Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20323032363733.roa
File:                     3137362e3130352e3233302e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier:          +20wjVR9ElhtNopNRofn09uymQgLcV/I7GVUWLNcZYs=
Subject key identifier:   6F:44:63:87:C5:B3:24:11:61:39:F5:A3:C2:58:E9:F0:E4:C1:70:06
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       578F1DFFE6E9C2AE5EE2F8DF5670057E222335BF
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20323032363733.roa
Signing time:             Wed 25 Mar 2026 06:35:54 +0000
ROA not before:           Wed 25 Mar 2026 06:30:54 +0000
ROA not after:            Wed 24 Mar 2027 06:35:54 +0000
asID:                     202673
IP address blocks:        176.105.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8f:1d:ff:e6:e9:c2:ae:5e:e2:f8:df:56:70:05:7e:22:23:35:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar 25 06:30:54 2026 GMT
            Not After : Mar 24 06:35:54 2027 GMT
        Subject: CN=6F446387C5B324116139F5A3C258E9F0E4C17006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:0f:41:44:c1:fb:ab:76:93:9a:0f:99:53:
                    e7:10:e4:80:bd:cf:89:c3:7f:8c:57:34:ff:df:aa:
                    bb:b8:cb:2d:0d:e2:38:c2:40:40:10:8e:70:3f:58:
                    2f:67:c8:16:eb:b2:a9:28:af:56:31:95:4a:b1:44:
                    c2:a8:81:e9:06:7e:7d:56:c8:59:40:8b:dd:57:27:
                    0f:62:66:4e:8d:62:4c:b7:19:0e:25:2c:88:64:f2:
                    49:99:22:90:d3:ad:b4:30:be:28:31:07:5a:c3:d2:
                    d9:7e:9e:72:6a:b3:92:42:34:a6:51:b5:af:aa:2e:
                    ea:a5:5a:d1:7f:e4:ed:1b:35:04:f6:be:41:4e:c1:
                    e3:c3:69:50:13:5a:2d:d4:cf:b2:3c:a9:43:d5:00:
                    35:2f:9a:ba:31:fe:c5:b5:8d:ad:62:dc:eb:86:f9:
                    25:0b:9f:ee:3d:15:06:f2:c0:94:55:ba:d0:44:1b:
                    0d:ce:d3:5f:44:ce:67:fc:55:b6:aa:96:d4:49:47:
                    fa:d8:7e:e4:66:ca:be:97:96:f6:b9:c8:da:84:8a:
                    18:bd:47:b9:e2:9c:89:4d:e6:07:2b:78:23:13:4c:
                    a2:5b:38:fd:f4:71:b7:cc:7e:f9:20:f4:16:b6:51:
                    a1:d7:92:2f:e4:1b:83:f2:9b:8d:d8:b3:4d:71:0a:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:63:87:C5:B3:24:11:61:39:F5:A3:C2:58:E9:F0:E4:C1:70:06
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233302e302f32342d3234203d3e20323032363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:42:fe:04:cd:01:1b:ff:d5:92:dc:e9:07:24:a8:1b:53:6c:
         93:be:59:16:a9:12:11:06:cb:fc:24:2f:39:a2:e5:11:a1:88:
         91:40:63:d9:c6:3b:fd:e9:67:c8:3c:41:27:12:c5:19:f7:65:
         9b:41:b0:07:b3:7a:47:cc:5e:d8:74:f1:7a:b1:60:35:6c:cd:
         b8:9d:9a:97:d7:4f:e3:21:21:89:03:c4:3c:09:bb:09:5d:19:
         e4:81:07:c5:90:fa:b2:48:9a:bd:55:ae:95:b8:98:51:d3:6d:
         a1:34:8c:f9:f2:93:bc:1d:26:ed:d8:9c:05:04:4c:7b:a0:a9:
         8b:25:88:0e:fa:f6:5b:11:0b:44:ca:42:77:e2:6e:9d:cc:c8:
         ba:e1:4e:1c:29:4d:81:7c:8c:13:0a:5e:9e:77:57:3a:5f:62:
         92:e8:62:cc:07:1d:3f:f5:83:87:61:d9:77:44:de:8f:48:46:
         e1:83:db:00:cc:14:44:88:9a:8d:93:e7:50:da:60:8a:18:8e:
         17:ab:ce:ee:e5:71:0e:8c:d0:f1:79:c0:8f:c0:10:44:62:bb:
         3a:a0:c9:26:13:12:f3:ef:5a:04:28:33:32:87:19:f9:bc:a3:
         47:b2:fe:7d:82:ef:15:95:66:b8:be:aa:08:ed:98:1d:80:40:
         ca:88:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:06 2026 by rpki-client