Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203136353039.roa
File:                     3138352e3137372e32362e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          rJWdV078L3EhXK6xXF/0icAOoHqZt21LLBefVmvDJQ8=
Subject key identifier:   28:21:FC:84:71:0D:8D:BE:DB:D5:65:FF:DC:E4:8B:D4:45:A0:98:85
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       2CC0587E35B18B3B5AAB390995AF18DC819492B3
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 29 Apr 2025 20:09:49 +0000
ROA not before:           Tue 29 Apr 2025 20:04:49 +0000
ROA not after:            Tue 28 Apr 2026 20:09:49 +0000
asID:                     16509
IP address blocks:        185.177.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c0:58:7e:35:b1:8b:3b:5a:ab:39:09:95:af:18:dc:81:94:92:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 29 20:04:49 2025 GMT
            Not After : Apr 28 20:09:49 2026 GMT
        Subject: CN=2821FC84710D8DBEDBD565FFDCE48BD445A09885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ce:7d:fb:35:b9:86:90:19:d8:03:6d:8b:c7:
                    fd:27:12:b4:f3:40:ee:e8:7c:19:2f:1a:04:0e:2b:
                    20:80:d6:16:ca:a4:08:45:29:1d:db:01:ae:c1:72:
                    f6:3a:bf:f4:08:0c:21:32:61:a9:1f:93:e8:8f:70:
                    76:37:da:42:d2:dd:91:85:d6:ca:c7:c4:51:de:0e:
                    57:4f:ba:89:39:a1:57:7b:10:e1:90:d1:0c:5a:33:
                    85:d8:d4:fd:b1:0e:06:05:ff:ad:ec:9a:ae:5f:6d:
                    d0:25:17:63:19:e2:50:d2:96:cc:bf:8c:63:bd:8b:
                    3e:f6:c4:2b:37:13:8a:dc:34:bc:7d:d8:e6:77:66:
                    e8:00:3a:fb:77:a2:50:9b:2e:1a:b5:6f:b4:3b:0c:
                    f6:a6:7f:d9:95:c2:02:46:cf:e3:b2:69:01:99:1f:
                    40:21:81:30:57:28:d0:2c:8f:1a:5f:19:dd:f4:b0:
                    07:40:29:ed:05:4b:b4:a5:95:fa:0e:38:7a:33:51:
                    fe:d2:87:00:a9:fc:79:cd:bb:c8:c1:b2:7e:3c:a6:
                    35:44:9e:63:09:84:49:9e:8a:bc:b3:39:30:67:0e:
                    54:15:44:2c:46:ed:d7:69:04:22:2f:b7:62:ae:56:
                    74:ca:e2:61:40:0b:71:b3:7b:12:c5:dd:0c:4f:22:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:21:FC:84:71:0D:8D:BE:DB:D5:65:FF:DC:E4:8B:D4:45:A0:98:85
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:ea:b7:0e:bc:fa:4d:f2:22:45:b9:2d:0e:c5:ab:95:3a:
         cd:13:70:29:12:17:53:77:e2:66:a0:5d:dd:63:83:a5:79:f1:
         b7:a8:6e:ad:cc:5a:4f:94:09:9f:f4:ea:1a:fd:b9:eb:42:1c:
         fc:32:e0:72:83:8a:2c:d9:e5:70:d3:51:c2:ab:d5:7d:af:03:
         6e:d2:b9:6a:a8:90:59:2a:31:4b:4d:3a:85:0f:d3:91:0e:59:
         dc:0b:e8:6b:0d:c8:a7:7a:c4:0b:24:5a:ab:2b:27:2c:0e:52:
         57:60:98:53:15:67:97:4f:45:9d:60:90:72:70:43:ce:46:91:
         e6:d6:b6:36:c9:89:4b:84:f5:2f:b0:c6:02:20:f4:17:fc:54:
         65:83:1b:a3:04:c7:3d:b9:9b:8f:d2:69:2e:e7:99:86:60:2d:
         ae:37:74:34:be:f3:0a:f4:20:54:45:6d:f5:70:47:11:a2:e5:
         45:60:89:ff:64:f4:8b:62:27:4b:69:11:40:80:b0:cc:2c:d9:
         c2:47:57:13:08:e2:fa:c2:7f:34:7f:e7:38:11:33:44:99:e5:
         0a:00:30:61:58:eb:5a:92:65:3a:07:bc:f6:f0:88:82:d7:06:
         f7:a4:f7:8f:b8:71:e4:ce:29:64:92:6d:96:0c:e1:c5:64:e6:
         c7:28:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:21:57 2025 by rpki-client