Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132342e302f32342d3234203d3e20323134363737.roa
File:                     3231322e3131352e3132342e302f32342d3234203d3e20323134363737.roa (raw, json)
Hash identifier:          KnhCNu78DIDbywGLFkwoWiFjDfbtDhaVyOwE9ozd4cQ=
Subject key identifier:   7C:07:46:19:07:8F:89:D1:B0:E7:76:84:4C:2D:A5:9F:2D:8B:9D:C3
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6235A72709092AF355F7FB8DE880D7941F6E9F44
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132342e302f32342d3234203d3e20323134363737.roa
Signing time:             Wed 23 Apr 2025 05:39:41 +0000
ROA not before:           Wed 23 Apr 2025 05:34:41 +0000
ROA not after:            Wed 22 Apr 2026 05:39:41 +0000
asID:                     214677
IP address blocks:        212.115.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:35:a7:27:09:09:2a:f3:55:f7:fb:8d:e8:80:d7:94:1f:6e:9f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:41 2025 GMT
            Not After : Apr 22 05:39:41 2026 GMT
        Subject: CN=7C074619078F89D1B0E776844C2DA59F2D8B9DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:1a:58:98:e3:21:cf:a3:69:5c:98:a5:42:
                    a0:73:3e:ed:6c:c6:26:bf:e9:1b:58:92:81:f8:0a:
                    88:50:84:81:3c:ef:dd:69:6b:df:5e:5d:cd:21:c8:
                    cd:46:c6:c0:93:64:fa:4c:a2:b3:ab:a1:65:f3:74:
                    8d:4e:02:ad:05:50:bc:8f:28:e7:f7:d1:5d:b2:56:
                    30:b9:7c:70:53:f4:a4:b1:44:bc:56:2d:0c:2b:7b:
                    d3:39:92:c9:3f:9c:3f:34:5f:e8:1a:a2:8b:a4:7d:
                    d7:7b:36:95:37:fb:18:00:fe:f6:c5:e4:72:ca:0e:
                    d2:63:90:a7:31:cb:85:3a:61:44:e0:a6:6b:9a:09:
                    8e:e0:6f:03:c4:bb:79:b3:cf:3a:11:27:03:7e:31:
                    3b:bd:7d:98:08:8c:6b:f3:67:af:1a:27:e3:b0:fe:
                    14:92:46:d6:87:90:7f:c5:b7:20:99:35:43:13:ad:
                    21:2b:45:7f:c4:8a:ec:28:62:03:cd:46:64:c8:86:
                    d3:3d:35:81:8f:37:c7:ec:82:d4:bc:c0:e1:a6:bd:
                    dd:a8:32:67:0c:30:8f:aa:68:83:f3:a3:31:ac:ee:
                    2e:ea:13:66:df:74:fb:0f:63:c8:29:d7:ef:2e:fd:
                    b1:8f:b6:01:d2:52:c9:12:df:36:13:00:38:7c:c9:
                    24:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:07:46:19:07:8F:89:D1:B0:E7:76:84:4C:2D:A5:9F:2D:8B:9D:C3
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132342e302f32342d3234203d3e20323134363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7d:73:a4:30:ca:1d:cd:9a:0c:f3:66:7e:ac:e4:09:6c:3f:
         1d:34:0a:29:15:75:64:64:4d:2c:2d:17:21:f3:dd:9a:d3:75:
         70:3a:8b:38:de:4a:31:76:62:41:8d:89:82:13:27:c4:9f:95:
         f6:b6:b7:8b:e6:62:fe:2a:66:9b:86:e3:b5:d5:62:e2:c9:e6:
         eb:17:e8:ca:bc:40:cf:54:8b:8b:11:86:2d:b0:6d:d6:61:a1:
         17:d0:43:84:22:fd:6c:4b:23:06:0e:3d:1f:d9:4d:40:c8:9a:
         f2:86:29:c1:b7:4a:f9:58:72:f1:4c:f3:33:87:20:4a:a7:b7:
         66:f6:61:34:b9:31:f8:78:c0:4e:31:c0:eb:98:38:bb:60:79:
         41:58:5f:3b:24:1d:f5:e3:13:cf:d2:d6:03:ca:28:40:d1:78:
         85:ae:42:6c:66:23:20:b3:ca:92:ab:3f:fc:86:1a:7b:e6:7b:
         54:0f:5a:03:0d:d9:56:b4:6c:bb:35:09:e5:51:c2:81:ad:fe:
         f7:77:96:57:87:0f:2c:60:d7:8c:c8:85:0b:ba:7f:80:7c:2f:
         5d:55:3a:43:ef:8c:b9:af:b7:c6:3d:40:7c:8a:c7:fd:fd:d5:
         cf:5c:60:b6:f7:14:b4:1a:6f:3d:11:50:e7:64:de:61:a2:a7:
         1d:f6:7e:f3
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUYjWnJwkJKvNV9/uN6IDXlB9un0QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUwNDIzMDUzNDQxWhcNMjYwNDIyMDUzOTQx
WjAzMTEwLwYDVQQDEyg3QzA3NDYxOTA3OEY4OUQxQjBFNzc2ODQ0QzJEQTU5RjJE
OEI5REMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4caWJjjIc+j
aVyYpUKgcz7tbMYmv+kbWJKB+AqIUISBPO/daWvfXl3NIcjNRsbAk2T6TKKzq6Fl
83SNTgKtBVC8jyjn99FdslYwuXxwU/SksUS8Vi0MK3vTOZLJP5w/NF/oGqKLpH3X
ezaVN/sYAP72xeRyyg7SY5CnMcuFOmFE4KZrmgmO4G8DxLt5s886EScDfjE7vX2Y
CIxr82evGifjsP4UkkbWh5B/xbcgmTVDE60hK0V/xIrsKGIDzUZkyIbTPTWBjzfH
7ILUvMDhpr3dqDJnDDCPqmiD86MxrO4u6hNm33T7D2PIKdfvLv2xj7YB0lLJEt82
EwA4fMkkvQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFHwHRhkHj4nRsOd2hEwtpZ8t
i53DMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzMyMzEzMjJlMzEzMTM1MmUzMTMyMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzQzNjM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUc3wwDQYJKoZIhvcN
AQELBQADggEBAD99c6Qwyh3NmgzzZn6s5AlsPx00CikVdWRkTSwtFyHz3ZrTdXA6
izjeSjF2YkGNiYITJ8Sflfa2t4vmYv4qZpuG47XVYuLJ5usX6Mq8QM9Ui4sRhi2w
bdZhoRfQQ4Qi/WxLIwYOPR/ZTUDImvKGKcG3SvlYcvFM8zOHIEqnt2b2YTS5Mfh4
wE4xwOuYOLtgeUFYXzskHfXjE8/S1gPKKEDReIWuQmxmIyCzypKrP/yGGnvme1QP
WgMN2Va0bLs1CeVRwoGt/vd3lleHDyxg14zIhQu6f4B8L11VOkPvjLmvt8Y9QHyK
x/391c9cYLb3FLQabz0RUOdk3mGipx32fvM=
-----END CERTIFICATE-----
Generated at Thu May 1 05:05:28 2025 by rpki-client