Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203230343733.roa
File:                     3231322e3131352e3132362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          YfId/0dNuTpMhJ2a3UaSqxxQKjCnpguI9t8+n4sEwp0=
Subject key identifier:   80:0E:34:40:AF:1D:B1:3F:9A:A9:FC:01:D6:B7:8F:44:DE:C9:22:1B
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       0A3C7A5DB8A42B9008741B3D1A637BBF2DB5D60A
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 23 Apr 2025 05:39:22 +0000
ROA not before:           Wed 23 Apr 2025 05:34:22 +0000
ROA not after:            Wed 22 Apr 2026 05:39:22 +0000
asID:                     20473
IP address blocks:        212.115.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3c:7a:5d:b8:a4:2b:90:08:74:1b:3d:1a:63:7b:bf:2d:b5:d6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:22 2025 GMT
            Not After : Apr 22 05:39:22 2026 GMT
        Subject: CN=800E3440AF1DB13F9AA9FC01D6B78F44DEC9221B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:2a:57:ef:b9:61:fd:7c:39:1b:1f:86:4e:
                    0f:ff:4d:f6:1d:9b:49:a5:88:29:95:22:eb:8f:a9:
                    34:41:4d:2b:95:82:15:45:14:6b:aa:18:f3:b0:42:
                    74:9d:ea:22:b5:ae:48:e8:31:ba:02:62:a4:c9:a2:
                    e6:b1:26:71:a1:e3:1e:d7:0e:27:d2:8f:c6:96:85:
                    34:77:79:de:ae:0e:e8:a5:08:c4:8f:a5:ea:9f:0a:
                    28:22:95:01:70:75:53:9d:09:ba:90:57:c9:ed:25:
                    ba:62:bb:58:7f:42:83:d1:a6:4a:75:7b:dd:90:c0:
                    11:78:0e:df:ef:f6:6c:d5:f4:fc:ec:49:2f:cd:fe:
                    5f:80:6d:60:30:0f:d2:f8:69:64:d3:c5:b7:a3:95:
                    34:18:41:83:29:93:7d:05:0c:f6:af:a5:cc:32:b9:
                    ea:7c:87:57:a7:e0:2c:8f:49:48:50:f9:76:e9:49:
                    fc:5a:89:3f:8c:30:7b:97:4f:cb:2e:5e:d3:f5:f5:
                    5b:fc:58:e9:68:1a:02:37:0f:c9:13:9d:15:07:cf:
                    6c:f1:4d:67:e0:5b:af:34:c2:e8:27:c2:ed:71:2e:
                    8c:17:92:d0:08:25:67:19:ce:dc:ba:74:4a:05:00:
                    aa:5a:8d:9b:29:80:21:6f:c1:35:eb:96:57:86:e3:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0E:34:40:AF:1D:B1:3F:9A:A9:FC:01:D6:B7:8F:44:DE:C9:22:1B
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:1f:e8:11:32:98:ce:2a:6a:42:f5:d5:15:23:2e:66:8b:
         70:5d:fc:63:f1:97:52:6a:e9:fa:d8:5d:d0:d2:dd:00:9f:0e:
         3b:78:ac:64:19:f1:71:fa:8f:85:56:49:3a:6d:e8:01:fa:aa:
         38:d2:0c:d5:ed:8f:58:13:18:34:4f:f7:19:a0:53:87:0b:c3:
         3d:c7:14:c9:da:30:4f:52:6e:f5:73:f1:a0:68:aa:04:30:a5:
         58:4b:32:e2:4a:26:4d:db:99:1e:2a:0c:5c:34:56:d8:48:49:
         79:f7:89:41:f6:da:7a:af:5d:3f:98:3e:a4:50:3a:79:28:f7:
         4c:56:1d:3a:eb:18:1c:f5:5c:04:65:45:38:2a:27:6d:06:9e:
         73:d6:32:bb:4a:81:b8:d7:09:f7:d2:05:c4:f8:cb:9c:75:d6:
         2c:73:e2:e9:38:80:60:3a:22:57:0a:d0:50:3b:e6:e4:09:d8:
         1a:5b:61:ce:fb:32:11:1d:fa:59:e0:fd:97:e3:cf:8b:0b:5e:
         14:17:3d:96:43:81:04:00:5e:55:10:4b:1b:97:53:48:1e:87:
         71:73:ac:da:e0:fe:ab:c3:46:a6:e5:d5:08:b5:9e:5d:19:53:
         ed:d8:0f:e2:6a:25:f9:91:18:63:e5:50:77:2b:0f:9e:c8:86:
         a9:95:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:20 2025 by rpki-client