Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e2036303739.roa
File:                     3231322e3131352e3132362e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          trnftplTP/BLlF1aM+zps/IzdcEeW0kGarXtAK6p0ho=
Subject key identifier:   DD:9D:63:AB:90:9A:50:77:40:0D:31:3A:BC:E3:66:1D:C3:58:46:7F
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       58E8D30B870C0AEBB25F71A7F241D0E47331FAB7
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e2036303739.roa
Signing time:             Fri 20 Mar 2026 04:50:47 +0000
ROA not before:           Fri 20 Mar 2026 04:45:47 +0000
ROA not after:            Fri 19 Mar 2027 04:50:47 +0000
asID:                     6079
IP address blocks:        212.115.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e8:d3:0b:87:0c:0a:eb:b2:5f:71:a7:f2:41:d0:e4:73:31:fa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar 20 04:45:47 2026 GMT
            Not After : Mar 19 04:50:47 2027 GMT
        Subject: CN=DD9D63AB909A5077400D313ABCE3661DC358467F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:45:64:24:f0:53:8e:36:d4:30:e0:72:96:
                    f2:bc:82:f5:45:47:8e:bf:c3:21:c0:48:28:16:cb:
                    98:48:0e:50:e9:33:f6:ef:01:71:9b:7f:7f:c2:46:
                    22:09:a4:96:2b:8d:a3:14:dd:ea:00:04:c1:b0:ae:
                    6b:28:73:c7:e1:c8:d6:01:a9:b6:c7:c9:f3:5e:2a:
                    68:59:e3:62:9f:83:06:d8:be:ef:a4:66:21:c9:3d:
                    e7:f7:09:da:d5:7e:90:8a:b8:23:d9:9b:8c:2f:70:
                    6e:cf:ae:df:18:0b:48:bf:42:9d:18:89:f3:4a:96:
                    75:81:39:43:50:f2:a5:2c:4b:ba:14:0e:4c:1d:1e:
                    8f:da:e0:34:9f:0d:3a:80:b7:62:8f:b6:31:53:55:
                    33:93:a8:88:c0:d9:ca:0e:b0:93:79:e9:23:e6:43:
                    e3:07:74:32:e2:7f:04:99:8d:df:e5:25:d0:e5:c2:
                    38:af:ee:e1:3c:04:dc:96:1e:45:3e:bf:46:f1:22:
                    a8:f6:a3:74:33:76:2d:5d:2b:d6:29:1f:6b:15:13:
                    a2:a1:dc:52:7e:e9:79:ca:0c:9d:7a:67:56:a2:de:
                    8d:a7:a7:6f:07:92:21:6b:fe:33:46:4b:72:04:ab:
                    27:bf:ee:bb:e4:0a:9c:af:24:39:87:b5:7f:31:5a:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9D:63:AB:90:9A:50:77:40:0D:31:3A:BC:E3:66:1D:C3:58:46:7F
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:60:94:28:ed:41:94:a0:c8:12:90:75:78:3c:94:6b:4d:38:
         19:05:7a:88:19:fe:b3:e2:e0:03:92:b6:28:1c:a4:99:67:86:
         91:5c:1a:6f:49:16:20:1b:eb:87:8b:ec:3c:2a:f9:33:b6:91:
         95:b7:1d:5e:d3:a9:8a:59:14:30:6d:eb:86:ef:9a:91:f8:a0:
         fe:ad:6c:06:33:d5:03:04:b8:8b:1f:4c:30:75:18:e1:74:bd:
         99:89:b2:e4:65:b1:b2:5d:72:c1:44:b9:18:25:4f:b8:41:a7:
         c7:53:ad:63:d6:b0:28:ba:cb:58:b8:10:c9:b3:e4:b6:c7:01:
         1e:af:c4:f6:10:99:29:de:95:b4:e4:2d:f8:10:e8:e5:eb:c4:
         e4:0a:d2:8d:2f:43:4d:2f:c3:7f:05:6f:2b:02:af:5b:95:a4:
         ad:c9:9a:64:3b:21:3b:bf:ee:9c:25:d5:5c:90:0d:98:23:52:
         a3:1a:2c:9a:41:77:bd:75:df:20:88:3b:16:5f:60:19:b5:4c:
         b1:02:2d:d1:36:3a:a3:8d:c9:23:5a:ff:5a:53:eb:5e:f5:b3:
         5f:20:86:96:00:ca:9d:48:27:de:39:ff:ba:af:7d:96:42:aa:
         0e:8a:b7:12:68:25:23:bb:53:e2:64:e9:9d:cc:40:31:46:e5:
         21:68:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:03:43 2026 by rpki-client