Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203230343733.roa
File:                     3231322e3131352e3132372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          7kNZ4juXfyAfpN7eFeRsqwQBeS7Ir7BISNY3KvlxDVs=
Subject key identifier:   7D:9A:42:FB:59:4E:1F:B3:2E:A8:CB:B4:37:59:3A:AA:1F:BE:B6:6D
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       534FE3EEAC111D69D171B1A2F70B41E4EF3E2FE2
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 23 Apr 2025 05:39:20 +0000
ROA not before:           Wed 23 Apr 2025 05:34:20 +0000
ROA not after:            Wed 22 Apr 2026 05:39:20 +0000
asID:                     20473
IP address blocks:        212.115.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4f:e3:ee:ac:11:1d:69:d1:71:b1:a2:f7:0b:41:e4:ef:3e:2f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:20 2025 GMT
            Not After : Apr 22 05:39:20 2026 GMT
        Subject: CN=7D9A42FB594E1FB32EA8CBB437593AAA1FBEB66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:33:f4:aa:2a:0b:eb:fc:6d:95:3b:ad:4f:
                    d6:94:55:71:74:90:1f:d0:f0:e2:22:91:b3:73:95:
                    60:ac:a9:cd:4b:22:e9:f2:59:dd:8b:9a:92:2c:83:
                    b4:49:75:df:36:9f:2f:b4:19:89:ed:e9:eb:39:ef:
                    f0:70:d8:20:59:44:34:e1:a2:9e:16:9a:70:b3:82:
                    52:17:66:9c:5d:22:a8:75:ff:0b:b3:e1:d3:02:33:
                    9c:81:0e:6d:95:53:8b:94:79:6c:62:8b:ec:bf:ea:
                    51:32:ee:a5:20:17:a0:c2:a2:9a:7f:96:91:f8:10:
                    41:83:45:ac:c9:31:1d:ec:21:44:62:bb:3e:25:bd:
                    04:8b:0c:80:93:0e:59:3c:2d:f8:c0:34:e5:f3:e8:
                    6c:c1:65:62:ae:9b:59:a2:54:7f:e6:46:df:fe:dd:
                    fc:d8:04:ca:c4:ef:3c:d9:11:98:a9:2b:01:53:bd:
                    a7:d4:bb:41:72:5d:ea:1d:fd:55:4c:23:7a:f1:96:
                    66:f2:72:26:08:24:7b:60:17:da:21:cc:94:40:60:
                    70:47:ab:99:27:e2:8b:e7:fc:cf:b7:20:b4:29:cd:
                    81:6d:0d:e0:3e:60:3d:9a:1c:96:91:e1:74:c4:86:
                    cb:72:89:d3:b1:d4:94:de:ef:a0:63:90:2f:6e:be:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9A:42:FB:59:4E:1F:B3:2E:A8:CB:B4:37:59:3A:AA:1F:BE:B6:6D
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:aa:fb:88:96:cf:42:f2:36:b9:f4:80:a9:9c:ce:95:48:84:
         f0:bb:85:51:5e:78:f4:0f:65:fe:9a:9f:d7:45:51:3e:1c:63:
         cf:6b:08:41:99:0a:df:60:d1:d1:6c:f5:09:dc:db:d4:13:39:
         73:5e:90:45:2c:01:36:7b:5e:fb:5c:05:f3:9a:d7:57:ab:bf:
         84:c0:fd:ef:03:a2:b3:5b:64:9c:e0:97:5a:88:f0:23:65:b2:
         e7:95:e2:3b:d3:b1:8d:56:66:83:93:28:de:12:7e:cf:08:0c:
         75:81:14:2a:8d:1a:32:dd:5f:7d:08:06:c4:f7:ab:96:4b:6d:
         e5:bd:b3:a6:38:9c:0a:8c:69:8d:4c:cc:fa:20:31:e8:d0:66:
         ee:88:48:31:6b:89:62:29:64:6b:4a:01:0f:e8:f8:2b:c3:58:
         71:19:c9:c8:d3:6b:0d:b9:b0:d5:4b:22:80:99:b5:88:fe:ce:
         19:46:dc:9f:b6:a5:67:5c:c0:a6:63:bf:3f:f1:d4:1f:78:80:
         00:58:17:73:85:c9:fe:1e:5c:f4:aa:fe:2c:3f:66:a8:c4:81:
         86:2e:56:f8:bb:81:fb:07:f7:f3:58:c6:13:92:cf:7f:39:01:
         4e:5b:2a:55:b4:bc:3d:0e:25:f9:8e:7e:d4:a9:86:f5:35:dc:
         57:1e:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:39:48 2025 by rpki-client