Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203136353039.roa
File:                     3231322e3131352e3132372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          xW9Xn2XYehRyzr0j8+CN2O7lkeboHzCShOZTBz4U4x0=
Subject key identifier:   D0:FF:5E:63:2F:4D:1F:E9:46:89:CD:5E:06:9F:7D:DF:24:B8:02:2B
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       7F048E8ACCBFBAF0F8954D9119F382C46A0E65BE
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203136353039.roa
Signing time:             Wed 23 Apr 2025 05:53:25 +0000
ROA not before:           Wed 23 Apr 2025 05:48:25 +0000
ROA not after:            Wed 22 Apr 2026 05:53:25 +0000
asID:                     16509
IP address blocks:        212.115.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:04:8e:8a:cc:bf:ba:f0:f8:95:4d:91:19:f3:82:c4:6a:0e:65:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:48:25 2025 GMT
            Not After : Apr 22 05:53:25 2026 GMT
        Subject: CN=D0FF5E632F4D1FE94689CD5E069F7DDF24B8022B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:8f:83:c1:36:1d:27:4e:01:82:b2:a0:aa:
                    e2:b3:27:ad:dd:32:a4:38:35:4d:8f:fc:33:05:8c:
                    69:0d:46:34:48:23:b2:d3:83:fd:20:57:ce:bd:47:
                    bd:ee:b1:4c:4c:f0:91:3e:ae:f8:8b:97:0d:0b:3c:
                    aa:51:c9:3d:72:b6:fa:00:63:e6:5d:25:55:93:57:
                    e9:e9:27:ec:df:eb:69:a3:4b:4e:38:7d:5a:d1:d9:
                    27:68:6d:2a:7b:92:07:0f:f7:9a:a0:cb:ed:97:96:
                    4d:58:5c:8b:8c:d4:65:54:c2:bb:0b:80:94:5d:0c:
                    dd:fb:03:0b:c4:f8:8a:4c:87:11:bc:61:29:a3:23:
                    7d:ee:78:9b:4f:4b:c6:b6:53:c3:0f:0f:d6:ce:16:
                    81:fd:d9:25:d8:e1:54:f1:f0:04:e1:e7:95:c7:0d:
                    ef:c9:0d:52:52:6f:a9:30:5a:a7:4b:7e:03:39:49:
                    44:fc:5e:06:78:42:c7:42:65:59:0a:8b:1e:57:b4:
                    e9:19:b6:15:b7:03:96:86:60:c6:07:37:18:39:f3:
                    87:ea:39:d9:7b:25:a8:7a:06:31:3b:c2:33:7c:e3:
                    35:2b:30:e0:68:e0:3a:03:b8:32:19:90:59:89:b9:
                    39:b6:f6:b9:07:ec:e2:47:aa:b7:1c:90:74:48:fa:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FF:5E:63:2F:4D:1F:E9:46:89:CD:5E:06:9F:7D:DF:24:B8:02:2B
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e6:e5:6c:80:0a:95:c7:b7:ae:a9:27:24:6b:25:b9:0f:c9:
         da:1d:92:9c:9b:3f:5c:98:f5:ea:52:34:4e:75:f5:05:f9:19:
         cb:24:c3:ee:d9:4e:55:f1:a9:74:57:91:12:d5:c8:6c:d8:f4:
         29:37:d9:3e:e5:77:ef:4e:b4:e8:b0:ec:f3:04:8a:a0:32:3e:
         bd:b4:6b:99:c4:32:eb:c8:59:be:5b:5c:80:cf:de:cd:ce:b2:
         07:91:5e:b6:6e:10:43:20:2c:a7:14:3b:5f:f3:8a:af:5f:06:
         23:b0:34:59:9a:b9:8c:ca:95:2f:f6:67:3a:02:cd:d2:da:1f:
         48:c5:45:3a:1c:f3:bb:ff:3f:aa:cf:cd:39:11:c4:fe:31:67:
         17:3f:7a:0c:6f:c2:d6:3a:ca:41:fb:34:02:26:eb:26:8f:38:
         d1:47:82:ba:b8:0e:f7:ea:55:5b:c2:47:d1:5c:e9:3c:10:ea:
         23:af:c6:13:40:cf:36:89:d0:38:bc:ca:04:1c:a6:9f:c3:9a:
         75:d8:b9:f1:75:13:27:58:2d:6a:10:57:25:4c:ef:4b:33:11:
         86:8c:08:c0:ab:28:ce:3e:47:f4:22:84:33:f6:30:f2:50:56:
         b4:9d:20:77:c6:85:80:b4:25:a4:79:e9:be:29:6e:3d:df:ea:
         e0:5a:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:58:38 2025 by rpki-client