Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20383334.roa
File:                     39312e3234342e3139392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          IZTumwQy8iwzIrLfHWrpK80Kfu84FMwOmuGXlxMNsZ0=
Subject key identifier:   5C:81:97:B8:D9:A0:CF:4E:9D:21:BB:1C:07:59:55:09:57:34:4F:10
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       30D25B95F6541657D558A0DC05D925F560FE3407
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20383334.roa
Signing time:             Fri 12 Sep 2025 11:31:28 +0000
ROA not before:           Fri 12 Sep 2025 11:26:28 +0000
ROA not after:            Fri 11 Sep 2026 11:31:28 +0000
asID:                     834
IP address blocks:        91.244.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d2:5b:95:f6:54:16:57:d5:58:a0:dc:05:d9:25:f5:60:fe:34:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Sep 12 11:26:28 2025 GMT
            Not After : Sep 11 11:31:28 2026 GMT
        Subject: CN=5C8197B8D9A0CF4E9D21BB1C0759550957344F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:ae:98:df:15:13:c2:48:5b:70:4d:1c:7f:
                    06:46:e0:9f:02:cc:85:60:2f:10:e2:18:8c:e9:2a:
                    81:2f:5a:46:b5:d1:77:33:1f:98:f1:45:e0:63:91:
                    48:0f:09:67:48:e9:bc:08:50:52:8b:52:4c:36:20:
                    5a:39:c8:41:5c:3e:12:d7:b2:1f:d1:e4:29:af:a0:
                    ba:e3:68:c5:d9:f1:b2:8a:c3:97:5a:53:b1:5a:05:
                    1b:15:fe:91:30:ee:1c:91:1d:f9:bc:0a:fc:0b:b9:
                    fd:45:ad:2d:29:28:5b:8a:48:ef:30:b6:4c:c1:57:
                    cf:3b:de:49:5c:f4:25:a8:42:bb:3e:0b:8f:ba:6e:
                    51:c2:5d:0d:49:0f:e4:63:44:ca:0b:89:21:4e:a5:
                    0d:3f:f2:7f:d9:ba:08:1d:e7:2b:5d:4f:25:81:03:
                    02:ed:55:7d:ac:7b:89:9e:be:90:bf:42:73:93:98:
                    21:eb:83:51:1d:a0:32:39:da:0b:4a:a1:01:96:b8:
                    05:58:34:bc:72:36:8c:7d:7a:d7:70:41:d4:5e:f3:
                    c9:77:5c:5e:d6:f4:a6:61:3b:57:3e:fd:34:e9:a9:
                    97:df:8a:25:0d:26:51:16:8a:11:f8:87:d1:f3:8d:
                    de:ab:fe:c1:ce:4a:4f:80:73:7f:95:c3:5c:fe:6c:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:81:97:B8:D9:A0:CF:4E:9D:21:BB:1C:07:59:55:09:57:34:4F:10
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:a4:23:70:4b:b2:d4:3c:74:f0:f5:68:25:73:64:f0:b9:
         32:76:bc:89:15:d5:e7:c3:02:99:80:39:87:99:d1:11:10:d9:
         36:28:d2:cc:66:d1:af:f3:5e:0b:01:4a:c3:40:30:5c:68:af:
         6c:ee:f3:f7:20:3e:79:e5:94:0b:4f:e2:89:4b:63:f5:14:f6:
         30:21:23:86:7c:b0:bb:96:7d:d7:c9:03:f5:19:16:9b:50:24:
         22:f0:87:3f:49:cc:28:da:a5:22:0f:3b:0f:06:16:52:c2:9d:
         cf:4f:1f:90:9b:a6:4f:c8:d1:29:67:9e:28:72:41:42:3b:b5:
         a4:c9:26:ce:6c:6d:b4:0e:35:91:9d:ac:12:3c:53:7c:d9:84:
         fc:92:1b:9e:16:0e:f8:98:a9:1f:76:8e:1c:c1:34:04:ea:11:
         2b:8e:89:08:f8:b7:21:df:85:2e:2f:16:0e:a2:42:47:82:3a:
         c5:d2:11:6b:d2:71:f0:74:4f:f4:11:ab:d5:38:e0:b0:ab:14:
         f7:bf:f7:52:0f:2c:77:05:28:3f:0e:82:13:cb:7b:c1:68:34:
         78:8b:a3:a9:fe:bf:0b:17:4b:6a:cc:bd:fd:9c:f2:e5:2c:d1:
         64:7c:ca:ee:f3:3c:7b:8e:9c:73:15:44:03:1c:5e:9c:e5:f6:
         3a:d4:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:02:52 2025 by rpki-client