Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343032323336.roa
File:                     3231322e3131352e3132362e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier:          DJbhaKpvfIVQ/WQB760o36NdbG4s7OZD5LLIRhL/W6g=
Subject key identifier:   E1:F9:79:D5:87:03:49:70:34:BB:C6:3B:54:FB:75:31:7F:65:71:20
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       37C44E12982CD8C383280821674766A8EEF52B62
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343032323336.roa
Signing time:             Mon 06 Jul 2026 18:24:15 +0000
ROA not before:           Mon 06 Jul 2026 18:19:15 +0000
ROA not after:            Mon 05 Jul 2027 18:24:15 +0000
asID:                     402236
IP address blocks:        212.115.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 17:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c4:4e:12:98:2c:d8:c3:83:28:08:21:67:47:66:a8:ee:f5:2b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul  6 18:19:15 2026 GMT
            Not After : Jul  5 18:24:15 2027 GMT
        Subject: CN=E1F979D58703497034BBC63B54FB75317F657120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:dd:44:ed:f0:49:5c:a0:f3:90:bf:4b:2c:
                    0d:b5:b3:62:9d:50:f5:89:c7:0a:6f:cd:72:be:ce:
                    78:0c:49:e6:0e:27:9f:95:d5:f4:fb:03:27:de:d2:
                    96:e0:2a:6b:0e:74:36:d0:b1:10:14:bc:d0:57:67:
                    3c:c4:6d:96:5f:4f:ad:f5:75:93:f4:af:8f:77:e7:
                    02:4e:43:bd:d9:b7:8f:f7:74:26:51:49:80:e3:e7:
                    53:0b:9a:8e:4e:36:42:17:17:d3:3b:bc:45:17:c9:
                    51:ab:65:cc:51:57:56:c2:ca:3c:67:48:b5:e4:59:
                    28:de:24:6e:f7:f0:e0:88:56:6e:d5:99:0e:4b:f9:
                    71:a5:68:33:5f:91:6d:e6:6f:ee:98:5f:df:3c:74:
                    3a:bd:dc:d6:25:56:db:e4:6c:7e:8e:74:ee:53:ab:
                    a5:5a:50:8e:fb:f2:e1:9e:fd:5b:e4:b1:a7:a4:07:
                    a7:c7:3a:17:a3:ba:4b:b2:0b:d9:be:07:4f:ff:3e:
                    f7:c2:86:ef:6b:ca:32:c3:4a:50:3c:af:ad:42:be:
                    40:4b:42:1e:1d:58:d8:4b:9c:34:8b:8f:97:99:8b:
                    27:d0:56:f7:c2:c9:ff:1c:8f:8b:da:9f:9b:69:b9:
                    03:9e:c0:7c:df:30:7f:2a:b6:16:dd:1c:13:94:e9:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F9:79:D5:87:03:49:70:34:BB:C6:3B:54:FB:75:31:7F:65:71:20
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e20343032323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:ef:ef:cc:8c:5b:e4:cf:14:6c:43:0e:d7:36:9b:fe:99:
         79:06:62:f7:57:62:f7:bf:92:af:31:a8:e7:c2:2d:32:b1:1e:
         be:4c:68:f0:00:87:ac:32:2b:96:3e:be:4b:09:85:52:21:ae:
         96:c3:95:9c:44:0b:30:9a:de:01:d1:45:bd:5c:2d:94:8c:20:
         2e:4f:de:35:e3:b7:e0:f5:aa:63:5f:8e:d8:9c:60:1d:e5:cd:
         50:1e:37:ed:b5:de:e7:17:c6:f7:fb:4f:d3:6a:af:8e:97:02:
         55:dc:91:23:93:c0:07:89:fa:2e:b7:94:2d:c9:d5:70:e8:48:
         cb:19:dc:3d:35:cb:97:66:c8:62:44:9b:ee:35:e1:09:db:c7:
         44:42:43:bd:d6:ac:58:39:45:b1:5b:d8:99:f1:f2:e8:04:5a:
         25:1f:b9:2e:72:89:9a:3f:5d:80:3a:c2:e2:75:8b:33:5f:c5:
         29:85:e4:09:c5:e1:fc:01:17:5a:f6:28:bb:c4:15:7e:f1:b2:
         a4:2c:f4:f4:d2:95:30:1b:3f:bb:28:54:ec:7d:b0:2e:c4:32:
         48:93:67:0c:f8:20:d2:50:81:12:b8:6a:fe:c7:d2:ed:0d:f6:
         ca:f1:2c:9b:08:33:a5:68:14:55:fb:68:a7:6d:97:b0:f1:57:
         92:d7:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:28:36 2026 by rpki-client