Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139372e302f32342d3234203d3e203135343430.roa
File:                     39312e3234342e3139372e302f32342d3234203d3e203135343430.roa (raw, json)
Hash identifier:          eDDaBIV5nc9x8k5zz8W5Y5ysFxqWioJ4gWMqiqt5DvM=
Subject key identifier:   C6:DF:EC:F3:B2:BD:FB:59:4D:8B:4E:D2:9F:C5:74:16:A1:77:D2:F0
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       7C8F4D994FDBA025A32ACCFCE1FF251493E78EFF
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139372e302f32342d3234203d3e203135343430.roa
Signing time:             Wed 25 Mar 2026 06:35:54 +0000
ROA not before:           Wed 25 Mar 2026 06:30:54 +0000
ROA not after:            Wed 24 Mar 2027 06:35:54 +0000
asID:                     15440
IP address blocks:        91.244.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8f:4d:99:4f:db:a0:25:a3:2a:cc:fc:e1:ff:25:14:93:e7:8e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar 25 06:30:54 2026 GMT
            Not After : Mar 24 06:35:54 2027 GMT
        Subject: CN=C6DFECF3B2BDFB594D8B4ED29FC57416A177D2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e6:e1:f4:95:89:c3:d8:eb:c6:d3:03:33:97:
                    a9:b3:10:ae:4e:ea:c6:e5:86:fe:8a:0c:b7:f3:e1:
                    8b:1f:3d:f1:db:23:55:d8:ad:d2:f0:c1:e2:07:ce:
                    40:80:8c:93:f9:b9:2d:f0:0d:d7:c7:73:70:cb:05:
                    de:1b:a2:4d:bb:4e:2d:5d:40:60:a4:a6:9b:63:79:
                    de:74:71:72:e7:2d:04:93:59:a5:74:b5:3a:59:4d:
                    39:02:c6:35:d9:ad:f8:40:ba:55:f3:d5:bf:4d:d6:
                    65:50:eb:2c:9d:fe:72:62:a0:f7:2a:c6:a3:e9:04:
                    2d:97:35:c5:d2:66:03:50:74:c8:b6:ab:94:53:04:
                    9b:cc:8a:f7:4c:02:af:ed:98:ab:ae:92:1a:57:76:
                    86:f9:d0:4c:f0:08:e6:0c:39:a8:ea:38:db:0e:87:
                    41:25:91:b6:f5:01:e5:08:6e:af:a8:1e:44:08:6c:
                    50:7c:df:80:d4:88:0e:b5:f1:55:a1:3c:4f:01:91:
                    bc:36:1f:a9:ff:e4:52:a5:f1:c0:37:be:33:09:5b:
                    b6:42:6d:24:99:b8:88:0d:d7:a5:50:a3:11:0d:9b:
                    46:b2:51:c0:81:79:90:bd:c2:06:5e:30:20:10:9d:
                    1b:6f:9f:f4:d9:f5:61:c0:71:9e:9a:66:46:d9:f8:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DF:EC:F3:B2:BD:FB:59:4D:8B:4E:D2:9F:C5:74:16:A1:77:D2:F0
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139372e302f32342d3234203d3e203135343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:da:d6:5f:1e:37:51:f9:39:44:e5:44:36:66:78:e4:58:ef:
         03:26:97:18:52:12:e5:6f:e6:d3:96:a0:ec:26:08:4d:ee:f1:
         b5:83:d8:ae:63:98:79:f5:51:47:36:21:f7:99:d1:cd:f4:f2:
         3a:91:ba:01:ca:29:b9:77:4e:ca:8a:c7:c8:c5:da:13:58:d6:
         0c:12:f9:a7:20:73:0d:15:49:59:25:13:a6:e0:e7:15:1c:fe:
         3d:bc:56:25:39:91:78:8d:d7:42:ed:a8:9e:bc:e0:df:4d:9c:
         e2:16:6d:0c:ba:24:9a:79:5c:1d:d2:23:21:4e:a6:58:5f:8a:
         bb:12:9a:d5:15:0b:6c:d7:cf:ce:e4:71:c0:e2:9d:cc:54:46:
         2c:ef:b4:5f:a3:29:8b:f3:c8:f3:23:85:f5:ae:fc:95:c4:dc:
         25:28:aa:d7:61:a1:ca:b1:d9:81:b8:92:4a:f1:07:9f:a7:50:
         e0:bd:e2:a7:98:b1:89:e0:46:ca:4d:3d:12:db:d8:7b:e2:a0:
         eb:df:ba:f7:f6:ed:47:98:91:a0:07:8c:de:03:23:84:c1:b2:
         e5:42:25:45:64:a6:5d:29:ea:ec:7b:e6:57:85:de:2c:00:f8:
         09:cc:f8:50:ab:cd:a4:d6:21:d1:2b:66:f2:0e:74:b7:25:62:
         c1:fb:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:08:51 2026 by rpki-client