Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32332d3234203d3e20313533333731.roa
File:                     3137362e3130352e3232382e302f32332d3234203d3e20313533333731.roa (raw, json)
Hash identifier:          7aQfLeocSMdnYR0YhmtkO7z2K192O1bFE3DEjns7Q9E=
Subject key identifier:   1D:F3:01:76:9C:12:3A:4D:E0:07:86:73:55:9B:B1:B1:6A:C8:F2:C6
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       48BFC58463DE15BF8932342F3A2D7B367B74941C
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32332d3234203d3e20313533333731.roa
Signing time:             Mon 11 May 2026 17:35:33 +0000
ROA not before:           Mon 11 May 2026 17:30:33 +0000
ROA not after:            Mon 10 May 2027 17:35:33 +0000
asID:                     153371
IP address blocks:        176.105.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 07:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bf:c5:84:63:de:15:bf:89:32:34:2f:3a:2d:7b:36:7b:74:94:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: May 11 17:30:33 2026 GMT
            Not After : May 10 17:35:33 2027 GMT
        Subject: CN=1DF301769C123A4DE0078673559BB1B16AC8F2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:d1:a2:76:a9:a1:9c:05:26:e3:cc:e9:88:
                    df:24:6b:9f:c7:f0:f9:22:67:a6:9a:9d:4f:a2:ee:
                    79:dd:72:82:f7:06:d7:71:b6:8b:64:64:ae:1d:b6:
                    31:e5:7f:96:b6:af:08:d2:2d:cc:c3:77:9f:f6:3d:
                    cf:2c:c8:8e:15:02:05:4b:f4:39:25:fb:e9:4c:3d:
                    32:72:be:e5:d6:af:08:00:c6:b1:26:3f:c9:a5:a3:
                    a6:4e:68:2f:80:bc:46:78:6c:b5:f2:2f:e8:ad:8e:
                    a8:c5:83:51:75:ad:b7:69:6e:57:f7:de:88:d2:7f:
                    cd:7f:2e:79:3f:ee:7c:09:d9:de:84:54:4f:07:4b:
                    00:71:a7:50:11:2a:bf:ea:0c:3b:74:14:61:45:ea:
                    1a:c6:99:b4:c8:9e:a8:d7:7a:f3:a0:d0:40:98:c5:
                    9e:ba:49:84:60:f3:5a:93:a7:11:c5:98:f2:66:a9:
                    99:c9:71:a7:62:a3:62:73:2f:6c:00:a6:95:3f:80:
                    16:aa:a1:ea:df:9a:f4:71:3a:61:fc:30:34:a6:0d:
                    68:32:80:fa:21:45:b8:25:18:01:d1:6c:37:e5:c0:
                    bf:ab:84:bf:6d:fe:f5:d6:d1:15:fb:be:00:f4:a4:
                    22:98:7b:28:4b:81:2e:9d:77:fa:77:b2:f9:1a:88:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F3:01:76:9C:12:3A:4D:E0:07:86:73:55:9B:B1:B1:6A:C8:F2:C6
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232382e302f32332d3234203d3e20313533333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:80:0b:a9:99:7a:0e:7d:1e:24:a7:c8:e9:eb:d0:29:55:ec:
         c3:c6:35:3d:7c:3a:e7:c2:8d:d6:7f:ad:54:0b:fd:be:de:33:
         95:0f:36:60:34:be:ec:c8:0f:65:a7:fe:ee:e9:77:82:0f:04:
         03:64:64:99:fb:d8:73:31:c4:17:d9:61:af:ab:07:3d:84:8a:
         12:e8:a5:8d:81:e6:f2:77:a4:90:fe:7b:0d:1d:f8:f9:80:95:
         82:2c:e4:85:79:f6:83:ce:fb:30:4e:65:1d:4e:b9:43:b3:1c:
         64:7a:d9:92:2b:ce:3c:32:1a:14:7c:b5:07:3f:cf:8c:77:f8:
         e4:f3:1d:a2:ed:e8:35:6d:80:a8:5e:37:d8:cb:76:2e:e9:a5:
         26:eb:ec:2f:72:ee:b8:19:40:bd:a6:df:f2:bc:c6:30:d1:bf:
         cf:ce:73:78:ce:0d:a5:5f:c0:65:63:b8:31:fd:e1:09:81:2f:
         4c:af:9c:b8:37:5b:41:13:04:4e:01:3c:3c:fe:da:18:cc:a2:
         83:92:7e:d2:48:75:4b:09:64:7e:4b:7c:ed:1e:37:53:df:cc:
         aa:5c:aa:5b:c4:60:f0:04:0c:aa:a6:05:6b:d3:b9:97:80:11:
         14:e4:50:0a:dd:ea:42:e9:8c:fc:02:af:f8:e8:b1:e3:b7:99:
         74:1d:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:59:37 2026 by rpki-client