Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20323135323639.roa
File:                     39312e3234342e3139392e302f32342d3234203d3e20323135323639.roa (raw, json)
Hash identifier:          ay6/tXoTQ75faw67eEF9Ab1yvEYBsywxZvLU/fkHs2o=
Subject key identifier:   3A:69:06:59:DC:00:DC:46:B6:EE:AB:1A:EC:A0:C6:06:EB:D3:42:EB
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       1036C42226FFE94C86FA1267CE22EDB5ABE3919C
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20323135323639.roa
Signing time:             Tue 12 Aug 2025 13:21:38 +0000
ROA not before:           Tue 12 Aug 2025 13:16:38 +0000
ROA not after:            Tue 11 Aug 2026 13:21:38 +0000
asID:                     215269
IP address blocks:        91.244.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:36:c4:22:26:ff:e9:4c:86:fa:12:67:ce:22:ed:b5:ab:e3:91:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug 12 13:16:38 2025 GMT
            Not After : Aug 11 13:21:38 2026 GMT
        Subject: CN=3A690659DC00DC46B6EEAB1AECA0C606EBD342EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:86:55:55:81:54:44:fa:b4:70:7a:19:e3:
                    b2:00:26:1c:7d:f6:69:23:99:5d:bb:f8:62:4b:fb:
                    df:43:bc:d4:af:fd:17:fa:03:a7:cf:f4:d2:0a:6c:
                    e0:1f:bc:f2:18:16:d5:2c:93:7a:e3:75:a9:7c:a2:
                    30:84:5d:f3:4d:8a:db:ca:a4:d8:f8:2c:9d:d3:c4:
                    07:ab:99:13:90:8b:a9:82:1e:18:e9:8a:81:08:29:
                    1d:21:4a:e1:bb:ce:6c:2b:ef:e7:35:05:4c:2b:da:
                    60:88:7b:f0:c6:84:78:a0:16:1f:b8:09:9e:a2:8e:
                    bd:be:cf:61:4b:5b:f5:da:82:64:79:a2:5f:0b:e3:
                    bb:d1:2b:29:e4:0c:ed:74:d2:7a:dd:c1:b2:51:b4:
                    2f:db:7e:27:3e:fa:fb:9d:ba:bc:ee:c9:97:cd:f4:
                    3d:75:10:7f:be:e2:f8:4a:45:f1:28:d6:be:64:e6:
                    32:4b:4c:93:07:6f:03:a6:51:ed:9a:77:ff:4b:19:
                    83:4f:7a:2e:0a:cc:3b:46:e8:2d:ec:f5:04:e3:f0:
                    66:31:99:3b:85:77:1b:f0:31:a4:b2:30:0f:51:bf:
                    ce:3b:c8:a1:71:70:55:79:3e:86:a6:77:c5:f1:73:
                    51:64:c4:85:dc:4a:6f:7e:32:9d:8b:3f:03:8b:62:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:69:06:59:DC:00:DC:46:B6:EE:AB:1A:EC:A0:C6:06:EB:D3:42:EB
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139392e302f32342d3234203d3e20323135323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:44:0d:44:38:ef:7f:de:38:de:71:68:4f:6b:57:aa:eb:
         d4:b3:5f:6a:31:e3:47:c5:4a:98:c0:5d:e1:2d:86:01:f9:3d:
         2d:31:44:e1:3d:18:f1:c6:c1:52:43:83:0e:bd:54:a2:61:82:
         12:a8:50:66:9d:0a:c0:53:77:a7:02:32:fe:47:7b:fa:5c:30:
         29:a9:75:fa:2c:3f:7c:25:2f:50:49:d1:6f:a6:b5:bd:31:04:
         c1:7d:a4:e0:d2:23:f2:a4:3b:2e:26:48:a6:8a:e0:2d:be:95:
         85:36:76:c8:b3:a0:1e:2b:3f:4e:e3:ff:ae:61:59:f2:ac:2a:
         25:ab:0d:77:c0:a2:05:32:b9:2f:fc:85:4b:50:00:26:c8:0d:
         ab:55:60:79:36:81:e7:d5:80:29:85:19:84:a6:ba:c9:e4:91:
         b9:81:d6:11:72:ef:1d:1f:53:0e:b1:07:ed:e9:cf:81:18:19:
         eb:00:9c:b9:00:5f:b8:fc:84:ce:33:7f:d7:9d:65:6d:3b:9f:
         c8:4a:1e:0b:03:47:86:28:a1:97:cc:ee:d9:b0:0e:70:a7:ab:
         00:62:5d:88:f8:e6:8a:09:9d:4f:92:ad:6e:76:9f:1b:0f:e3:
         60:2f:45:c4:6b:e3:b0:e9:52:4a:0b:1d:69:c6:7c:69:a2:fa:
         fc:99:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:47 2025 by rpki-client