Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20383334.roa
File:                     3137362e3130352e3232392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          MXqKwrziiOB75zRO+RXiLxQjBrUqv6mms6QdgIXUsgY=
Subject key identifier:   C4:DC:9F:49:14:93:89:67:9E:B1:96:71:5A:21:5B:56:59:42:B4:78
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       04C54EEA412A3613C4EA5B568F7CFA4A2CE08019
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20383334.roa
Signing time:             Fri 10 Oct 2025 09:04:00 +0000
ROA not before:           Fri 10 Oct 2025 08:59:00 +0000
ROA not after:            Fri 09 Oct 2026 09:04:00 +0000
asID:                     834
IP address blocks:        176.105.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c5:4e:ea:41:2a:36:13:c4:ea:5b:56:8f:7c:fa:4a:2c:e0:80:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Oct 10 08:59:00 2025 GMT
            Not After : Oct  9 09:04:00 2026 GMT
        Subject: CN=C4DC9F49149389679EB196715A215B565942B478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:90:1d:ce:1f:1e:90:e0:59:cc:ad:dd:dc:
                    03:bc:b1:cb:cf:d5:b1:a8:f2:04:3b:16:38:d0:a6:
                    e5:31:a7:72:de:79:82:66:72:c9:f1:4a:60:a1:db:
                    c6:7c:78:fe:71:3d:7d:c3:41:fb:82:cf:fd:d8:3b:
                    66:4c:c5:70:f3:b7:3a:ea:1e:a5:f1:e1:1b:ab:bc:
                    bc:c5:42:a1:6c:3c:07:5a:10:3b:92:89:35:55:73:
                    c6:11:d6:57:f3:a8:46:c0:1a:cb:98:df:56:90:9f:
                    c5:04:49:1d:45:4c:5c:fa:44:57:ab:c8:7b:50:2a:
                    be:ba:43:73:86:10:db:5b:e1:3d:be:a2:75:76:e9:
                    70:7a:73:91:a4:d0:89:d9:f9:f0:a5:62:04:80:00:
                    fa:be:1a:24:d8:fe:09:09:e6:2c:9c:6b:43:04:d5:
                    87:15:2a:b4:a7:43:da:0e:56:9b:8a:5f:2d:35:7e:
                    dd:5e:0e:37:57:98:43:2a:1b:f2:74:39:92:9c:3a:
                    02:3b:dc:9d:ab:8d:bb:41:dc:f4:72:44:1a:f8:c9:
                    97:89:fd:df:43:ad:e4:ef:b3:85:ea:ee:9d:d5:db:
                    15:33:a6:50:1d:32:e0:22:67:6c:b1:cd:69:f3:89:
                    f2:42:be:62:e5:6a:c3:1d:0b:20:67:4e:cb:33:47:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DC:9F:49:14:93:89:67:9E:B1:96:71:5A:21:5B:56:59:42:B4:78
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3232392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:27:e1:15:2c:04:bb:cc:c7:ce:c9:84:b5:14:22:ed:de:c9:
         43:99:11:cd:f1:1e:9f:ec:ad:ad:22:a9:78:2d:1d:cd:74:18:
         a8:95:1f:a2:8b:4a:6d:b9:44:54:8a:65:3b:ea:a9:b7:4c:72:
         14:fb:54:45:9a:d5:d9:d1:65:c7:b8:03:ca:cf:c5:b8:c8:63:
         2c:8d:a5:db:31:52:1a:40:35:f2:ef:79:ec:61:cc:e6:81:b1:
         ec:7f:bb:d3:e7:3e:67:90:24:ed:a2:2d:91:84:17:e2:bd:23:
         c6:30:6a:9c:e2:60:4c:f8:0f:9c:d7:34:e3:4a:be:6f:6e:32:
         7c:1a:ef:0d:31:5e:ed:ee:e1:28:b6:4e:1a:79:7a:ae:60:e6:
         39:90:60:f2:21:13:c3:e5:f1:c8:4f:78:01:19:50:55:ae:f3:
         30:dd:01:7b:41:0b:0b:03:a2:7c:80:77:63:08:6e:53:65:d2:
         49:7c:a3:4e:43:47:36:c9:23:c5:01:40:b9:cd:d3:3e:48:3c:
         64:df:f1:ba:25:b8:24:ee:c3:15:f2:b0:33:83:5a:41:e6:9e:
         26:2e:48:d6:c6:5b:28:88:3e:be:e1:64:09:e0:b0:4e:7b:b3:
         bc:0b:f3:53:6b:c4:15:2e:ef:92:70:3c:2d:5f:7d:98:03:05:
         e1:81:1d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:45 2025 by rpki-client