Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e20383334.roa
File:                     39352e3231342e3137382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          eRU4SAfv+6IMXJw3ESpArbiyu3an+GLS/zGMIvrmx5Y=
Subject key identifier:   43:9A:AE:C9:49:54:AA:A1:23:DF:54:A1:A2:DD:0A:5F:F0:83:8E:2C
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       48803F082467CC31C944E84B993685EB13DC49C9
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e20383334.roa
Signing time:             Sat 20 Jun 2026 05:37:45 +0000
ROA not before:           Sat 20 Jun 2026 05:32:45 +0000
ROA not after:            Sat 19 Jun 2027 05:37:45 +0000
asID:                     834
IP address blocks:        95.214.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:80:3f:08:24:67:cc:31:c9:44:e8:4b:99:36:85:eb:13:dc:49:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 20 05:32:45 2026 GMT
            Not After : Jun 19 05:37:45 2027 GMT
        Subject: CN=439AAEC94954AAA123DF54A1A2DD0A5FF0838E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:c9:1d:8d:59:13:34:dd:1e:ae:f7:5f:8c:
                    64:29:ef:65:6f:a2:7d:63:dd:19:ec:3f:2a:06:61:
                    d2:31:8b:2b:e9:2c:0d:26:2f:6b:22:10:d5:5c:f8:
                    d1:f6:d3:cd:5a:de:72:3e:82:cb:62:73:08:d3:fd:
                    36:47:76:75:d9:86:d7:07:66:07:9f:c7:a4:c2:c2:
                    a2:04:e6:33:14:6c:46:1c:bf:9b:07:14:ef:56:f5:
                    f5:c6:a4:95:d3:e9:9a:9c:16:c3:91:02:83:ae:bc:
                    5a:61:6d:40:9c:64:4f:c6:9d:3c:28:0d:9d:42:93:
                    7c:08:3b:fd:88:67:bf:ac:b4:29:fe:2a:9f:85:d5:
                    ed:13:8b:b6:94:08:76:94:e7:0f:c6:17:45:6c:b2:
                    b3:43:ee:75:f2:74:c9:8e:f9:49:88:4c:81:40:f0:
                    5c:17:ac:2d:9a:b4:0e:9d:7c:d4:4e:2d:8c:07:7f:
                    75:c6:54:dd:b1:b3:99:55:c2:39:58:9d:a9:92:79:
                    74:74:97:a9:fe:1a:bd:e0:7d:07:36:49:31:9c:e9:
                    81:9f:79:ea:66:62:62:ea:34:6d:b3:fd:e5:d2:d1:
                    86:cb:cc:8e:34:f9:36:02:ce:a6:32:94:b7:48:f4:
                    5e:49:2a:cf:22:c2:16:3c:f5:7e:90:59:7b:0c:3c:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9A:AE:C9:49:54:AA:A1:23:DF:54:A1:A2:DD:0A:5F:F0:83:8E:2C
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:03:ad:ce:ef:bb:11:46:7c:a8:a4:d8:9b:0b:f9:9c:c4:
         f8:cf:63:10:98:bc:b7:8d:7f:7c:2b:e9:23:d1:50:a4:59:8d:
         61:ee:fc:72:11:43:9f:cb:a0:ad:3a:65:31:a2:94:bb:08:b2:
         b9:77:2a:cd:02:99:57:89:11:8f:9d:f9:7c:27:ed:1d:35:bf:
         bb:42:27:f4:42:43:3b:59:12:3f:90:66:af:8a:c8:5b:ad:71:
         48:f3:79:2d:ad:30:8f:fd:e9:19:e8:22:d4:53:18:51:7f:f5:
         c2:d6:27:ff:54:e8:94:cb:01:4d:9b:d1:87:6e:26:4a:7b:8a:
         68:d4:94:7b:e0:86:9d:bb:2c:b3:e4:64:7f:32:ea:65:26:ac:
         f3:d1:40:13:92:65:f1:86:38:1a:de:85:24:7b:77:7d:13:2d:
         68:95:01:e5:04:95:35:1a:a1:34:7b:a8:21:b4:d6:73:01:49:
         07:b9:0a:9d:b0:7c:3b:fd:ea:35:f6:21:0e:a4:dd:79:f0:39:
         1a:7f:80:7f:ff:d4:40:f5:c0:15:cc:a7:fd:61:87:9e:55:46:
         75:f3:a3:7a:91:15:8c:ee:58:04:21:96:45:e4:a5:08:f1:7f:
         9b:24:49:67:2c:d1:92:98:72:6d:72:04:83:05:7f:2c:02:61:
         e2:f4:78:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:58 2026 by rpki-client