Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32352e302f32342d3234203d3e20323133393930.roa
File:                     3138352e3137372e32352e302f32342d3234203d3e20323133393930.roa (raw, json)
Hash identifier:          x8Ed65tiaYEVw19tOWwm/TOg6VBC5fZpDFsUkD8gYcM=
Subject key identifier:   21:B7:D2:28:51:82:2F:01:8C:E7:A1:5A:C2:2E:A2:A2:36:BB:D7:16
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       11CB48BFD542DC6FC18C49B79EBE965A2573C844
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32352e302f32342d3234203d3e20323133393930.roa
Signing time:             Wed 23 Apr 2025 05:39:46 +0000
ROA not before:           Wed 23 Apr 2025 05:34:46 +0000
ROA not after:            Wed 22 Apr 2026 05:39:46 +0000
asID:                     213990
IP address blocks:        185.177.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 03:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cb:48:bf:d5:42:dc:6f:c1:8c:49:b7:9e:be:96:5a:25:73:c8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:46 2025 GMT
            Not After : Apr 22 05:39:46 2026 GMT
        Subject: CN=21B7D22851822F018CE7A15AC22EA2A236BBD716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:73:e9:f4:91:7f:70:0f:71:99:ed:fd:4b:
                    e1:ca:3e:be:fe:25:0d:42:f5:18:9a:b8:56:ec:92:
                    50:a0:fb:fe:da:5f:fb:63:fb:41:f8:64:86:4c:53:
                    21:03:5f:23:47:4e:cd:b9:ca:2a:c0:05:c9:3e:40:
                    44:76:0c:59:f0:7f:fa:f0:e4:05:79:ce:67:7a:62:
                    a7:52:2d:5f:a7:97:e1:d9:f9:06:3b:a3:5b:98:0d:
                    46:35:74:40:42:d5:79:52:01:42:63:f9:19:f4:e2:
                    f0:ee:48:e4:8a:ba:ab:ce:8c:c6:a9:0b:cf:2b:f4:
                    8c:32:05:52:e4:0d:d0:a6:21:09:04:c5:0f:df:83:
                    66:a0:48:3e:37:2a:1d:bc:38:a4:70:b5:81:37:e2:
                    35:07:2e:d9:e4:5f:e3:30:3a:53:24:ea:a6:6e:9d:
                    86:8d:87:cf:3d:01:8a:9d:1b:c6:3f:31:4a:e3:3e:
                    e7:56:f5:5d:8f:82:49:c3:f3:e9:72:fd:67:e0:d1:
                    44:a3:06:61:26:ee:e7:23:27:c0:6f:2a:95:bc:28:
                    74:30:7a:c1:81:a0:f3:11:45:a8:bd:40:82:71:db:
                    eb:25:61:da:e0:5f:e1:60:03:28:db:98:d6:e3:4c:
                    b5:62:c5:8a:00:4e:99:50:99:46:f3:38:76:db:4e:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B7:D2:28:51:82:2F:01:8C:E7:A1:5A:C2:2E:A2:A2:36:BB:D7:16
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32352e302f32342d3234203d3e20323133393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:0a:9a:ca:38:56:7e:35:b2:3a:71:95:47:46:43:ce:0c:
         1e:b5:14:26:77:e5:1f:75:d4:9d:6a:ba:56:6c:f4:a9:44:dc:
         bf:c6:fb:33:9d:76:f9:d2:9c:98:b9:0f:11:3b:8d:c1:d0:61:
         2e:d7:45:08:0a:3f:da:32:84:50:98:b6:c2:7c:da:0f:0e:25:
         20:fb:56:a1:d2:36:9b:9b:dc:3e:e9:61:3c:5c:21:8c:72:e2:
         af:44:45:28:50:29:00:f3:4c:7b:90:2e:5f:a4:66:5c:14:99:
         65:8a:7d:9c:be:86:84:99:fd:e4:fc:27:98:d6:e3:5b:12:42:
         80:2f:5c:cd:aa:95:d1:c7:19:6c:13:ac:72:2b:35:1b:08:90:
         81:f8:e6:2d:31:8b:27:9a:1e:44:09:00:71:d5:e3:af:e1:19:
         ca:bd:39:2c:a9:fc:76:20:1d:4e:43:50:d9:a6:a0:0f:b8:7c:
         d2:66:44:4c:58:38:ea:04:ea:a5:08:59:09:2a:c0:93:d1:aa:
         69:77:e7:e8:4f:cb:71:00:07:4f:9b:75:fe:47:5a:23:7a:02:
         6c:79:98:30:67:a2:ce:18:fe:02:70:3c:4d:c0:ac:f0:88:51:
         ec:b1:00:e8:86:8b:3a:b4:86:aa:b9:af:bf:cc:48:36:d6:5d:
         83:43:7c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:02:51 2025 by rpki-client