Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139362e302f32342d3234203d3e20313333363339.roa
File:                     39312e3234342e3139362e302f32342d3234203d3e20313333363339.roa (raw, json)
Hash identifier:          VR/PLj8Af85ZNMPhqro/F9o1aeUFgA2Mx5fS1tcj/fM=
Subject key identifier:   EF:72:59:D6:ED:F6:1D:3C:3A:41:5D:A1:7F:BD:CE:92:1A:C4:00:4D
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       25726AFE5F1635FEB85B216D003C46C59F710577
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139362e302f32342d3234203d3e20313333363339.roa
Signing time:             Mon 22 Jun 2026 19:03:05 +0000
ROA not before:           Mon 22 Jun 2026 18:58:05 +0000
ROA not after:            Mon 21 Jun 2027 19:03:05 +0000
asID:                     133639
IP address blocks:        91.244.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 19:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:72:6a:fe:5f:16:35:fe:b8:5b:21:6d:00:3c:46:c5:9f:71:05:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 22 18:58:05 2026 GMT
            Not After : Jun 21 19:03:05 2027 GMT
        Subject: CN=EF7259D6EDF61D3C3A415DA17FBDCE921AC4004D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:70:de:fa:d0:1c:ac:97:17:c7:7b:e9:34:
                    c7:b1:e2:45:bb:52:6b:31:0e:0a:62:b6:f4:c7:df:
                    c8:15:27:a5:05:ec:a2:48:8b:4c:64:ed:d2:9f:7d:
                    c0:4e:60:96:86:2c:f6:c0:84:d4:ed:20:60:10:bb:
                    20:43:ad:90:cb:39:eb:b8:65:d8:06:66:29:25:9b:
                    8b:95:6f:3a:51:e6:d4:7c:05:b8:fc:75:d0:7a:72:
                    54:7d:5d:65:d7:cd:d8:2e:04:15:d1:eb:ae:5e:a9:
                    af:6e:b4:9e:47:3e:92:42:9a:49:b8:4a:83:6a:e0:
                    48:1b:14:68:73:9a:50:ab:e6:a6:a5:bc:99:9b:61:
                    4d:75:2d:fc:90:2f:88:e9:72:71:a1:df:6b:c4:ce:
                    27:26:c6:7b:d1:67:ce:9a:76:14:0a:af:82:f3:5b:
                    b0:3e:34:0d:a1:43:8f:88:00:6d:a7:a1:df:bb:df:
                    de:ec:a8:78:ac:60:92:95:a1:a9:82:1b:89:be:cb:
                    ca:77:00:84:99:f3:4f:5d:c0:27:04:26:d7:4f:cc:
                    d4:04:8c:6f:26:40:98:94:17:f5:97:69:38:98:c2:
                    63:2d:c8:a7:44:96:8f:7a:e1:16:98:31:81:73:99:
                    5b:e3:7e:8e:f3:d3:69:e9:78:23:fc:19:f2:cf:04:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:72:59:D6:ED:F6:1D:3C:3A:41:5D:A1:7F:BD:CE:92:1A:C4:00:4D
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139362e302f32342d3234203d3e20313333363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:ba:0d:9f:1a:a5:04:c1:db:7b:03:f6:b7:6b:58:12:da:
         4e:63:29:40:2d:7c:20:c8:89:55:e4:27:c8:a4:8e:34:e8:e7:
         22:08:ad:f2:a9:ef:11:74:70:02:4f:d5:b4:11:ef:14:6d:e7:
         4f:48:5c:cb:32:e2:90:f4:76:c8:92:c5:2a:16:52:da:58:f1:
         fd:60:21:fe:06:01:36:5f:a2:e6:ed:c5:dc:e7:63:20:79:b2:
         24:16:e4:5d:3f:73:68:51:8f:ad:f0:ad:fc:13:05:b5:82:76:
         0b:bc:78:be:91:de:84:54:e4:f3:40:bd:98:63:17:31:a0:4b:
         35:7b:5f:a9:ba:f1:02:5e:fc:5b:07:99:08:19:f0:30:8c:00:
         36:ed:d5:eb:07:c3:d1:d4:77:04:8e:18:5a:01:d4:6b:73:b8:
         9c:ed:5e:1f:bc:de:92:87:b8:58:11:e0:e4:4e:71:30:c5:75:
         cc:53:be:4c:48:b4:0d:c6:86:f1:2e:86:82:26:68:b4:a1:38:
         7d:aa:94:a0:4b:21:28:97:d4:ba:68:12:ec:67:d9:3e:c7:65:
         18:28:03:38:be:d1:7d:e2:93:22:82:16:4c:5e:4c:13:57:86:
         dd:1e:b4:ef:e2:f1:ae:75:62:ab:48:52:18:17:a4:5c:f4:0c:
         dd:9e:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 01:46:30 2026 by rpki-client