Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343032323336.roa
File:                     3231322e3131352e3132362e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier:          YTa2tgRduEz4wVzDE963Xln+1b9BpxuaR0g10b+yiyk=
Subject key identifier:   E9:B8:DA:9D:3B:E9:DB:00:E8:ED:83:E0:12:F2:2C:85:21:84:40:EB
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       53A0A7B638F965F3A6C94AE578609E57129F3607
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343032323336.roa
Signing time:             Wed 04 Mar 2026 17:07:31 +0000
ROA not before:           Wed 04 Mar 2026 17:02:31 +0000
ROA not after:            Wed 03 Mar 2027 17:07:31 +0000
asID:                     402236
IP address blocks:        212.115.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Mar 2026 17:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a0:a7:b6:38:f9:65:f3:a6:c9:4a:e5:78:60:9e:57:12:9f:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar  4 17:02:31 2026 GMT
            Not After : Mar  3 17:07:31 2027 GMT
        Subject: CN=E9B8DA9D3BE9DB00E8ED83E012F22C85218440EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:8e:8e:dc:06:b5:82:8e:89:74:ea:36:bc:
                    e7:05:72:ab:b8:18:1f:2f:bc:02:12:79:bc:f5:7b:
                    9d:f5:69:40:8a:ee:64:0f:74:d8:d2:e1:8a:65:3b:
                    73:3e:14:48:26:bd:18:9a:da:22:aa:05:1e:f3:61:
                    31:83:af:f9:98:a5:c9:e5:36:50:aa:0d:f8:65:9a:
                    f6:e8:d3:4c:fb:f4:c4:29:d1:14:59:6e:71:fa:fe:
                    2c:42:f2:1a:28:c0:7b:1c:47:d4:14:e1:1d:8c:c4:
                    d6:50:ad:22:6d:06:38:76:51:22:00:0b:c6:6b:56:
                    80:1c:19:6f:a7:20:4b:93:28:62:79:ca:34:40:10:
                    ce:16:9b:6f:5b:4d:51:5c:b1:85:0b:c4:a6:60:a1:
                    2a:d8:b6:b7:65:2b:db:28:9d:f3:64:65:8f:7a:f0:
                    ec:2c:61:c4:5e:d5:4a:3d:9e:19:86:60:1d:35:da:
                    58:48:92:ec:c1:c0:58:13:92:49:89:09:c3:55:c2:
                    2d:b9:15:06:43:ac:5c:22:6f:e2:91:dd:ec:c1:f6:
                    af:c8:5e:f7:0e:32:4b:69:98:b7:c0:73:0a:d4:58:
                    6c:51:18:b9:43:5a:cb:76:1c:20:b2:30:85:61:ed:
                    90:3a:c9:6e:b3:4c:c3:f3:d3:20:05:99:37:9c:88:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:DA:9D:3B:E9:DB:00:E8:ED:83:E0:12:F2:2C:85:21:84:40:EB
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343032323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:56:20:9c:51:c7:00:25:2a:d3:97:db:f1:4f:5a:a6:41:1f:
         76:2c:96:b1:7b:55:e5:08:6c:2b:67:5f:ae:b5:8e:77:2a:cb:
         2e:34:19:d5:50:76:1c:f4:84:49:d9:9c:fc:f2:c2:30:25:b9:
         db:55:e3:b0:44:0e:c1:9a:cf:03:a9:d8:84:07:68:38:9f:bb:
         ad:13:a6:21:03:d0:88:b2:5f:c4:24:9d:e8:19:ae:96:a9:f4:
         08:50:20:05:be:62:5a:fa:7a:cf:92:8a:4a:b9:ba:9f:96:49:
         77:66:8e:f6:fc:8c:4e:60:8f:f9:92:67:93:24:a8:46:f3:93:
         f5:de:66:aa:d2:f0:82:48:a5:a4:d3:8b:74:ba:23:99:c8:22:
         4d:9e:43:c2:dc:d3:a7:04:ac:79:ba:0b:2c:41:d1:51:bb:f8:
         e9:6a:c3:22:ad:13:69:e0:99:85:c7:5c:44:01:7b:03:65:06:
         24:fa:d3:2b:81:71:fc:68:34:34:25:de:f3:5d:c5:d6:aa:17:
         c3:ea:53:f7:e1:ea:3d:17:ff:6d:7b:2e:69:73:f5:9d:2b:bb:
         26:8b:cc:48:38:4b:71:84:be:26:59:36:e2:18:9b:7a:bc:24:
         b9:dc:5f:ec:29:2d:c4:41:45:1b:1b:4b:7d:21:3c:a1:86:f5:
         bc:04:e0:ac
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUU6Cntjj5ZfOmyUrleGCeVxKfNgcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjYwMzA0MTcwMjMxWhcNMjcwMzAzMTcwNzMx
WjAzMTEwLwYDVQQDEyhFOUI4REE5RDNCRTlEQjAwRThFRDgzRTAxMkYyMkM4NTIx
ODQ0MEVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8iOjtwGtYKO
iXTqNrznBXKruBgfL7wCEnm89Xud9WlAiu5kD3TY0uGKZTtzPhRIJr0YmtoiqgUe
82Exg6/5mKXJ5TZQqg34ZZr26NNM+/TEKdEUWW5x+v4sQvIaKMB7HEfUFOEdjMTW
UK0ibQY4dlEiAAvGa1aAHBlvpyBLkyhieco0QBDOFptvW01RXLGFC8SmYKEq2La3
ZSvbKJ3zZGWPevDsLGHEXtVKPZ4ZhmAdNdpYSJLswcBYE5JJiQnDVcItuRUGQ6xc
Im/ikd3swfavyF73DjJLaZi3wHMK1FhsURi5Q1rLdhwgsjCFYe2QOslus0zD89Mg
BZk3nIg7JQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFOm42p076dsA6O2D4BLyLIUh
hEDrMB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9kNTAwMWZlZDViMzU0YTk4OTA5OWM0
N2M1NzMzMDUxYy8wLzMyMzEzMjJlMzEzMTM1MmUzMTMyMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDMwMzIzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUc34wDQYJKoZIhvcN
AQELBQADggEBADdWIJxRxwAlKtOX2/FPWqZBH3YslrF7VeUIbCtnX661jncqyy40
GdVQdhz0hEnZnPzywjAludtV47BEDsGazwOp2IQHaDifu60TpiED0IiyX8QknegZ
rpap9AhQIAW+Ylr6es+Sikq5up+WSXdmjvb8jE5gj/mSZ5MkqEbzk/XeZqrS8IJI
paTTi3S6I5nIIk2eQ8Lc06cErHm6CyxB0VG7+OlqwyKtE2ngmYXHXEQBewNlBiT6
0yuBcfxoNDQl3vNdxdaqF8PqU/fh6j0X/217Lmlz9Z0ruyaLzEg4S3GEviZZNuIY
m3q8JLncX+wpLcRBRRsbS30hPKGG9bwE4Kw=
-----END CERTIFICATE-----
Generated at Thu Mar 5 09:38:01 2026 by rpki-client