Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e203139333138.roa
File:                     3231322e3131352e3132352e302f32342d3234203d3e203139333138.roa (raw, json)
Hash identifier:          jtqJzRfOBumB1Sl2pgjUaHCCCb00iOxNKZiaMGM+LDs=
Subject key identifier:   18:3C:77:F9:04:87:03:B2:B9:4A:43:5F:A9:BB:B6:14:8F:ED:A8:CD
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       13D3C25CCC5BF9F18CE0133AB426607550FFAF47
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e203139333138.roa
Signing time:             Wed 25 Jun 2025 00:19:55 +0000
ROA not before:           Wed 25 Jun 2025 00:14:55 +0000
ROA not after:            Wed 24 Jun 2026 00:19:55 +0000
asID:                     19318
IP address blocks:        212.115.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d3:c2:5c:cc:5b:f9:f1:8c:e0:13:3a:b4:26:60:75:50:ff:af:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 25 00:14:55 2025 GMT
            Not After : Jun 24 00:19:55 2026 GMT
        Subject: CN=183C77F9048703B2B94A435FA9BBB6148FEDA8CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:2e:75:d2:3f:14:56:91:a3:b9:d5:48:2a:
                    26:74:50:39:a0:45:48:56:be:4e:e1:99:4f:b5:e1:
                    03:1f:d5:d5:2e:11:7c:ec:1f:5c:75:3e:fe:ea:e3:
                    08:fe:5f:79:40:be:b8:1f:b3:bc:49:f3:aa:b5:e3:
                    39:09:01:ff:fb:9d:b0:e8:0b:48:b1:f6:cd:10:ff:
                    2c:e9:0b:36:57:86:e7:23:06:6a:65:9a:38:f3:ae:
                    e0:5b:a7:9f:39:ba:99:cf:ce:08:da:71:ce:b4:62:
                    98:11:7d:30:3f:0e:98:12:1e:8d:35:64:9a:5b:0b:
                    65:53:50:52:f4:e3:cc:23:e2:d9:99:ed:25:05:17:
                    90:b3:6a:d0:c6:67:08:18:20:0b:df:15:78:bf:43:
                    87:e0:81:b6:29:d0:9d:f9:a9:28:b3:64:c7:f2:40:
                    33:17:ad:65:f7:12:cd:b3:c3:77:a8:10:48:cd:3e:
                    ed:78:bc:7b:be:c4:ed:29:94:73:e8:8b:71:da:11:
                    22:b3:21:e7:66:65:69:3a:2f:74:ad:3c:69:63:8b:
                    f9:52:a2:2e:5e:38:50:e8:4d:ea:4f:cf:7b:1a:b4:
                    99:78:03:d2:1d:fc:33:c3:92:4a:cb:db:47:d9:4a:
                    9c:2d:0f:0c:30:82:56:83:b0:6c:3f:52:9d:ce:9c:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:77:F9:04:87:03:B2:B9:4A:43:5F:A9:BB:B6:14:8F:ED:A8:CD
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:75:52:c6:fc:34:6c:c9:16:77:d4:7c:bd:9c:1c:6b:52:
         c0:ed:5a:a7:3d:04:62:1c:a8:c8:6e:70:cc:57:85:38:a2:03:
         2f:b0:31:d8:de:d6:32:8f:6c:78:58:79:ab:26:e3:38:67:23:
         47:00:05:e0:ba:86:c1:85:3d:a6:d3:d3:15:df:ad:38:24:cd:
         95:db:a7:99:e3:9b:22:d7:be:ed:48:d7:8f:18:75:86:85:23:
         7d:ce:db:76:c4:59:4c:30:5a:51:95:65:0f:43:80:ae:cb:44:
         09:e0:45:4f:9b:16:70:54:a5:8d:8b:c0:d3:3f:96:df:1e:a8:
         98:a3:2f:1d:66:bb:54:06:8a:4c:d3:dc:1a:5d:cf:0d:f5:5f:
         36:d1:e8:00:72:9f:95:46:d7:67:51:70:b2:33:3e:19:70:2d:
         5d:f9:ef:f3:89:93:97:c3:75:54:42:04:50:d4:8d:fc:cc:cb:
         b9:da:19:7e:b6:fe:0b:88:8a:18:a5:8b:08:7a:20:66:df:45:
         69:2c:54:54:79:55:48:ad:73:c9:6c:8d:f0:47:1c:2b:16:03:
         09:b2:13:79:2c:e6:e8:3e:1d:2c:7b:d8:f6:09:50:cf:b5:97:
         5b:6a:45:68:68:3a:7f:52:c0:72:b3:19:b0:d7:fe:68:78:45:
         e7:d6:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:12:44 2025 by rpki-client