Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20383334.roa
File:                     3231322e3131352e3132352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Ue37UWe/NKtA9+0BWGK6LKE6KGaJa62kOmWM1PCm7As=
Subject key identifier:   AA:3A:DE:27:D5:06:26:9F:63:60:AB:CF:28:9E:2E:48:39:8C:18:25
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       2F66115469C41AEFBBC85425C80AA07C1EFD44BE
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 08 Oct 2025 14:49:30 +0000
ROA not before:           Wed 08 Oct 2025 14:44:30 +0000
ROA not after:            Wed 07 Oct 2026 14:49:30 +0000
asID:                     834
IP address blocks:        212.115.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 17:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:66:11:54:69:c4:1a:ef:bb:c8:54:25:c8:0a:a0:7c:1e:fd:44:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Oct  8 14:44:30 2025 GMT
            Not After : Oct  7 14:49:30 2026 GMT
        Subject: CN=AA3ADE27D506269F6360ABCF289E2E48398C1825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:e3:5a:b0:a0:b3:a7:d6:68:6f:fd:c7:87:
                    8c:54:2a:b4:95:56:d5:27:3d:e1:4d:3f:8f:e4:9e:
                    e0:b6:07:bd:c9:0b:b2:33:b8:5c:b0:1f:e5:eb:95:
                    95:a1:98:22:0a:77:6b:bb:74:fe:b7:29:db:68:89:
                    dd:c5:ff:21:ee:27:76:36:9d:fb:4e:76:55:46:90:
                    21:a6:04:1e:2a:c6:ec:7e:fd:0f:3d:43:5f:01:69:
                    96:c6:f7:c4:ce:44:21:16:f5:6a:c2:9c:f2:91:30:
                    64:7b:80:e8:78:31:27:1f:04:af:37:9f:2e:05:d0:
                    64:1a:e8:b5:13:ec:d7:a1:e9:75:69:b5:4b:5e:58:
                    9e:aa:66:73:e6:38:30:97:ee:09:71:49:92:ca:6f:
                    66:16:c8:03:2c:39:fc:c3:03:81:96:79:dd:82:98:
                    dc:07:d6:b3:19:b0:44:79:25:4e:87:01:f5:38:e2:
                    18:aa:e4:35:9c:66:12:4e:91:92:a2:bf:84:1d:92:
                    26:cf:16:13:0c:89:91:3e:8c:f9:4f:97:7b:60:21:
                    de:00:f6:6e:9b:55:bf:54:f6:c7:cf:d3:59:0a:d1:
                    f1:2d:db:29:d8:56:6d:79:37:cd:39:32:a7:b5:28:
                    ec:68:e5:83:b9:89:b4:aa:09:7b:a1:b4:d8:bf:6d:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3A:DE:27:D5:06:26:9F:63:60:AB:CF:28:9E:2E:48:39:8C:18:25
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:44:89:30:9c:62:98:97:7e:ca:98:12:da:59:b3:39:95:03:
         6e:24:7c:e1:b7:71:13:c5:ac:0a:6b:fa:e7:b2:be:f4:2a:35:
         bb:01:91:d5:36:b5:c3:b7:25:b1:93:d0:d3:53:a3:a1:42:31:
         0c:5c:fb:4f:fb:77:94:5d:44:4a:c4:d7:a5:33:36:2b:dd:23:
         a7:2b:65:76:93:f5:ac:b4:92:e0:a8:b6:9d:18:69:61:ab:93:
         93:ed:8f:41:cc:d1:39:8e:1e:c9:c3:dc:b3:0d:4c:17:09:93:
         61:83:3b:39:7a:f6:96:95:ad:43:ba:ba:e6:15:fd:44:9f:aa:
         fb:0a:43:b9:ad:d9:e9:66:05:9f:a2:19:56:f4:ef:23:99:76:
         0c:c7:5c:0f:ce:4d:3d:2b:d4:d2:e4:ba:08:9f:a0:fe:cb:87:
         89:c9:f7:eb:ae:1d:66:43:4a:fe:ed:67:7c:55:71:c9:81:3e:
         41:36:7b:ee:8b:8a:ce:9e:c6:24:9d:6c:fa:a9:3e:e7:e7:50:
         27:16:b6:3d:7d:15:41:e2:c7:e8:89:4b:8f:06:ea:cb:2e:47:
         c4:08:0b:b9:16:08:61:75:cb:01:fa:ca:6c:f1:6c:6d:27:6b:
         ff:a3:da:f4:7e:83:5f:ad:2e:01:73:4e:8c:6f:a7:95:21:d2:
         8d:50:e8:90
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUL2YRVGnEGu+7yFQlyAqgfB79RL4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUxMDA4MTQ0NDMwWhcNMjYxMDA3MTQ0OTMw
WjAzMTEwLwYDVQQDEyhBQTNBREUyN0Q1MDYyNjlGNjM2MEFCQ0YyODlFMkU0ODM5
OEMxODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL3jWrCgs6fW
aG/9x4eMVCq0lVbVJz3hTT+P5J7gtge9yQuyM7hcsB/l65WVoZgiCndru3T+tynb
aIndxf8h7id2Np37TnZVRpAhpgQeKsbsfv0PPUNfAWmWxvfEzkQhFvVqwpzykTBk
e4DoeDEnHwSvN58uBdBkGui1E+zXoel1abVLXlieqmZz5jgwl+4JcUmSym9mFsgD
LDn8wwOBlnndgpjcB9azGbBEeSVOhwH1OOIYquQ1nGYSTpGSor+EHZImzxYTDImR
Poz5T5d7YCHeAPZum1W/VPbHz9NZCtHxLdsp2FZteTfNOTKntSjsaOWDuYm0qgl7
obTYv23J+wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKo63ifVBiafY2CrzyieLkg5
jBglMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzMyMzEzMjJlMzEzMTM1MmUzMTMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUc30wDQYJKoZIhvcNAQELBQAD
ggEBAEBEiTCcYpiXfsqYEtpZszmVA24kfOG3cRPFrApr+ueyvvQqNbsBkdU2tcO3
JbGT0NNTo6FCMQxc+0/7d5RdRErE16UzNivdI6crZXaT9ay0kuCotp0YaWGrk5Pt
j0HM0TmOHsnD3LMNTBcJk2GDOzl69paVrUO6uuYV/USfqvsKQ7mt2elmBZ+iGVb0
7yOZdgzHXA/OTT0r1NLkugifoP7Lh4nJ9+uuHWZDSv7tZ3xVccmBPkE2e+6Lis6e
xiSdbPqpPufnUCcWtj19FUHix+iJS48G6ssuR8QIC7kWCGF1ywH6ymzxbG0na/+j
2vR+g1+tLgFzToxvp5Uh0o1Q6JA=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:15 2025 by rpki-client