Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203134363138.roa
File:                     3231322e3131352e3132372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          EYCkrwge7fDitEDRK/kfU19S+ZKfYLdqAku9vJiJI+Y=
Subject key identifier:   99:9F:B2:0A:F5:28:39:B9:4B:EF:03:02:B2:94:15:87:B4:EC:08:DA
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       3CBA629AC9EB75C987B87731C08BBD70C5699FBB
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203134363138.roa
Signing time:             Wed 23 Apr 2025 05:54:54 +0000
ROA not before:           Wed 23 Apr 2025 05:49:54 +0000
ROA not after:            Wed 22 Apr 2026 05:54:54 +0000
asID:                     14618
IP address blocks:        212.115.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ba:62:9a:c9:eb:75:c9:87:b8:77:31:c0:8b:bd:70:c5:69:9f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:49:54 2025 GMT
            Not After : Apr 22 05:54:54 2026 GMT
        Subject: CN=999FB20AF52839B94BEF0302B2941587B4EC08DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:af:90:4a:6c:11:70:4f:29:53:77:5f:8a:e2:
                    88:d0:07:72:2f:a3:5f:da:b6:c9:b3:7d:de:4d:40:
                    20:ec:7a:04:cc:e5:eb:7d:a9:66:63:ba:7d:85:27:
                    86:af:27:e7:23:f2:70:aa:18:9e:ff:95:47:41:fb:
                    06:db:2a:db:e6:3e:3b:2e:e5:69:f7:7a:dd:fe:8d:
                    3f:78:25:be:3e:d2:be:5c:a4:4b:be:48:af:cc:e0:
                    ff:de:69:b1:23:73:be:e9:17:86:e7:83:d4:c3:f3:
                    6a:1f:b7:4a:61:8c:1e:8d:c5:ce:bd:be:54:00:8b:
                    3f:41:a6:10:7b:0d:94:7f:40:50:b5:7d:9b:3b:c2:
                    0d:62:91:3e:7c:b2:1d:98:b1:20:b9:2b:78:8b:16:
                    c3:cc:1c:14:2e:23:c3:dd:cc:cc:5a:33:73:87:04:
                    9b:e2:40:16:f8:a3:f2:2a:63:c1:ee:49:8f:0f:94:
                    a9:31:5b:6d:45:c8:a0:87:c6:24:f9:73:aa:3e:ac:
                    d5:7f:b0:63:2f:54:08:83:8b:85:7b:aa:39:8c:79:
                    a8:02:03:05:a9:7b:90:fd:c6:2e:75:ef:f8:0e:76:
                    04:76:7f:48:9c:1b:be:dd:42:1d:e2:80:db:d0:27:
                    50:04:35:79:b7:ab:45:a9:82:c8:04:4a:4e:ec:10:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:B2:0A:F5:28:39:B9:4B:EF:03:02:B2:94:15:87:B4:EC:08:DA
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:43:cf:ab:7d:37:46:e6:cf:18:84:5a:5e:da:15:af:25:cd:
         ea:ce:75:bd:51:c7:13:a4:a7:4f:f6:f7:c0:44:f8:a0:52:f1:
         a9:65:56:4c:7d:5e:7e:8c:38:18:ce:a9:4a:44:cc:b8:c6:41:
         a4:85:f4:1e:e8:ab:45:8b:a6:e8:3c:6e:c0:2d:97:45:c8:74:
         cb:bb:ea:ed:b5:9c:9e:d5:7d:45:0b:34:cc:e7:aa:d2:73:ea:
         b2:e9:9b:0b:e8:b9:dd:cd:19:51:2e:1a:23:25:29:20:61:14:
         9d:ad:1b:2a:95:e1:e7:ad:89:95:54:e7:71:d3:9b:57:3a:28:
         82:c7:8a:da:23:a4:52:95:fa:cb:86:d5:7a:3a:9b:ac:9e:97:
         04:32:be:be:1e:9a:32:c4:44:53:3f:b2:3d:4c:a1:f7:2d:88:
         d5:12:b9:2d:90:9b:24:34:43:be:8a:d1:76:a6:0e:3a:e5:34:
         63:4e:e2:97:50:7f:bc:f2:1c:da:14:88:59:d4:fc:02:7f:28:
         de:84:f6:b7:95:2b:61:5a:78:6c:70:a5:b6:cd:fa:90:e4:1e:
         83:7e:e4:58:b6:23:04:b6:3d:a2:3b:2b:7b:cc:20:7d:6b:05:
         35:6f:53:6f:cb:52:e4:ff:87:8d:68:ad:86:8a:73:83:04:91:
         f0:c9:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:56 2025 by rpki-client