Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139372e302f32342d3234203d3e203135343430.roa
File:                     39312e3234342e3139372e302f32342d3234203d3e203135343430.roa (raw, json)
Hash identifier:          iUIkSVfBl/uBjQOUpqpamAtHpQQfc+kFjjnZpQY8A+k=
Subject key identifier:   72:2C:78:26:E0:10:E1:4C:1F:B2:29:5A:04:7F:90:FA:D9:3C:2E:21
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       129BB078280AB7BD8CAE06F51770199C28B18A63
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139372e302f32342d3234203d3e203135343430.roa
Signing time:             Wed 23 Apr 2025 05:39:27 +0000
ROA not before:           Wed 23 Apr 2025 05:34:27 +0000
ROA not after:            Wed 22 Apr 2026 05:39:27 +0000
asID:                     15440
IP address blocks:        91.244.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 09:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9b:b0:78:28:0a:b7:bd:8c:ae:06:f5:17:70:19:9c:28:b1:8a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:27 2025 GMT
            Not After : Apr 22 05:39:27 2026 GMT
        Subject: CN=722C7826E010E14C1FB2295A047F90FAD93C2E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:13:69:76:8c:73:f6:3b:14:c6:8e:61:c2:
                    c8:3f:2d:5d:da:d5:6a:38:85:59:13:87:81:12:32:
                    04:26:18:c1:e6:d5:b6:9d:a8:59:38:b8:de:26:ad:
                    1c:df:15:47:c0:bf:f0:d9:9f:6f:5c:28:bb:bc:04:
                    6e:2d:f3:50:2d:9e:7f:6f:05:5b:ad:79:a0:31:b1:
                    62:32:8b:82:7f:f0:dd:a8:03:4b:1f:99:83:c2:46:
                    0f:fa:ee:b5:fd:5b:98:13:55:7f:34:39:e7:57:3a:
                    e6:9b:31:9e:20:5e:96:46:19:be:3e:38:4a:bc:8b:
                    cd:61:8f:93:5a:b9:4a:1d:41:04:48:82:7c:c5:08:
                    42:26:c2:32:17:e9:f6:89:30:94:06:1d:10:ea:b3:
                    f0:7d:80:f2:b8:81:6b:81:3d:13:85:14:93:d8:bd:
                    a5:4b:f8:4a:af:d6:b3:74:17:1c:b9:d7:c2:a6:0c:
                    1a:58:b2:88:49:f9:4a:de:ff:ac:1f:1a:03:90:3f:
                    66:2b:13:97:1f:39:a5:a4:26:18:27:8c:4f:1a:c1:
                    8c:c4:1d:5a:bc:d8:e4:cc:1f:e0:fb:6d:2c:b7:f1:
                    f8:cd:b0:f8:4e:48:63:e4:79:83:09:d0:23:76:ca:
                    8a:1b:27:03:02:03:92:1b:41:41:91:ca:3b:d0:32:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:78:26:E0:10:E1:4C:1F:B2:29:5A:04:7F:90:FA:D9:3C:2E:21
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139372e302f32342d3234203d3e203135343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:50:cb:b1:74:38:63:69:ae:b5:54:38:b3:f0:55:87:99:28:
         cc:06:08:73:2c:10:df:9e:78:97:b2:27:4f:79:88:e3:52:8a:
         ff:ef:12:11:7a:ff:e1:ad:14:b1:82:9c:33:5b:20:4e:28:09:
         ed:0c:04:91:70:37:62:9f:f9:98:e6:38:1e:a9:04:81:01:ea:
         d4:c0:63:36:9d:46:77:40:7a:82:7e:a5:29:c9:7c:62:da:f6:
         ec:7b:c0:92:fd:9a:04:79:5f:6f:67:3d:8a:af:03:8b:17:07:
         c5:f0:42:b9:b1:01:e3:4d:db:87:3f:ce:a8:1c:b6:30:64:ed:
         0e:ce:e0:b0:90:b4:f4:bf:a7:ab:7e:ed:04:a7:9c:d8:47:5d:
         d4:69:eb:0c:13:b7:6c:6a:ef:41:ca:bf:e0:bf:9c:3f:9a:88:
         c3:a4:62:8c:b2:e0:2e:be:23:0c:b4:21:00:1c:14:37:d3:a2:
         f9:d6:de:77:19:3c:cd:72:0d:35:f8:f1:40:51:a2:ed:60:bf:
         54:7e:7e:c4:57:70:4c:d2:1c:71:17:15:4b:11:4e:53:05:a0:
         f5:83:ea:b0:8b:27:22:13:c8:78:b3:3e:27:17:fc:3c:30:98:
         da:e2:b4:16:d1:be:73:f7:9e:28:50:e4:4f:a1:a3:43:78:9f:
         5f:e0:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:14:09 2025 by rpki-client