Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132342e302f32342d3234203d3e20383334.roa
File:                     3231322e3131352e3132342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          SCtTIdjAMUb31tyYwN39KDulRR/E9qy8jw2+TgJUlsU=
Subject key identifier:   A4:E2:27:12:23:5B:B2:F0:C7:BF:17:32:C8:98:F4:B6:13:3E:78:45
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       14520C5AE5AEBF61B38793B611A09A10915858DD
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132342e302f32342d3234203d3e20383334.roa
Signing time:             Sun 11 May 2025 00:01:23 +0000
ROA not before:           Sat 10 May 2025 23:56:23 +0000
ROA not after:            Sun 10 May 2026 00:01:23 +0000
asID:                     834
IP address blocks:        212.115.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 23:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:52:0c:5a:e5:ae:bf:61:b3:87:93:b6:11:a0:9a:10:91:58:58:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: May 10 23:56:23 2025 GMT
            Not After : May 10 00:01:23 2026 GMT
        Subject: CN=A4E22712235BB2F0C7BF1732C898F4B6133E7845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:ef:04:9c:d3:e5:08:6b:ec:f0:a2:01:0e:
                    12:ec:07:57:ee:e1:95:cc:6c:ab:92:0c:94:f4:c0:
                    bb:46:2f:f2:6c:37:46:1f:b7:c9:0b:27:42:e6:1c:
                    f5:8f:7b:6c:71:a0:c4:e3:7f:16:72:06:99:1e:30:
                    82:84:51:96:90:82:cf:21:79:c5:6d:da:cd:1f:b7:
                    5c:dc:60:41:f9:f0:69:45:02:61:e1:5d:3d:4e:54:
                    5b:a6:6f:40:6d:c1:a9:b6:d8:d5:a4:6e:c4:fb:43:
                    ab:e2:d9:24:2f:e0:17:55:d4:a7:d7:91:4c:2d:41:
                    15:46:ef:99:10:a1:81:fb:77:ae:35:ff:eb:1c:94:
                    2c:64:2d:2d:9a:1d:83:17:42:c7:ae:0b:16:15:15:
                    3e:05:ff:02:18:67:58:0b:95:d3:81:ce:0a:0f:39:
                    dd:c7:48:cb:ef:95:4b:25:88:79:7b:e3:9d:75:a6:
                    6f:f5:b9:c6:1a:cf:7b:b5:fc:42:fd:70:87:bd:b9:
                    f1:c6:4c:ae:09:95:a1:5b:4b:fa:7e:29:58:79:e3:
                    02:77:12:31:1c:1c:99:ed:56:5d:c2:b8:e1:2f:cb:
                    2d:4b:bb:60:5e:66:b6:63:f5:30:2f:cd:72:a6:16:
                    5c:6c:07:c9:35:b5:60:41:40:ae:76:3b:0c:26:3f:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E2:27:12:23:5B:B2:F0:C7:BF:17:32:C8:98:F4:B6:13:3E:78:45
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:81:de:f9:e6:30:d0:81:a1:4a:e5:21:ab:2a:36:f9:4b:d2:
         46:9c:b1:d9:46:10:e8:ba:02:d9:5f:bd:01:eb:cf:b3:bd:44:
         f8:27:cb:73:80:67:87:fb:5b:62:25:19:32:ca:5e:80:97:88:
         03:8b:9c:d5:0e:8e:35:47:9a:76:b3:e3:74:b1:8a:e9:a0:55:
         3a:ed:da:b4:62:ec:60:f6:7f:f1:a3:5b:8e:e1:85:50:e8:08:
         32:d4:80:68:26:1e:2c:4c:24:fb:98:71:5e:b0:cf:b3:f4:15:
         45:82:bd:f6:4d:f1:9d:d9:f8:04:99:1d:ab:90:be:31:ec:f8:
         3a:86:64:24:7b:ca:91:1f:ad:f3:03:b6:62:b6:b9:6b:02:6d:
         19:49:e0:5c:a4:5e:17:c0:c0:ea:e2:7c:ce:5c:55:b6:5e:5f:
         bb:82:3c:d8:0e:fa:c4:55:68:a9:8e:c4:6d:7f:b2:50:74:98:
         58:e9:09:0c:bc:07:6d:78:3d:27:cb:cc:b2:4d:3c:43:5d:d4:
         bf:1b:30:b5:5e:42:d2:b3:eb:9a:88:3a:9d:86:7d:bb:44:48:
         51:f0:99:59:b8:9d:ca:c1:26:d3:40:c4:dc:06:aa:cb:64:46:
         b4:7d:5e:89:8b:e2:0d:cf:7a:81:90:de:ca:7b:8e:16:23:20:
         6b:0a:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:08:18 2025 by rpki-client