Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343031383338.roa
File:                     3231322e3131352e3132362e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          JKA0ilpYILI4OP/dE0MUIB0bV5lnw2Z+0HmD4fL5FcY=
Subject key identifier:   0E:99:16:90:07:E7:5E:2E:A5:1B:9C:AC:3B:72:82:CC:27:F1:25:C2
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       1DCB522C4D1E511C577D0C9CD10F582228F0CBB3
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343031383338.roa
Signing time:             Sun 20 Jul 2025 04:40:33 +0000
ROA not before:           Sun 20 Jul 2025 04:35:33 +0000
ROA not after:            Sun 19 Jul 2026 04:40:33 +0000
asID:                     401838
IP address blocks:        212.115.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 13:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cb:52:2c:4d:1e:51:1c:57:7d:0c:9c:d1:0f:58:22:28:f0:cb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul 20 04:35:33 2025 GMT
            Not After : Jul 19 04:40:33 2026 GMT
        Subject: CN=0E99169007E75E2EA51B9CAC3B7282CC27F125C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:cc:fa:2d:0a:fb:e5:77:15:f9:09:e3:37:
                    6d:ee:f0:1d:f8:d2:06:3a:a7:92:4c:88:13:9e:a9:
                    7b:a6:00:04:c0:1a:bd:a7:c9:17:58:89:2f:0c:0d:
                    2b:9a:81:3a:62:b4:01:4f:6a:d6:60:4f:5f:f0:32:
                    e6:9c:c5:52:dc:23:0a:29:62:e0:55:42:f4:10:a5:
                    c8:8e:28:60:92:19:9c:46:68:6e:33:43:66:9f:dc:
                    c8:81:2b:7d:0e:6d:9c:0e:df:02:b5:b1:13:6b:90:
                    34:d2:fc:a2:41:57:2b:da:26:36:5b:2b:97:81:89:
                    88:77:94:5c:b9:23:36:d4:53:16:47:f7:be:6b:6f:
                    91:6c:89:57:a5:be:5f:81:92:06:79:63:ef:07:8c:
                    4d:a3:55:49:92:cc:4b:a3:86:75:cc:9a:9e:d5:9e:
                    6f:4d:a5:02:d8:67:6d:d3:d5:52:d3:a7:c0:48:50:
                    63:2b:9f:86:f2:ff:fb:e0:73:84:c7:28:ae:dd:65:
                    dd:92:fe:5f:80:9b:e9:af:d6:8e:89:9c:6d:ea:fe:
                    09:48:6f:79:10:41:99:99:30:4c:06:e2:57:8e:69:
                    01:39:92:b2:73:98:cb:38:0e:2c:b7:83:d9:63:80:
                    18:da:66:0e:b8:c6:30:b8:7f:c5:94:71:0c:8b:03:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:99:16:90:07:E7:5E:2E:A5:1B:9C:AC:3B:72:82:CC:27:F1:25:C2
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:48:41:04:ab:d5:7f:d3:0a:9c:39:76:93:69:b1:d4:af:91:
         b0:f9:ef:ab:f6:8e:09:34:a1:31:09:5b:c0:19:4a:38:a7:3f:
         bf:11:96:e6:c6:31:a7:57:b6:bd:c7:50:69:25:d4:50:b1:ef:
         9f:19:c2:ff:d7:7d:d8:d6:9e:f5:14:4f:d4:ae:12:ec:68:fe:
         82:e8:7a:0e:9c:48:61:b7:c5:b1:f2:be:d4:32:80:81:cc:4c:
         e0:fe:43:51:f8:ce:dc:40:72:b3:c7:ea:13:d9:d6:8d:ff:3b:
         bf:d0:5d:a8:1f:80:1f:24:78:48:6c:59:0b:75:98:e3:bf:19:
         7f:0a:97:01:a2:d9:f4:39:b7:b9:e5:ef:50:28:35:b0:e2:15:
         dd:f8:d9:e9:d9:83:99:00:de:4a:bd:48:66:fa:a8:c9:82:ee:
         82:80:ba:cc:62:21:43:fc:1d:87:0a:3a:2f:ed:92:4a:cc:30:
         ad:37:4e:e5:c1:51:de:11:65:8f:d9:f9:96:41:11:08:f7:78:
         03:fe:f9:d3:ff:32:af:78:41:b8:fa:e0:ee:48:90:08:a7:ca:
         2f:bf:ca:62:2d:d0:c2:80:c6:58:78:da:44:82:b6:0a:32:c1:
         d3:73:d6:79:b9:a3:fd:a8:22:9e:bb:9d:79:f8:cc:0e:d6:5e:
         2f:dc:22:09
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUHctSLE0eURxXfQyc0Q9YIijwy7MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjUwNzIwMDQzNTMzWhcNMjYwNzE5MDQ0MDMz
WjAzMTEwLwYDVQQDEygwRTk5MTY5MDA3RTc1RTJFQTUxQjlDQUMzQjcyODJDQzI3
RjEyNUMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMbM+i0K++V3
FfkJ4zdt7vAd+NIGOqeSTIgTnql7pgAEwBq9p8kXWIkvDA0rmoE6YrQBT2rWYE9f
8DLmnMVS3CMKKWLgVUL0EKXIjihgkhmcRmhuM0Nmn9zIgSt9Dm2cDt8CtbETa5A0
0vyiQVcr2iY2WyuXgYmId5RcuSM21FMWR/e+a2+RbIlXpb5fgZIGeWPvB4xNo1VJ
ksxLo4Z1zJqe1Z5vTaUC2Gdt09VS06fASFBjK5+G8v/74HOExyiu3WXdkv5fgJvp
r9aOiZxt6v4JSG95EEGZmTBMBuJXjmkBOZKyc5jLOA4st4PZY4AY2mYOuMYwuH/F
lHEMiwMbSwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFA6ZFpAH514upRucrDtygswn
8SXCMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzMyMzEzMjJlMzEzMTM1MmUzMTMyMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDMwMzEzODMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUc34wDQYJKoZIhvcN
AQELBQADggEBAJJIQQSr1X/TCpw5dpNpsdSvkbD576v2jgk0oTEJW8AZSjinP78R
lubGMadXtr3HUGkl1FCx758Zwv/XfdjWnvUUT9SuEuxo/oLoeg6cSGG3xbHyvtQy
gIHMTOD+Q1H4ztxAcrPH6hPZ1o3/O7/QXagfgB8keEhsWQt1mOO/GX8KlwGi2fQ5
t7nl71AoNbDiFd342enZg5kA3kq9SGb6qMmC7oKAusxiIUP8HYcKOi/tkkrMMK03
TuXBUd4RZY/Z+ZZBEQj3eAP++dP/Mq94Qbj64O5IkAinyi+/ymIt0MKAxlh42kSC
tgoywdNz1nm5o/2oIp67nXn4zA7WXi/cIgk=
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:48:34 2025 by rpki-client