Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20323734353634.roa
File:                     3231322e3131352e3132352e302f32342d3234203d3e20323734353634.roa (raw, json)
Hash identifier:          jsajZ/6c+CLimietPhXqBp8RqsPbIZacnvSTNSkUcjU=
Subject key identifier:   87:B9:9F:D0:14:C5:59:F2:D7:5B:9B:DF:99:89:71:44:25:9B:27:23
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6E676523CA4F1BD425EF4E5A98C7696DDD90EC0F
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20323734353634.roa
Signing time:             Mon 20 Oct 2025 13:47:02 +0000
ROA not before:           Mon 20 Oct 2025 13:42:02 +0000
ROA not after:            Mon 19 Oct 2026 13:47:02 +0000
asID:                     274564
IP address blocks:        212.115.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:67:65:23:ca:4f:1b:d4:25:ef:4e:5a:98:c7:69:6d:dd:90:ec:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Oct 20 13:42:02 2025 GMT
            Not After : Oct 19 13:47:02 2026 GMT
        Subject: CN=87B99FD014C559F2D75B9BDF99897144259B2723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:43:5b:2d:ef:1d:b5:81:c2:08:79:05:40:
                    d8:07:02:87:ab:74:b6:0c:5f:a7:30:54:e7:ee:49:
                    2a:53:de:93:cd:e6:b6:f4:f1:33:62:56:b0:aa:7a:
                    9a:90:59:fe:f7:6b:5b:12:e2:24:e9:7a:c0:6c:4c:
                    42:99:24:ca:ff:ba:5f:83:13:a6:cf:f6:10:38:4b:
                    17:d1:29:85:91:ce:4c:a4:46:cb:cf:25:d6:68:2d:
                    dd:9e:79:27:47:63:86:2d:9c:62:39:fd:e1:4c:e5:
                    41:0a:a0:eb:fc:fb:7d:de:c2:19:a9:58:67:b0:11:
                    61:0b:49:7c:94:03:75:60:6a:f0:1a:f5:fe:e0:f7:
                    f3:af:f1:69:99:fa:64:7c:0a:03:ae:7d:a2:da:eb:
                    81:6a:38:fa:05:b9:b5:66:ae:0d:5c:5b:70:5f:b4:
                    5c:a9:97:22:c9:bf:50:fc:30:34:4a:ab:ec:14:c7:
                    0d:78:d8:f4:f1:dc:96:a9:a1:08:ea:bd:5d:6a:10:
                    81:66:49:8b:c9:70:d0:b7:0d:bc:e0:ed:91:ce:43:
                    da:a4:69:01:69:94:90:6a:b3:e6:ed:ee:50:c3:fd:
                    8c:5f:af:2d:16:7b:c6:f6:83:da:72:7d:c4:08:31:
                    18:6f:3b:91:fa:7b:fc:cc:c6:fd:5b:56:29:59:58:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B9:9F:D0:14:C5:59:F2:D7:5B:9B:DF:99:89:71:44:25:9B:27:23
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20323734353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:01:ea:8e:7d:12:4d:82:2b:d6:4d:2b:8f:bf:97:eb:3f:49:
         9c:48:b1:38:9e:ab:85:c3:ad:5c:e6:71:ef:99:e3:f9:59:c9:
         2d:c9:bf:bb:b8:72:aa:46:30:80:c7:1f:dc:e7:c7:44:66:d5:
         07:a6:b6:2f:a0:a9:a7:a0:f6:e1:00:e4:77:78:af:3c:13:74:
         76:89:72:1c:67:a9:2e:fc:e7:b3:7d:09:14:a9:ea:3f:6b:fa:
         7d:d3:16:7c:d3:52:32:8c:71:92:95:da:97:86:c2:71:23:13:
         5f:65:f7:1f:30:cc:af:51:3e:e4:25:c3:18:77:b0:03:15:7f:
         f0:ba:5e:03:5a:fd:d4:2c:5e:e4:d4:11:ff:bd:b1:6b:e2:73:
         3d:93:dc:07:64:03:44:8e:63:d9:c4:04:d5:9b:e0:88:be:9d:
         53:1f:bd:38:14:87:ef:2c:3e:46:d3:fd:de:26:f0:14:8d:c8:
         38:b8:ef:db:bb:a2:2e:88:14:2f:f8:be:11:b4:ef:88:06:0c:
         6b:2b:15:a6:23:14:d7:7e:4f:23:aa:6f:c9:0d:7c:0e:da:04:
         b5:df:19:56:7c:63:8e:7b:ab:42:16:9a:a3:7f:37:fa:92:ce:
         11:0c:13:3a:db:28:d6:9a:84:b7:98:3a:85:17:e4:c8:3a:07:
         36:a9:24:c5
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUbmdlI8pPG9Ql705amMdpbd2Q7A8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUxMDIwMTM0MjAyWhcNMjYxMDE5MTM0NzAy
WjAzMTEwLwYDVQQDEyg4N0I5OUZEMDE0QzU1OUYyRDc1QjlCREY5OTg5NzE0NDI1
OUIyNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowhDWy3vHbWB
wgh5BUDYBwKHq3S2DF+nMFTn7kkqU96Tzea29PEzYlawqnqakFn+92tbEuIk6XrA
bExCmSTK/7pfgxOmz/YQOEsX0SmFkc5MpEbLzyXWaC3dnnknR2OGLZxiOf3hTOVB
CqDr/Pt93sIZqVhnsBFhC0l8lAN1YGrwGvX+4Pfzr/FpmfpkfAoDrn2i2uuBajj6
Bbm1Zq4NXFtwX7RcqZciyb9Q/DA0SqvsFMcNeNj08dyWqaEI6r1dahCBZkmLyXDQ
tw284O2RzkPapGkBaZSQarPm7e5Qw/2MX68tFnvG9oPacn3ECDEYbzuR+nv8zMb9
W1YpWVgyjwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIe5n9AUxVny11ub35mJcUQl
mycjMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzMyMzEzMjJlMzEzMTM1MmUzMTMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjM3MzQzNTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUc30wDQYJKoZIhvcN
AQELBQADggEBAHgB6o59Ek2CK9ZNK4+/l+s/SZxIsTieq4XDrVzmce+Z4/lZyS3J
v7u4cqpGMIDHH9znx0Rm1Qemti+gqaeg9uEA5Hd4rzwTdHaJchxnqS7857N9CRSp
6j9r+n3TFnzTUjKMcZKV2peGwnEjE19l9x8wzK9RPuQlwxh3sAMVf/C6XgNa/dQs
XuTUEf+9sWvicz2T3AdkA0SOY9nEBNWb4Ii+nVMfvTgUh+8sPkbT/d4m8BSNyDi4
79u7oi6IFC/4vhG074gGDGsrFaYjFNd+TyOqb8kNfA7aBLXfGVZ8Y457q0IWmqN/
N/qSzhEMEzrbKNaahLeYOoUX5Mg6BzapJMU=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:48:39 2025 by rpki-client