Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32372e302f32342d3234203d3e20323133373531.roa
File:                     3138352e3137372e32372e302f32342d3234203d3e20323133373531.roa (raw, json)
Hash identifier:          ZYejvta4KBMLLGTD0qNqzGmAwdyUuo1FXyekXtrYSuc=
Subject key identifier:   C9:BA:6D:53:98:5C:63:C1:32:66:34:87:B3:D2:10:94:05:11:78:49
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       7104B912CD3E94C9C0604A2D4A4FDE8BFA37371F
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32372e302f32342d3234203d3e20323133373531.roa
Signing time:             Wed 25 Mar 2026 06:35:54 +0000
ROA not before:           Wed 25 Mar 2026 06:30:54 +0000
ROA not after:            Wed 24 Mar 2027 06:35:54 +0000
asID:                     213751
IP address blocks:        185.177.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:04:b9:12:cd:3e:94:c9:c0:60:4a:2d:4a:4f:de:8b:fa:37:37:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar 25 06:30:54 2026 GMT
            Not After : Mar 24 06:35:54 2027 GMT
        Subject: CN=C9BA6D53985C63C132663487B3D2109405117849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:4a:7d:ac:61:d3:87:ae:2b:ee:29:26:26:
                    5c:1b:4c:48:76:3a:0e:52:6b:d6:8f:78:f2:75:60:
                    1f:8e:49:09:44:74:79:40:74:e0:40:9c:74:25:59:
                    04:6e:b1:7c:91:0e:23:23:10:95:3e:e7:5e:36:0e:
                    05:55:ea:85:18:b5:fc:3e:a8:a4:f5:83:02:a5:f4:
                    6c:d1:34:c1:9f:86:c2:ce:33:66:87:d2:9d:8c:cb:
                    d7:8a:dc:ba:92:ec:2a:bd:69:ea:40:57:f0:b7:87:
                    b5:ef:f0:2c:8c:ff:b5:e3:de:7e:a9:f0:12:12:3c:
                    be:1b:8a:20:0d:4c:a7:ae:ba:a5:2a:7d:23:d0:9d:
                    bf:85:f9:78:1b:17:b9:d3:c1:c9:e0:08:25:b6:ec:
                    fa:3f:d7:e7:22:9a:3f:00:f8:1c:9a:91:56:39:93:
                    5c:5b:a4:46:05:2f:4e:aa:1e:75:28:f3:13:45:49:
                    2e:ed:fa:2d:b2:7b:67:58:bf:c4:d0:2e:59:b9:32:
                    4f:28:a0:b7:a9:0f:88:f2:1d:c6:63:45:32:e3:8d:
                    16:0a:f7:6b:98:98:33:43:16:66:d8:f6:26:39:e8:
                    27:0c:c6:1e:73:f9:25:c0:59:eb:b7:26:82:07:11:
                    7a:a2:40:15:2c:b9:76:a9:71:dc:51:66:d7:ae:7d:
                    36:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BA:6D:53:98:5C:63:C1:32:66:34:87:B3:D2:10:94:05:11:78:49
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32372e302f32342d3234203d3e20323133373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:2b:7f:34:f2:6e:17:b3:21:8d:a5:e3:29:ba:f2:f7:a7:
         9d:1e:5d:6a:06:a7:45:b0:44:a8:38:90:e7:9f:ba:d2:03:3c:
         da:6c:18:5a:0c:0a:eb:0a:ca:10:cd:0f:e1:af:6b:53:32:f1:
         7d:2d:3f:be:8b:c9:43:ac:fe:b9:53:1f:7f:d7:c3:1f:1b:88:
         5a:d1:f6:f7:f7:81:09:f8:21:86:91:e1:d4:fc:28:d5:94:ad:
         4d:b1:b6:75:de:92:ca:3c:2d:fd:0f:78:ef:ef:6a:d8:cf:0b:
         bd:ae:6e:e5:56:f7:ab:23:35:c3:eb:a2:de:33:a8:91:a9:f5:
         a1:92:93:19:22:dd:06:ae:20:5b:01:a8:03:54:f8:06:9a:3a:
         1d:71:a9:ee:3e:f2:1e:0d:de:58:ff:7c:f4:46:15:72:25:f3:
         73:f7:24:15:37:71:40:87:6a:d2:6e:96:d2:7f:97:46:4f:32:
         fd:55:e0:8a:3c:0d:f3:33:c5:70:b1:e6:f4:f4:31:41:a5:da:
         6f:4e:4e:0f:f9:87:c4:a8:5e:e5:d4:58:ea:b7:57:ba:df:19:
         95:84:41:9c:c7:40:dc:04:52:24:6e:ee:7e:8d:af:b5:da:39:
         68:b6:e6:f8:15:2a:90:93:37:8f:64:76:b4:ca:67:9c:f5:ca:
         a9:31:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:30 2026 by rpki-client