Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203134363138.roa
File:                     3231322e3131352e3132362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          ictwzGnVd1qQ5RZOZqXke4SPfJ5ZA6HeNdTA0tPCGX0=
Subject key identifier:   48:D1:53:83:DA:52:C6:1F:84:70:9D:B2:08:B5:0D:0D:3C:45:03:E5
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       628797094395517BEAB19C55BCB03C5C58AFF2B7
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203134363138.roa
Signing time:             Wed 23 Apr 2025 05:55:13 +0000
ROA not before:           Wed 23 Apr 2025 05:50:13 +0000
ROA not after:            Wed 22 Apr 2026 05:55:13 +0000
asID:                     14618
IP address blocks:        212.115.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:87:97:09:43:95:51:7b:ea:b1:9c:55:bc:b0:3c:5c:58:af:f2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:50:13 2025 GMT
            Not After : Apr 22 05:55:13 2026 GMT
        Subject: CN=48D15383DA52C61F84709DB208B50D0D3C4503E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:25:ca:8d:a4:bf:af:64:e1:1d:97:af:18:
                    93:42:73:3a:32:52:09:55:1d:d3:9d:2e:e6:c6:34:
                    e9:a0:cb:07:49:83:12:06:13:cf:cb:fa:96:65:a4:
                    f2:0f:18:a1:fb:80:30:65:1a:ea:d8:00:f0:a8:cc:
                    ae:e7:36:ed:c3:2c:a0:ca:e4:ff:51:17:5f:b3:f0:
                    8b:7a:1e:1f:71:43:20:36:ce:b2:e5:9f:7a:af:9b:
                    9a:d5:22:f3:ec:97:74:3e:5c:a4:1c:7e:8f:22:24:
                    63:d9:a2:65:6e:4f:1b:f4:4e:9b:dc:ce:44:0d:f5:
                    a9:c7:c3:cd:05:39:9f:c6:56:97:47:da:a6:a4:ba:
                    1f:67:0d:a8:c0:4c:af:a3:fe:05:bc:07:70:26:30:
                    9f:5c:3c:69:32:52:86:89:a9:a7:61:f7:e0:29:a4:
                    0c:3c:63:17:aa:bd:ec:ec:04:1c:17:59:1e:54:48:
                    de:72:6a:64:43:c1:39:c1:7e:84:64:3e:d7:71:8f:
                    61:ad:10:46:da:44:16:5a:a4:e2:14:69:92:37:0f:
                    90:07:1c:65:56:37:da:8c:85:ba:3f:f3:be:44:9e:
                    d9:8c:53:a1:48:eb:39:74:c1:8b:d7:19:f8:26:e8:
                    6a:a6:fa:e8:fb:4a:d5:6c:60:f1:f9:bf:92:1f:de:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D1:53:83:DA:52:C6:1F:84:70:9D:B2:08:B5:0D:0D:3C:45:03:E5
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:77:59:10:3d:69:59:5c:d1:2b:f7:b5:f2:2c:d9:a6:4a:df:
         c3:35:81:f4:db:b4:eb:8a:9d:84:66:0e:8d:ed:bd:56:6a:c8:
         20:bc:db:08:de:1a:c2:6f:e3:13:5b:12:21:f4:af:d6:30:1b:
         53:55:b5:d4:51:5a:f4:82:d8:ba:95:01:d7:b6:16:6e:04:dd:
         c4:c7:f9:7f:ae:54:44:8d:1d:f4:39:fb:15:06:3d:ec:4d:ee:
         aa:88:32:2a:e2:a0:68:1d:de:5a:be:b2:a3:41:d2:a1:66:e5:
         87:b1:95:4b:e1:3c:07:96:39:e0:55:75:51:fa:d5:ee:53:34:
         a8:9b:02:ca:40:db:15:1c:72:eb:3e:aa:5d:48:75:bf:47:24:
         bd:9e:2c:e1:b4:5c:18:2e:58:94:60:b4:73:de:44:79:0f:49:
         49:21:46:06:03:a9:b2:08:f1:a1:84:99:50:c4:97:45:86:da:
         d0:f0:a0:3f:93:91:d2:57:ee:64:74:4a:7c:d7:31:44:f8:40:
         b7:06:46:d5:04:7f:27:ee:0c:fc:2d:c0:97:2a:54:c0:ec:60:
         1f:29:17:4f:78:87:fc:f3:7e:8f:cd:40:27:66:84:a0:f7:cb:
         63:c4:82:58:7d:89:8f:69:2e:e3:13:55:e0:26:f2:d5:27:57:
         05:bb:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:50 2025 by rpki-client