Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203239383032.roa
File:                     39312e3234342e3139382e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          7T+KN5vz0/DIPiP4mZZZjqwOxnwoC21QLV1yjMeFjYQ=
Subject key identifier:   CC:88:BD:52:74:B9:4A:52:AB:91:61:09:07:CB:97:41:F9:38:C9:F0
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       062EA19767CC74E2980915802395AF5699331AEE
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203239383032.roa
Signing time:             Tue 10 Feb 2026 00:16:00 +0000
ROA not before:           Tue 10 Feb 2026 00:11:00 +0000
ROA not after:            Tue 09 Feb 2027 00:16:00 +0000
asID:                     29802
IP address blocks:        91.244.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 19:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2e:a1:97:67:cc:74:e2:98:09:15:80:23:95:af:56:99:33:1a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Feb 10 00:11:00 2026 GMT
            Not After : Feb  9 00:16:00 2027 GMT
        Subject: CN=CC88BD5274B94A52AB91610907CB9741F938C9F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:f1:57:e4:b5:47:9f:d0:5f:3f:79:31:46:
                    7b:c4:ae:6e:46:9e:ab:a5:28:9b:00:f6:94:fb:51:
                    8d:d0:a0:da:87:0b:a4:58:56:31:c5:73:36:e2:48:
                    32:30:84:eb:6b:92:3a:bd:48:04:b8:d4:02:ab:19:
                    50:84:3d:00:2c:55:d8:f1:ec:52:99:87:a2:16:97:
                    ae:46:4f:09:69:f3:44:9d:03:c2:23:e1:c7:81:02:
                    74:46:7d:8b:9b:d0:41:5d:14:0e:70:e0:a2:0d:b4:
                    da:24:84:36:9a:28:72:1c:a9:5b:7b:10:5b:ad:d7:
                    f0:2b:40:57:a6:ed:c3:1b:27:65:b1:e8:3d:19:37:
                    aa:20:21:7f:70:3b:d8:5f:69:aa:84:09:dc:85:0e:
                    ee:57:65:0e:8f:94:cc:9e:28:9b:84:29:e5:38:b5:
                    76:70:9e:e4:02:ee:d8:8e:b2:79:9b:2c:60:94:73:
                    ed:72:dc:98:0e:e2:da:42:c4:0a:b0:e3:ee:4e:2f:
                    cf:ed:f0:c4:59:fe:11:44:eb:a8:a9:42:2b:99:98:
                    c2:f2:1c:aa:1e:82:89:08:d6:f9:fd:2e:b4:96:80:
                    00:b9:26:88:cd:2b:98:ea:60:19:5a:79:14:3b:53:
                    48:e4:38:9a:10:3b:0e:09:02:3f:1f:c2:82:30:3e:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:88:BD:52:74:B9:4A:52:AB:91:61:09:07:CB:97:41:F9:38:C9:F0
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a8:f2:3f:ce:75:25:73:57:10:04:be:23:94:30:55:01:68:
         01:c9:ae:83:e7:88:28:8b:8e:61:fe:b3:b5:0c:e0:52:ac:39:
         11:68:46:59:ea:66:c2:6b:86:ab:bf:0f:8c:68:dd:a2:58:3c:
         77:87:13:d7:ee:d0:10:c6:7c:d1:3d:c5:8e:a6:2a:ff:a2:e5:
         61:a6:f9:8c:78:a1:81:55:b4:a4:85:c9:00:ad:11:bc:3f:32:
         3d:8f:75:a7:25:dd:69:a2:63:e0:18:2a:62:b1:c7:ea:c5:40:
         3e:32:fb:ac:00:a1:8e:2d:e8:1d:22:71:16:2e:00:14:f9:b4:
         02:5a:c4:1b:d2:ce:60:75:6c:99:91:2d:4f:86:76:c9:a1:6f:
         e4:e8:9a:79:13:a3:1b:17:66:86:ff:70:ca:36:2d:56:47:99:
         e2:fa:56:96:6c:83:a2:e1:06:10:a5:13:af:b3:af:9e:db:7e:
         40:a8:2f:36:64:45:e3:c0:59:7a:c2:c7:26:5b:8e:21:73:49:
         35:c9:d3:ee:f6:a9:94:2f:af:8e:8b:ef:d0:8a:f8:9e:6d:5b:
         64:04:c6:58:69:df:f8:db:ed:d6:e7:de:00:c9:4f:25:f0:6e:
         b2:aa:ac:67:9d:73:6a:7f:56:0f:9b:d1:18:3b:ff:95:00:76:
         df:66:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 03:49:40 2026 by rpki-client