Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e203235313938.roa
File:                     39352e3231342e3137382e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          uhWId7iewsZf6EKlfQke8DU1Kqrfg7pc9AbR9jakAQI=
Subject key identifier:   80:4E:C9:47:F6:AE:A2:29:EC:7F:41:F1:AE:1C:56:F1:68:30:35:26
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       410C7E2DBE3B390F7DD8F049046DBE1A6DF2EB21
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e203235313938.roa
Signing time:             Tue 30 Jun 2026 09:36:32 +0000
ROA not before:           Tue 30 Jun 2026 09:31:32 +0000
ROA not after:            Tue 29 Jun 2027 09:36:32 +0000
asID:                     25198
IP address blocks:        95.214.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0c:7e:2d:be:3b:39:0f:7d:d8:f0:49:04:6d:be:1a:6d:f2:eb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 30 09:31:32 2026 GMT
            Not After : Jun 29 09:36:32 2027 GMT
        Subject: CN=804EC947F6AEA229EC7F41F1AE1C56F168303526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:d1:55:a6:45:89:2f:fe:52:ce:eb:5c:85:
                    ba:d4:35:c1:ea:21:c3:7b:56:85:9b:c7:a7:c9:28:
                    ff:a4:bc:2e:d8:5b:f7:1e:6c:c1:8e:1c:1c:18:81:
                    ed:c1:34:e1:12:0c:c1:9e:54:84:6f:81:4b:df:e0:
                    38:ba:44:6e:1d:b2:1f:73:de:91:b5:c2:30:50:d6:
                    11:56:67:82:3a:ab:9d:f6:d8:4e:4a:e1:a2:ac:c6:
                    a9:95:a2:a4:6c:ed:33:af:c7:dd:aa:d0:59:55:a0:
                    7b:8f:9c:38:f8:75:a3:dc:d8:f2:be:f8:04:8d:d4:
                    a6:3a:46:0c:bf:02:d0:e4:30:5e:ff:eb:53:6e:78:
                    b0:c8:d8:5f:76:db:d0:98:ae:35:f4:58:6c:8f:66:
                    be:81:38:94:e2:2f:5d:1f:c1:4c:17:22:00:48:80:
                    75:60:e0:3d:53:6b:1d:38:e2:7b:3c:ed:c9:6e:51:
                    f9:68:3e:83:b2:43:8c:13:51:9d:63:6c:a6:10:c4:
                    62:47:0e:32:75:80:ea:28:5d:47:e0:50:b8:66:5c:
                    18:8f:8d:a4:8e:db:db:2f:ce:c8:dd:0f:9f:91:47:
                    2d:2d:d1:2b:83:46:8d:b4:fb:5e:98:e2:ca:d2:0c:
                    51:28:29:7c:48:62:0c:bb:af:32:b2:82:d8:e0:68:
                    e7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:C9:47:F6:AE:A2:29:EC:7F:41:F1:AE:1C:56:F1:68:30:35:26
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ac:87:4c:f0:04:d8:40:12:84:c6:22:da:b2:e0:33:6e:62:
         0a:86:ff:40:94:ef:f7:8b:e8:e5:2a:a6:b1:b6:08:82:d3:b4:
         cf:6a:83:e3:79:33:45:72:a2:2a:49:d1:a3:e1:3e:97:5c:52:
         d9:58:b8:24:04:23:ce:d3:73:22:ce:bd:55:0a:9b:6e:b7:20:
         26:50:29:c2:3d:f9:de:c5:14:66:f8:cc:a9:04:ac:c5:2d:3a:
         8e:fe:49:c0:33:64:9d:f2:36:76:e3:0c:a1:1d:0d:05:7b:10:
         7a:5c:b4:91:a9:1b:42:4a:3d:4f:36:40:10:84:e1:de:29:af:
         99:c7:ee:8a:8d:0c:1d:3c:b3:d3:d1:5b:be:35:c9:e4:e0:43:
         e9:a4:05:74:12:53:52:74:b2:65:6f:b4:59:17:7f:a5:c3:3a:
         f7:e9:98:b3:00:02:05:49:c9:ec:e9:e5:ff:6c:16:4d:4e:5d:
         86:2d:d5:a4:0b:ac:45:15:95:74:46:23:32:3b:2f:6c:12:0f:
         3b:e7:ae:30:34:fa:95:ce:75:6c:0a:3d:2f:c6:0f:43:67:d2:
         9e:42:90:c8:8c:51:99:21:2a:e4:a4:66:15:3c:75:fb:0b:22:
         6b:cc:c6:35:ad:d0:9c:87:87:75:ec:c3:a4:76:7d:78:05:62:
         38:b1:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:21:09 2026 by rpki-client