Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203430383132.roa
File:                     3231322e3131352e3132372e302f32342d3234203d3e203430383132.roa (raw, json)
Hash identifier:          tp6go4JwhznHkgpqMT6JwARvSlwooIX23Wcal5CE4Dc=
Subject key identifier:   D4:3C:C3:1A:A0:41:AF:BA:9B:17:2A:67:AB:6A:3B:65:DE:5C:E4:D1
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       095536A13C6E8597A45A6DEFDEC40A22452D6D1A
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203430383132.roa
Signing time:             Thu 26 Jun 2025 18:59:20 +0000
ROA not before:           Thu 26 Jun 2025 18:54:20 +0000
ROA not after:            Thu 25 Jun 2026 18:59:20 +0000
asID:                     40812
IP address blocks:        212.115.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:55:36:a1:3c:6e:85:97:a4:5a:6d:ef:de:c4:0a:22:45:2d:6d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 26 18:54:20 2025 GMT
            Not After : Jun 25 18:59:20 2026 GMT
        Subject: CN=D43CC31AA041AFBA9B172A67AB6A3B65DE5CE4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:69:e0:cf:7f:17:64:57:dd:6e:1d:be:d1:
                    a1:fb:62:ed:1e:6e:65:41:27:11:84:64:3f:1a:3f:
                    2c:bd:a1:47:b0:a8:21:6e:5c:2e:ce:c1:69:b9:dd:
                    41:b4:77:59:50:63:70:01:fe:29:4d:57:b9:d7:a8:
                    73:87:f9:d8:aa:0e:5f:d8:55:28:9d:29:48:f3:e5:
                    4d:2d:b4:ec:eb:12:11:4c:69:79:8f:bf:6e:b1:4a:
                    3c:51:bd:45:61:94:98:08:e6:ab:c0:eb:47:8e:3a:
                    e5:3d:ee:90:d9:19:d8:d4:35:17:9a:89:3f:d9:d7:
                    08:f0:88:b5:99:6b:cc:18:8b:74:1f:95:2b:36:80:
                    ee:5c:bd:75:d1:73:ab:0e:46:33:b0:6e:50:47:b8:
                    a0:e6:6f:48:29:7e:1f:14:75:e0:c1:5c:fa:ff:74:
                    09:1a:e2:cc:81:62:00:41:b3:f4:a0:ad:fc:09:99:
                    0e:cc:33:9a:16:0f:02:7c:05:32:03:5e:81:2f:73:
                    89:11:e8:8e:45:e4:72:8c:52:c5:8e:c4:90:aa:29:
                    62:c3:1c:23:cb:44:fb:49:15:65:2f:64:90:ec:10:
                    d8:3a:65:db:b5:1f:7f:53:64:e7:3c:79:c6:58:dd:
                    48:89:89:28:db:98:10:0c:ab:47:84:91:5b:ab:51:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3C:C3:1A:A0:41:AF:BA:9B:17:2A:67:AB:6A:3B:65:DE:5C:E4:D1
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132372e302f32342d3234203d3e203430383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:74:21:0c:71:f0:f3:41:12:e4:30:d0:4e:28:1a:12:e5:8b:
         98:39:24:60:69:21:4c:75:40:a1:f7:d3:24:39:3c:4a:13:28:
         5a:c0:1d:60:80:8f:17:67:a8:23:90:64:b2:ca:f6:e2:33:c6:
         de:0f:2f:62:d3:2e:53:b6:e0:d4:18:54:39:73:41:9e:f9:b5:
         90:26:51:3f:86:e4:46:2f:52:2f:ed:2b:fd:c6:5c:84:11:55:
         3d:6e:67:63:55:bf:dc:a4:bd:8a:40:5b:6a:0a:f9:ff:80:48:
         e1:6a:65:3f:ba:b3:ab:29:ad:60:60:c0:65:e8:07:62:f6:ad:
         ca:7c:4f:4f:a6:ef:2c:40:21:60:d2:f1:0b:8c:99:69:ce:b6:
         de:3a:10:37:5e:bf:54:28:a1:85:1f:bb:42:95:e4:14:1f:39:
         5a:92:36:f7:bf:ec:36:d7:4a:ff:d7:ad:4e:1b:8e:b8:15:e1:
         1e:8e:1a:6b:87:70:54:c7:b3:54:af:e8:5a:1f:ef:74:ad:e0:
         9d:63:98:a6:79:ea:ed:06:aa:0a:eb:fc:31:d8:83:45:b6:f5:
         d0:c0:78:83:cd:72:62:a8:b5:20:3e:68:70:9c:18:39:64:bb:
         12:d2:62:94:cf:03:ec:0c:fe:81:93:1f:19:8a:41:ad:d5:60:
         a9:7d:7a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:24:07 2025 by rpki-client