Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203631333137.roa
File:                     39312e3234342e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          8crbYmLhLFP2G52fngC1J3pTBkzAnMT/paUy3QcTvGU=
Subject key identifier:   42:33:C3:47:A8:A4:7A:AA:FF:DF:67:21:63:4A:53:F1:94:65:82:80
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       78A5E1240E9AB67BCB8C2EF41DA8339DDB621EED
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 25 Mar 2026 06:35:54 +0000
ROA not before:           Wed 25 Mar 2026 06:30:54 +0000
ROA not after:            Wed 24 Mar 2027 06:35:54 +0000
asID:                     61317
IP address blocks:        91.244.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:e1:24:0e:9a:b6:7b:cb:8c:2e:f4:1d:a8:33:9d:db:62:1e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar 25 06:30:54 2026 GMT
            Not After : Mar 24 06:35:54 2027 GMT
        Subject: CN=4233C347A8A47AAAFFDF6721634A53F194658280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:0a:5c:16:ba:dc:77:18:66:95:88:f5:9d:
                    f6:9e:24:c7:74:07:45:c3:e8:01:4b:61:69:8d:8a:
                    21:f2:74:1e:96:06:01:99:6b:44:3b:c5:19:dd:d7:
                    24:52:74:8d:bc:bb:08:2b:c4:d8:6d:a9:26:e5:b1:
                    3f:e8:54:3c:14:21:41:e5:b4:3f:08:15:6c:8c:81:
                    df:64:90:66:48:d7:8d:71:62:cb:1a:11:60:f0:53:
                    fb:1c:98:e3:b6:69:a3:7a:93:fe:c9:48:bf:71:4c:
                    5c:b5:69:aa:b0:f0:bf:21:36:71:76:f5:2a:49:df:
                    e2:f9:7b:f8:cc:e3:1b:27:8d:88:0a:4f:5c:14:53:
                    dc:66:3d:fe:4a:28:34:c3:ac:4d:33:83:aa:7b:1c:
                    ed:ff:84:e8:43:b3:79:8f:cb:c0:37:53:a9:82:66:
                    1e:6b:5e:42:03:17:1d:0c:14:51:26:4b:cd:6b:4b:
                    e7:b5:ff:58:95:af:bb:bb:7b:b0:3b:44:bf:d7:86:
                    3a:b8:da:fb:f1:c0:3e:6e:77:cf:18:0f:73:6c:a6:
                    fe:4f:2b:29:69:97:a7:ac:83:08:5b:16:57:35:28:
                    92:37:15:f9:e2:09:7b:c9:a6:17:32:53:e1:34:28:
                    5d:fd:d3:54:00:5e:d6:f5:aa:de:b8:03:50:ab:d9:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:C3:47:A8:A4:7A:AA:FF:DF:67:21:63:4A:53:F1:94:65:82:80
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:31:d1:b5:38:28:6a:2c:b6:99:9d:1b:50:3a:ab:42:29:
         2b:a7:b4:e8:dd:16:83:57:3a:f0:55:5f:35:63:06:f6:cd:29:
         c1:49:79:79:fe:7e:3d:eb:c5:e3:2f:f3:ad:18:a6:37:8c:9a:
         59:e7:b8:b6:8e:29:da:d1:03:0c:31:7c:95:1e:69:6f:5a:d3:
         e9:2e:5d:e6:d3:8a:e3:17:5b:ce:c3:99:11:c4:b1:92:bd:69:
         b2:37:19:91:a7:3b:24:db:b9:0f:0e:be:2f:4b:32:87:17:cf:
         3b:de:3c:76:44:66:79:ed:87:43:17:e6:8c:d1:a9:ef:35:a8:
         2a:88:4f:cc:21:84:c5:89:8d:38:0f:fb:16:85:18:da:7d:4b:
         84:da:77:28:b7:4f:dc:8d:57:ef:6b:5e:31:7f:b2:e8:3f:a9:
         ad:f2:af:71:dd:80:0c:fb:e6:3d:47:1a:32:79:f6:e9:66:48:
         99:e1:2d:1c:b4:2b:70:ba:33:7d:4b:ba:4d:bd:4b:78:97:aa:
         2a:e6:30:63:30:94:f3:d0:f4:53:0e:10:e6:8e:2f:b6:b2:e0:
         20:30:57:10:f1:d0:ac:fb:dc:04:57:f9:e5:b3:0b:30:ce:e6:
         20:53:a4:e6:6d:ea:19:1b:4f:13:3f:8b:46:e8:63:35:0b:e6:
         63:f5:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:13 2026 by rpki-client