Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32332d3233203d3e203139333138.roa
File:                     3139342e3137392e3134362e302f32332d3233203d3e203139333138.roa (raw, json)
Hash identifier:          37dlTRaX6Y8djduHeesX6IyyrnrS7nqrjMIVe99fq3E=
Subject key identifier:   8F:2D:31:EB:BB:BF:A4:78:9B:0D:12:73:84:DD:26:B7:36:4E:66:43
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       5C467F580DB27B5868A679FF0B7BD27CFD220413
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32332d3233203d3e203139333138.roa
Signing time:             Wed 30 Apr 2025 08:10:58 +0000
ROA not before:           Wed 30 Apr 2025 08:05:58 +0000
ROA not after:            Wed 29 Apr 2026 08:10:58 +0000
asID:                     19318
IP address blocks:        194.179.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 09:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:46:7f:58:0d:b2:7b:58:68:a6:79:ff:0b:7b:d2:7c:fd:22:04:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 30 08:05:58 2025 GMT
            Not After : Apr 29 08:10:58 2026 GMT
        Subject: CN=8F2D31EBBBBFA4789B0D127384DD26B7364E6643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2c:cb:04:d1:d3:6d:c5:53:e0:66:25:ae:99:
                    d3:6a:af:c6:36:77:34:6c:9d:0e:ab:37:c7:77:fe:
                    20:55:22:5c:64:69:cb:38:11:f7:9a:bd:7f:5c:a5:
                    d4:bf:9e:dd:62:bd:7a:ba:74:53:b0:61:55:45:12:
                    a1:99:45:c8:aa:f0:03:cd:d5:43:0d:a6:c0:81:06:
                    45:4f:e9:87:40:4f:f5:2a:ff:2c:3b:8a:41:03:cb:
                    fe:91:65:f5:76:04:3a:96:bd:81:d7:a8:ff:c9:ed:
                    0c:60:dd:11:c1:a8:cf:42:b4:dd:81:ab:b5:c9:1e:
                    13:03:f6:1b:a5:5b:55:91:92:df:f4:59:5f:35:3b:
                    91:0c:65:3b:8e:1e:56:a4:d8:6d:b5:09:de:81:2d:
                    9d:cd:b0:f0:6f:14:b6:b1:98:dd:e1:1d:c6:42:29:
                    61:c1:30:af:63:b9:20:df:ce:3c:e8:61:83:53:9c:
                    6d:f2:3e:f5:46:da:e7:b7:2b:5e:72:ae:a3:c4:19:
                    ad:f7:bb:14:2a:0b:27:f9:87:2b:dd:62:45:ec:c0:
                    b9:8e:de:70:81:41:6c:41:95:bc:0e:50:2d:11:a6:
                    f3:1a:33:1b:16:07:27:89:4c:8a:30:70:58:4e:28:
                    61:36:c7:d4:7a:f5:da:bd:c3:ac:36:eb:9d:70:59:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:31:EB:BB:BF:A4:78:9B:0D:12:73:84:DD:26:B7:36:4E:66:43
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3139342e3137392e3134362e302f32332d3233203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:84:e3:91:d5:27:fe:d2:d9:0a:1b:c9:fc:00:ec:d7:64:d0:
         82:61:6d:7e:cf:b6:dd:22:6b:9e:36:79:89:44:bc:66:07:24:
         b1:71:5f:52:f4:1e:80:c4:66:d6:0d:3c:87:af:2f:65:4a:1e:
         e0:b7:53:b8:cd:d0:d7:65:78:c3:34:40:55:a1:ed:0e:0e:c1:
         3d:d7:98:69:c6:7c:bf:4a:ca:53:36:23:15:2b:68:11:90:c5:
         26:72:24:4b:c2:98:e5:5d:26:e3:65:da:a8:9f:cd:5a:d0:cb:
         0e:dd:cc:0c:06:76:23:0c:fa:b7:e9:e4:41:2f:22:19:0a:67:
         db:4e:15:da:3e:c8:f8:09:5a:7e:99:67:54:e8:0a:06:48:aa:
         b7:4e:ac:bd:8b:27:95:71:4b:5e:c4:b5:1b:d3:23:01:5c:a1:
         54:5f:8e:29:ad:3f:fa:8e:8d:5f:c9:3c:09:67:79:e3:55:55:
         bd:e6:9f:e2:3c:23:ff:64:73:08:93:ae:76:ea:e9:f2:63:dd:
         8d:97:df:5e:fd:c4:07:74:e9:d4:7b:97:7b:7e:27:17:f8:f9:
         9c:86:c1:cf:7b:2d:4d:47:da:2c:bf:a0:7b:a6:9c:09:2f:b7:
         f9:a3:38:5d:80:f8:48:35:5a:cb:b1:c8:2c:b6:39:b0:e8:69:
         26:aa:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:22:03 2025 by rpki-client