392e3134392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          R/fn4nb9wLJ0QVANNBmd1D3RqKx+OZgeszoxa9+vNdI=
Subject key identifier:   0C:DB:5B:A9:B4:1A:1C:88:D2:E3:20:C4:BA:BE:98:AC:5F:6B:1E:15
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       307C5CC8B8270D88E8ADE4876C85F5CF12604431
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e20383334.roa
Signing time:             Thu 06 Aug 2026 14:47:03 +0000
ROA not before:           Thu 06 Aug 2026 14:42:03 +0000
ROA not after:            Thu 05 Aug 2027 14:47:03 +0000
asID:                     834
IP address blocks:        91.239.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 12:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7c:5c:c8:b8:27:0d:88:e8:ad:e4:87:6c:85:f5:cf:12:60:44:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug  6 14:42:03 2026 GMT
            Not After : Aug  5 14:47:03 2027 GMT
        Subject: CN=0CDB5BA9B41A1C88D2E320C4BABE98AC5F6B1E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:88:a9:f6:ab:ff:b3:6c:f0:92:0b:c9:dc:
                    5a:f8:7a:69:fc:2a:41:35:11:9f:ca:fa:f2:95:f1:
                    de:3c:c9:53:19:2e:0b:c0:a3:a2:b5:4f:c1:db:65:
                    cb:4c:b0:1d:c0:12:2f:64:3e:68:64:31:b9:65:9e:
                    63:12:99:73:07:c5:3e:18:4b:64:fd:72:56:ee:61:
                    f2:80:3c:70:b8:a5:c0:a2:24:57:f4:0e:62:a2:f5:
                    ee:db:3c:63:8d:96:51:63:7a:5c:58:8e:05:81:04:
                    d0:a9:85:d6:24:b5:12:44:eb:dc:d5:8c:62:64:52:
                    0f:8c:8c:bd:bc:be:ff:4e:72:87:bb:0b:87:78:d8:
                    78:07:9b:83:e6:24:43:70:a7:7e:78:26:ee:42:a4:
                    5b:fb:77:ca:df:c0:41:a9:12:14:da:1d:3f:d0:67:
                    da:57:2d:0b:5d:e6:a8:de:ba:19:2b:81:08:cb:57:
                    6d:82:88:1b:91:13:32:5e:3c:d6:85:71:3b:60:72:
                    25:1b:af:bb:50:ed:a2:ba:02:ca:02:51:19:fd:0d:
                    2c:32:17:9b:e2:3d:48:ff:90:b1:af:9b:39:12:53:
                    3d:ee:32:65:1d:5c:ab:19:af:6a:ec:83:cf:eb:ee:
                    f6:66:30:77:2c:c2:bc:08:ba:37:b8:9f:99:dd:81:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DB:5B:A9:B4:1A:1C:88:D2:E3:20:C4:BA:BE:98:AC:5F:6B:1E:15
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:92:c0:3c:47:1d:13:7e:fd:62:4c:84:28:b0:33:14:86:5e:
         5a:9d:5d:6b:4d:94:a5:d3:b1:37:57:8d:20:6d:9b:e0:bf:9b:
         b7:e9:27:17:8e:3b:de:56:6b:dc:a7:d5:f1:e1:11:85:46:a6:
         80:10:89:91:ca:e6:d4:5d:02:30:78:ee:7a:a3:5d:4d:20:ec:
         53:e9:a6:94:fe:7a:2b:85:44:4b:04:63:8e:c8:3b:f6:d1:42:
         ef:7c:12:07:04:3c:c6:9c:5f:7e:2f:a1:4b:1b:0c:89:58:5a:
         21:ad:79:95:55:cf:cf:49:be:86:d4:b1:41:b3:7b:9b:a0:51:
         07:a9:13:9e:64:0c:a7:58:88:26:53:be:7e:1a:cb:29:60:c3:
         32:15:90:56:fe:ca:a7:8d:60:cd:17:c9:18:f5:46:8a:05:95:
         ae:ad:b5:85:e1:a2:2d:ff:33:88:f5:56:cb:bf:cd:31:d3:cb:
         22:ca:6f:62:0a:00:e8:4c:cf:ed:27:d4:85:29:63:c2:e5:fe:
         f9:9f:aa:2f:c8:d6:b4:6c:93:05:2c:7a:8f:a6:21:a7:c8:45:
         f8:43:2d:0b:fa:c5:f2:d9:a1:45:2d:db:94:60:44:73:1e:29:
         90:29:32:a1:4b:3a:35:a6:c7:29:a1:53:60:7c:4e:10:1b:8a:
         ca:f5:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:01 2026 by rpki-client