Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e20383334.roa
File:                     39352e3231342e3137382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          BFFHdb19Ja5ZsqrSQw5v6mgxGLbBO+WnRl0sI/yIMKY=
Subject key identifier:   2A:C4:4F:3C:A8:2C:0C:CF:32:A9:07:44:2D:79:79:E2:72:82:08:43
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       718E1505B3AB79878C938326993DE9ADEEF62718
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e20383334.roa
Signing time:             Thu 30 Jul 2026 09:35:59 +0000
ROA not before:           Thu 30 Jul 2026 09:30:59 +0000
ROA not after:            Thu 29 Jul 2027 09:35:59 +0000
asID:                     834
IP address blocks:        95.214.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 12:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8e:15:05:b3:ab:79:87:8c:93:83:26:99:3d:e9:ad:ee:f6:27:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul 30 09:30:59 2026 GMT
            Not After : Jul 29 09:35:59 2027 GMT
        Subject: CN=2AC44F3CA82C0CCF32A907442D7979E272820843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:84:96:f3:71:b3:6c:23:6b:46:6f:94:9f:
                    ff:a1:be:a3:74:e3:f6:5f:ee:70:20:72:e0:81:5f:
                    5b:17:7b:41:0e:d6:48:80:2b:ae:6b:73:d9:17:99:
                    16:b5:3e:31:ac:d1:86:8a:91:cf:be:a2:de:08:79:
                    87:63:4e:56:2b:68:b0:f6:b1:13:bb:aa:6a:c6:33:
                    f3:b1:26:59:a0:3c:d7:97:ea:21:95:62:af:d8:f8:
                    e3:8a:92:cb:1a:44:76:00:e1:a1:72:8d:91:ec:9b:
                    24:01:53:ec:63:ac:4c:79:aa:96:d8:7b:21:6b:ec:
                    fa:fd:27:ff:53:01:2b:b5:ff:65:bb:b5:34:69:36:
                    07:ff:05:54:69:11:42:94:d6:5e:20:ab:e9:f2:25:
                    02:c7:7d:63:19:c0:aa:91:bb:92:82:7d:7e:58:7f:
                    ad:a6:7f:27:70:68:b8:cf:8d:f6:bd:4b:b0:9e:b2:
                    25:a5:4b:aa:d3:0f:d9:4b:5e:be:95:35:88:77:56:
                    1a:96:72:6a:31:f8:2c:ef:3d:f9:49:79:ca:1d:9b:
                    95:d2:28:1e:0f:ae:5e:84:4f:8f:5a:3c:84:77:7b:
                    fc:bd:dc:33:cb:c4:dc:ac:3f:64:97:70:3a:e7:ee:
                    f9:56:55:b4:0e:04:eb:35:61:32:99:56:9c:d8:49:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:4F:3C:A8:2C:0C:CF:32:A9:07:44:2D:79:79:E2:72:82:08:43
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39352e3231342e3137382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:95:d9:c4:79:4d:6f:92:dd:a9:69:3b:e0:fd:13:1c:7f:5b:
         db:62:49:45:c8:e9:60:49:bc:06:30:74:aa:af:38:1d:27:b7:
         93:dd:de:58:c0:ec:e8:62:73:8c:32:bd:f4:2a:7a:40:c0:24:
         19:17:c1:23:8f:97:d1:4c:5c:07:d8:92:78:29:92:1e:2a:bb:
         96:78:b1:50:77:ce:ea:94:ca:be:b8:1e:62:1c:f6:36:32:d5:
         4d:90:fa:0d:e0:f7:fe:bb:ed:b4:f0:c3:d6:b8:c2:e1:b6:43:
         ee:a1:1c:06:73:f6:52:c9:3a:28:a0:29:c4:74:62:b4:ad:98:
         e3:b1:6a:38:01:19:a0:4e:91:09:0a:f5:ba:b2:4b:ac:2a:ba:
         b0:13:b9:02:44:34:60:71:b9:d0:a8:a9:88:ce:68:a6:b6:b8:
         36:b4:f7:0f:f7:00:1e:1f:56:a4:f6:03:ca:b7:5c:cf:7c:6c:
         f7:b2:63:34:a6:d9:3a:7e:95:29:cf:a8:9c:88:92:a8:b2:2a:
         59:2c:8a:dc:5c:7d:e6:d1:5d:23:56:dd:bb:43:b7:0a:ef:8f:
         68:b3:26:4a:ad:2f:a4:7e:35:13:1d:1e:a2:c0:6e:ab:07:b9:
         07:cd:47:0c:5c:0e:3e:69:00:2f:52:24:24:9f:3e:87:c5:cc:
         a4:56:68:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:20:24 2026 by rpki-client