Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203230333236.roa
File:                     39352e3231342e3137362e302f32342d3234203d3e203230333236.roa (raw, json)
Hash identifier:          H7rRh7iA7rT9OKmjq6GUnRgVQKOGN7l7Q2EmrZoy8JU=
Subject key identifier:   D4:F4:16:13:63:76:E2:8D:AE:34:CC:C9:C3:0B:B3:E4:08:3B:6C:7B
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6B5D7F4A71945F38913F021B2AD22811CE26DFCA
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203230333236.roa
Signing time:             Sat 10 May 2025 08:01:40 +0000
ROA not before:           Sat 10 May 2025 07:56:40 +0000
ROA not after:            Sat 09 May 2026 08:01:40 +0000
asID:                     20326
IP address blocks:        95.214.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 03:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5d:7f:4a:71:94:5f:38:91:3f:02:1b:2a:d2:28:11:ce:26:df:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: May 10 07:56:40 2025 GMT
            Not After : May  9 08:01:40 2026 GMT
        Subject: CN=D4F416136376E28DAE34CCC9C30BB3E4083B6C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:af:ee:3b:c9:60:8f:b6:3f:7f:83:55:4a:bd:
                    ba:98:85:d2:ab:74:68:cc:53:ce:89:95:ff:1e:ca:
                    17:7c:81:26:ae:90:66:40:cc:6f:32:12:1a:05:c7:
                    bc:ec:d4:9d:22:c7:05:5f:ae:96:b6:22:92:1a:cc:
                    ad:52:de:65:11:f5:cf:1c:a1:5b:0a:a7:74:12:09:
                    f3:34:8a:78:cf:52:11:ce:9b:08:6a:78:bb:cf:7d:
                    a5:7c:9f:93:fd:71:f5:26:90:49:8d:80:f7:ec:15:
                    a9:61:0c:b0:1f:f6:40:d0:5c:e8:47:d5:74:17:93:
                    06:2a:d2:97:a4:55:63:61:9e:a9:d7:2c:eb:06:05:
                    ee:97:01:f9:7f:59:d8:19:11:f7:2f:5f:5e:95:af:
                    88:dd:b1:2a:0c:0a:b8:32:91:78:36:f2:2e:1c:d0:
                    bb:6c:2b:d3:99:9a:93:54:05:b5:89:1c:8e:a7:db:
                    5a:7a:ae:cf:ef:10:14:6f:ad:91:f6:1a:bd:93:6c:
                    17:6b:dd:5b:78:07:6e:2a:b5:5a:96:63:ce:c2:9d:
                    64:85:4a:eb:f2:08:4e:fd:98:24:85:98:e6:31:98:
                    5d:d7:20:1b:7b:a2:3f:4b:29:6b:a5:b6:ac:b5:7d:
                    d6:90:22:5f:7e:cb:95:9c:d5:41:4f:bd:b0:60:1f:
                    92:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F4:16:13:63:76:E2:8D:AE:34:CC:C9:C3:0B:B3:E4:08:3B:6C:7B
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e203230333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:75:91:22:26:ef:7f:d4:30:c6:4d:1b:74:85:1c:4d:96:
         71:9e:b5:da:62:98:b5:bc:7c:66:c8:99:09:ae:57:38:6d:91:
         cd:0b:40:16:07:fb:15:d8:6c:e1:c5:92:25:3b:0b:77:17:f0:
         72:a2:fc:96:69:52:a1:f2:68:dc:37:d8:20:26:50:a5:c0:13:
         32:95:3c:c9:eb:c9:00:a7:62:4a:69:2f:64:ce:4a:34:17:18:
         f9:54:e3:f8:0c:a8:fd:1d:b6:23:5d:39:38:90:ce:c4:b2:62:
         2f:71:6a:d1:7a:54:85:da:42:db:96:bf:92:16:90:2a:d6:fb:
         98:92:1e:17:51:3c:82:7b:c8:10:d0:a8:4a:3c:4f:f0:e2:50:
         ae:54:1d:25:3b:1c:57:37:be:09:71:16:1d:4a:2e:e7:05:2d:
         46:7f:a0:10:4a:c3:eb:47:28:54:2f:7e:6d:eb:21:9c:be:cc:
         27:bb:93:5c:e1:c1:6e:0f:63:63:b7:b2:d0:2e:bf:12:5d:74:
         04:55:b3:e7:ee:d7:e7:17:86:68:1b:d0:13:6d:07:d8:ad:7b:
         44:50:48:8e:5c:2d:00:d5:2d:3b:6b:70:d3:12:6d:83:92:46:
         35:33:a7:bb:74:82:90:49:5f:a5:66:91:fd:4b:57:97:5a:83:
         95:ec:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:06:53 2025 by rpki-client