Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20343031343330.roa
File:                     39352e3231342e3137362e302f32342d3234203d3e20343031343330.roa (raw, json)
Hash identifier:          YRgsFCr3AQrPDlZFnKaP13MaeBvW66g28c/Qf1gvdPE=
Subject key identifier:   F6:22:83:D1:79:1F:87:D0:74:3A:3C:A4:8E:26:F4:20:3E:01:5E:35
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       016D02C2B106F07C6BAA3E24B89458778B631D06
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20343031343330.roa
Signing time:             Sat 16 May 2026 19:36:00 +0000
ROA not before:           Sat 16 May 2026 19:31:00 +0000
ROA not after:            Sat 15 May 2027 19:36:00 +0000
asID:                     401430
IP address blocks:        95.214.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 14:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6d:02:c2:b1:06:f0:7c:6b:aa:3e:24:b8:94:58:77:8b:63:1d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: May 16 19:31:00 2026 GMT
            Not After : May 15 19:36:00 2027 GMT
        Subject: CN=F62283D1791F87D0743A3CA48E26F4203E015E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:c9:a5:30:2a:30:0f:db:97:5f:29:41:3c:
                    6e:a2:59:ae:e2:64:da:bb:fb:7e:15:16:17:39:d5:
                    d7:a0:4b:ab:55:93:06:d2:41:e8:85:5a:7a:72:07:
                    f0:b0:ce:e7:48:5a:e9:12:f0:04:31:8f:01:57:84:
                    29:ce:cf:4b:cd:0d:9b:62:e3:37:36:88:ea:36:48:
                    0c:bd:2f:ae:dc:72:b8:d7:b3:0b:77:d2:79:a6:ce:
                    24:7e:c5:ed:ea:0d:bc:e1:95:59:2f:0f:0e:83:c3:
                    0b:f5:47:d9:ac:0d:22:e5:3d:eb:df:8a:9b:2d:22:
                    67:ac:aa:8c:23:75:22:0a:79:7e:a9:45:71:87:cb:
                    95:1e:06:5f:8a:d2:cc:fb:79:8d:25:35:84:ba:69:
                    9f:18:0d:c6:f6:7f:3b:70:fa:64:5a:af:68:50:cf:
                    43:57:b0:5c:d6:77:17:aa:b2:65:18:e9:cb:71:0a:
                    e7:ff:01:b5:8a:79:9d:ae:61:e8:4a:72:8d:d4:27:
                    dc:81:81:bd:9b:da:36:50:21:22:4a:95:38:dc:69:
                    08:6c:9c:70:5b:1a:c6:88:60:91:22:0b:66:c9:49:
                    61:cb:b5:15:3c:ae:82:91:26:4f:df:1b:57:42:3e:
                    fe:30:a6:f7:a9:e5:10:99:71:6b:96:23:2f:67:6b:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:22:83:D1:79:1F:87:D0:74:3A:3C:A4:8E:26:F4:20:3E:01:5E:35
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137362e302f32342d3234203d3e20343031343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e2:96:99:32:4e:97:90:2a:67:a4:c5:f8:80:32:75:88:31:
         cb:34:bf:c6:5b:47:d1:03:33:10:34:58:90:81:cb:f9:b3:29:
         71:21:11:a3:62:1a:0b:24:ab:eb:10:a1:18:7c:a9:51:f8:44:
         ca:4d:ef:5a:8e:5d:4f:63:ad:b6:f3:c3:f4:a5:34:18:cd:d7:
         a3:4c:5b:3e:7a:a8:14:4f:6e:e0:94:56:78:8b:88:9a:22:a7:
         ef:bd:36:f9:7d:cd:ab:ec:e0:88:26:2a:7b:1c:dd:ca:bb:ca:
         39:46:a7:87:07:16:f1:82:f4:17:6e:59:6b:03:8c:ea:c9:81:
         20:91:3d:57:c4:1c:98:60:b3:af:95:f7:3a:ec:89:ef:e2:1f:
         27:0f:12:f6:e5:48:7c:8d:af:6b:8b:ea:2c:fd:cc:c8:28:71:
         ef:cb:17:bf:a6:ce:67:f2:c6:e4:ce:bb:97:3d:63:56:92:2b:
         1f:2e:e8:2a:72:9e:82:60:94:3a:03:89:fa:23:13:cc:86:65:
         42:f3:3a:5a:6b:dd:9a:9b:e5:6c:3a:70:58:85:28:96:f0:d4:
         e2:a2:8a:94:3c:2f:2f:00:7c:d2:3f:c8:e3:83:9c:47:92:0b:
         a6:dc:88:3a:24:43:d4:76:89:a9:5d:8e:34:65:03:f3:44:4d:
         5d:14:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:01:42 2026 by rpki-client