Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20383334.roa
File:                     3231322e3131352e3132352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          +QP17VVCwBzsf1VhI7JSHJqMU4f+sWb3PnnKHrUFNzE=
Subject key identifier:   4E:66:E9:B1:40:EC:37:17:24:E2:A9:D7:4E:3C:2C:86:73:18:15:C3
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       13FA100C04A8B4ED7B4739D03E7C249DC0ED3384
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 21 May 2025 00:00:24 +0000
ROA not before:           Tue 20 May 2025 23:55:24 +0000
ROA not after:            Wed 20 May 2026 00:00:24 +0000
asID:                     834
IP address blocks:        212.115.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fa:10:0c:04:a8:b4:ed:7b:47:39:d0:3e:7c:24:9d:c0:ed:33:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: May 20 23:55:24 2025 GMT
            Not After : May 20 00:00:24 2026 GMT
        Subject: CN=4E66E9B140EC371724E2A9D74E3C2C86731815C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:50:8e:b3:c5:5f:ad:72:27:75:02:d4:8e:
                    e7:39:84:c1:9e:91:ca:6d:d1:c2:ac:d2:ca:cf:00:
                    91:79:24:c1:ed:fc:e1:4f:5e:c1:75:3c:43:48:94:
                    61:f6:47:f6:28:09:cf:5b:d1:3a:93:b6:f8:d5:d6:
                    64:44:14:ca:e0:e6:09:79:4b:34:43:47:e6:14:39:
                    d7:ff:c2:20:61:7e:81:b7:1c:73:ba:4c:ca:b7:f1:
                    3f:84:ab:0b:ad:bb:bf:6b:ee:ec:b1:3e:24:f5:6c:
                    99:29:48:ff:bd:06:be:b3:17:11:e1:4e:6b:d7:b0:
                    d2:14:62:e9:a3:f4:73:c7:9b:6a:27:9c:52:c7:09:
                    86:87:34:e3:fc:8f:52:bf:31:78:ee:d6:e4:c2:03:
                    af:03:cf:cc:05:62:df:ba:ed:81:43:67:ed:d6:d8:
                    24:26:4d:1a:67:05:3a:ef:77:8a:cd:00:e3:52:b6:
                    47:fd:23:65:a0:bf:3d:8e:c1:f9:62:a2:bd:fc:cb:
                    7d:ab:0a:54:78:a1:39:14:f0:96:97:35:62:e7:52:
                    d6:29:c6:40:cf:35:f4:7c:ff:2b:22:6c:24:53:47:
                    7e:f2:1b:49:f3:86:cf:b2:9c:6c:89:dc:f6:f1:76:
                    ab:7c:d6:c5:e3:f7:ef:a1:f8:28:c3:44:82:79:a1:
                    24:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:66:E9:B1:40:EC:37:17:24:E2:A9:D7:4E:3C:2C:86:73:18:15:C3
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:ab:54:d9:56:06:64:de:b3:69:c4:da:6b:11:7f:28:b0:
         05:50:ba:ff:3b:bd:49:3e:09:66:7c:79:5c:e8:7d:8c:7a:06:
         66:fa:e3:d8:76:16:4e:23:c3:7a:e0:95:26:95:d0:ba:8f:da:
         2d:55:73:be:ff:50:a6:28:6f:e0:ff:17:cd:71:b0:11:70:6a:
         c5:68:f6:66:43:8f:4e:ec:1f:a8:70:fc:06:76:41:f1:00:ba:
         15:d5:ba:8f:5c:25:8e:27:40:68:0a:fb:46:6e:2c:af:bd:4c:
         97:54:ce:16:22:ba:29:73:4d:a8:d1:f4:26:ce:d1:dd:88:20:
         29:99:9f:a3:10:f9:f3:23:a1:00:22:df:58:2c:17:91:d0:71:
         24:b2:1a:8e:d6:c7:ac:d8:ae:28:3c:dd:1c:c1:1f:5b:f1:03:
         98:94:8d:2c:3f:3d:e3:e9:4b:05:d0:17:ac:05:4f:d8:c9:98:
         4c:0d:0e:c7:6f:d1:bb:56:3c:69:20:a7:64:62:bf:d0:20:a2:
         74:f9:bd:b1:05:e7:cf:a7:3e:b8:95:74:35:b4:e3:30:73:c4:
         00:52:83:67:1e:e8:40:a1:b6:a0:fc:3f:6c:1a:1f:1a:2b:a8:
         a2:dc:c2:7f:7a:b8:30:48:fb:ba:8e:e5:d5:d5:bf:eb:d8:93:
         00:52:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:15:15 2025 by rpki-client