Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20313335343032.roa
File:                     39352e3231342e3137372e302f32342d3234203d3e20313335343032.roa (raw, json)
Hash identifier:          cDJVRLsuSuTWGptwwWm1gb8pm2oNDMZDwQexwr92bzM=
Subject key identifier:   ED:17:9D:32:0A:89:71:85:13:03:F0:86:00:C5:B8:D9:12:A7:5B:13
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       1509E8691D72CDA587F206ABCDF5C9E7C1099913
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20313335343032.roa
Signing time:             Wed 04 Mar 2026 03:11:22 +0000
ROA not before:           Wed 04 Mar 2026 03:06:22 +0000
ROA not after:            Wed 03 Mar 2027 03:11:22 +0000
asID:                     135402
IP address blocks:        95.214.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 12:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:09:e8:69:1d:72:cd:a5:87:f2:06:ab:cd:f5:c9:e7:c1:09:99:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar  4 03:06:22 2026 GMT
            Not After : Mar  3 03:11:22 2027 GMT
        Subject: CN=ED179D320A8971851303F08600C5B8D912A75B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:98:1d:91:c2:50:32:88:2c:8c:b6:cd:a5:
                    5b:7f:03:6e:6d:ec:55:d1:b1:3a:5a:da:d6:fe:d2:
                    cc:15:03:89:25:8f:8f:9b:a7:c8:64:b3:10:4a:49:
                    ae:4a:b9:85:24:ea:e6:68:34:17:02:a9:73:39:e0:
                    72:ea:80:1b:6c:a9:b8:8e:d3:4b:50:47:a5:58:d8:
                    45:2d:93:a6:e5:a4:da:c5:6f:7d:93:ef:99:9d:f5:
                    33:90:dd:c8:2b:38:a3:14:fb:16:10:b7:be:a2:f4:
                    e6:f2:18:2e:62:46:46:5a:aa:77:cb:cc:71:3c:f6:
                    46:6a:72:9c:e5:f7:2c:72:68:4a:b0:67:15:57:c0:
                    61:53:a5:a2:23:13:d7:cd:65:d6:66:f2:a7:5a:7c:
                    89:dd:6f:24:85:76:5c:29:8e:3d:80:a6:72:4e:e4:
                    cb:5a:25:8d:53:af:5c:c8:80:32:42:77:87:cc:56:
                    99:b1:48:29:14:96:5f:b3:af:b7:5f:7f:c0:db:00:
                    27:97:44:0f:a6:5a:40:4f:3a:7d:f3:91:dd:55:98:
                    f5:97:62:4c:fc:2e:8d:c1:48:9a:d7:58:a2:aa:30:
                    23:d0:20:ea:b2:f4:cb:7b:39:a9:f4:d9:a6:1c:bc:
                    69:ad:95:5a:6e:40:8c:a8:0a:9a:c7:59:76:f2:d3:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:17:9D:32:0A:89:71:85:13:03:F0:86:00:C5:B8:D9:12:A7:5B:13
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137372e302f32342d3234203d3e20313335343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:69:01:93:c3:76:48:17:25:cd:8d:d2:f4:5b:09:86:3d:
         df:5b:6d:0e:56:fc:ad:78:b0:f2:54:ba:7c:c7:49:b2:ad:cb:
         ad:a4:6d:09:40:bc:f0:e1:14:59:38:56:8c:ec:e5:0c:12:32:
         bf:ae:0c:c8:73:a0:ee:c6:6b:92:f0:05:28:f6:4e:f2:59:fa:
         b9:70:fc:0b:25:19:30:99:43:a9:bc:36:a1:d6:b2:92:52:81:
         29:26:73:af:eb:08:90:0f:07:64:40:ac:b6:43:10:f4:dc:01:
         df:8b:11:f1:4c:83:b0:8b:a2:dc:50:b3:70:ac:bf:1c:26:fa:
         47:16:c9:fb:92:a4:b7:52:7b:98:77:e8:fd:2b:97:7b:e2:5b:
         3b:5d:c6:69:a3:d6:ff:c5:7b:2e:cf:d0:fd:3a:02:4f:4f:2a:
         39:cb:a3:da:22:32:9c:1f:09:e8:6c:d8:85:d6:73:d9:e3:11:
         92:2c:8c:38:13:e6:95:9e:09:2c:4c:49:b1:f4:c2:cb:55:a2:
         be:6d:f1:62:07:56:3e:83:50:26:c2:35:00:02:72:0e:fa:84:
         ca:d2:f3:df:28:a7:ad:0e:14:9a:f7:af:95:5f:fd:be:91:f4:
         bc:d2:cd:18:74:17:1e:71:54:f0:eb:cf:c0:f3:01:65:4c:4e:
         ac:d4:92:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:02:30 2026 by rpki-client