Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233312e302f32342d3234203d3e203634323637.roa
File:                     3137362e3130352e3233312e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          nLHHT+Ro7jPcUFRQ9c1CF14Gbcs7j+FK0RTf6meuHXI=
Subject key identifier:   AE:86:B1:16:BE:5A:18:5C:77:58:D0:02:0A:79:08:28:21:EB:EC:A5
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       4BE2D4C2270843C167D7855AB570570D9A736AB7
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233312e302f32342d3234203d3e203634323637.roa
Signing time:             Wed 25 Mar 2026 06:35:54 +0000
ROA not before:           Wed 25 Mar 2026 06:30:54 +0000
ROA not after:            Wed 24 Mar 2027 06:35:54 +0000
asID:                     64267
IP address blocks:        176.105.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e2:d4:c2:27:08:43:c1:67:d7:85:5a:b5:70:57:0d:9a:73:6a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar 25 06:30:54 2026 GMT
            Not After : Mar 24 06:35:54 2027 GMT
        Subject: CN=AE86B116BE5A185C7758D0020A79082821EBECA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:27:10:ce:0e:64:fc:2d:7f:c9:c6:d9:a0:
                    48:30:c7:79:49:be:cf:70:4c:e3:3b:e8:26:de:0a:
                    c0:6a:3d:0d:9f:dc:39:94:b8:9d:e4:7a:65:86:5e:
                    78:bf:ca:b5:ac:76:23:f0:a6:1b:4b:2d:85:38:80:
                    bf:93:15:cd:45:0d:0a:b0:80:7f:7a:ca:8d:45:e5:
                    6f:46:c1:2f:48:f5:70:56:a4:dd:f0:f8:4d:a3:b2:
                    e2:8c:77:3d:f1:64:f4:cd:a0:9e:f3:80:85:7c:48:
                    16:af:32:e5:c7:3a:6b:8c:83:76:83:07:39:b2:29:
                    36:f2:cf:70:62:e0:3d:77:1c:1e:25:0d:2b:34:66:
                    e0:71:84:8a:5a:35:30:60:b5:5e:69:51:91:7d:f0:
                    e4:9f:59:9b:fb:d2:20:47:92:9a:d2:3e:4c:85:80:
                    10:f6:b1:ba:13:08:67:59:a5:91:48:3a:30:4d:8d:
                    b8:51:de:62:d4:78:35:17:e6:9b:07:8f:09:53:31:
                    42:64:9f:42:75:91:ed:91:2a:52:67:27:5f:89:f6:
                    40:2b:3a:ab:1a:00:7a:7b:94:dc:2f:e0:16:d8:ba:
                    9e:d7:51:cc:de:b7:00:17:2e:94:b1:3b:27:a2:9f:
                    93:b4:45:37:59:26:07:37:64:28:94:fe:7a:5b:4b:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:86:B1:16:BE:5A:18:5C:77:58:D0:02:0A:79:08:28:21:EB:EC:A5
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3137362e3130352e3233312e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a7:2e:3b:1d:44:c5:a1:27:80:23:32:10:84:89:a8:b3:9d:
         ef:68:56:c8:93:07:17:f0:3c:b5:82:fb:1f:ae:3d:73:d8:8c:
         e7:dc:d0:db:da:52:54:6e:a8:54:5d:3f:61:ce:13:41:63:ca:
         47:d3:6a:23:77:0b:a7:0d:a7:36:dd:d5:11:e8:24:de:47:e4:
         6e:9b:e0:7e:15:5c:55:5c:b2:ed:a2:f2:10:2a:cd:6c:06:c0:
         e1:34:4d:19:4a:83:98:f7:06:c4:b9:de:c3:50:9d:c8:48:e0:
         6c:24:af:58:3a:84:bf:35:6c:43:71:f1:3f:dd:77:b7:33:4f:
         b0:07:4b:67:7b:fc:a7:8a:a3:b8:fd:1c:f2:79:90:e9:f5:0b:
         5c:5a:19:fe:80:62:ef:be:fb:84:c8:6d:fd:11:a5:1f:9c:12:
         cb:c3:89:cc:66:0a:26:28:6d:c9:2b:ac:b4:e3:6e:59:95:92:
         7b:8c:b3:02:e0:91:1c:4c:2f:a2:55:53:c0:3a:a2:04:67:ff:
         c7:67:6f:eb:7f:c6:74:47:69:69:1d:91:bf:25:a4:a5:6e:b9:
         58:41:81:db:8d:a0:74:23:b0:b9:b5:8e:9c:9d:fd:50:1d:f7:
         9a:06:f1:af:f8:19:70:b9:3f:a6:ed:3f:af:e1:73:de:49:9e:
         ac:90:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:42 2026 by rpki-client