Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e2036303739.roa
File:                     3231322e3131352e3132362e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          rebLXdMBP/v4jOV782JrtHJCzFsCLe7HJEUlgufZSpk=
Subject key identifier:   67:D5:A5:28:DC:2B:D5:2D:81:C9:18:EF:7D:79:E6:54:47:AA:E9:0F
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       07C113074DF709578B30C4DECA919146B145E2A6
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 06 Jul 2026 18:24:15 +0000
ROA not before:           Mon 06 Jul 2026 18:19:15 +0000
ROA not after:            Mon 05 Jul 2027 18:24:15 +0000
asID:                     6079
IP address blocks:        212.115.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c1:13:07:4d:f7:09:57:8b:30:c4:de:ca:91:91:46:b1:45:e2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul  6 18:19:15 2026 GMT
            Not After : Jul  5 18:24:15 2027 GMT
        Subject: CN=67D5A528DC2BD52D81C918EF7D79E65447AAE90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6f:e4:07:bf:ce:98:cf:6b:a4:ac:eb:b1:6d:
                    c6:d5:ee:ad:cc:3a:df:ae:b4:1e:cf:c4:89:68:de:
                    ee:1e:8a:a5:33:07:4e:eb:c9:59:1a:27:56:ac:df:
                    d1:37:b9:36:4c:ab:fb:a5:9e:d3:c4:af:c4:c1:9f:
                    d6:e0:e9:17:25:6d:60:bd:c4:17:d4:51:0d:03:a3:
                    b6:be:38:d6:21:54:7f:16:94:84:07:ac:b5:83:37:
                    87:d2:b9:f1:84:e0:d7:37:32:6a:56:12:4b:6e:eb:
                    70:e6:b8:e9:e7:a3:0e:91:84:67:01:e6:0b:24:c0:
                    a9:bd:ef:25:c3:19:3d:c3:ce:7b:f2:70:ac:47:f8:
                    a9:54:22:c3:38:09:ae:2f:a1:f5:ff:c6:86:73:a0:
                    d7:28:c9:d1:d8:cc:b1:4f:cb:bd:03:ca:2c:3a:e5:
                    35:80:a5:c3:f1:17:ba:d8:9d:e7:47:0c:1f:7d:01:
                    f7:3e:9d:9a:08:7b:bc:d8:2b:a0:51:2b:77:10:17:
                    10:32:33:80:5c:52:8b:20:57:a7:5e:ce:05:f1:09:
                    56:bb:79:66:49:d5:57:bc:41:23:33:12:0c:5d:1a:
                    78:52:5b:3f:21:cd:73:6e:b4:71:b2:6e:cf:f9:40:
                    f0:cc:44:6b:64:a7:b1:5b:4a:35:63:64:6a:db:a5:
                    57:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D5:A5:28:DC:2B:D5:2D:81:C9:18:EF:7D:79:E6:54:47:AA:E9:0F
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3231322e3131352e3132362e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:29:9e:9b:9d:1a:2d:33:b5:02:d5:01:91:45:a2:87:8a:75:
         e5:92:ef:12:ad:f7:b2:53:22:3f:3f:11:c0:7a:5c:87:1f:30:
         d5:04:3b:aa:96:cb:b0:d0:7f:e5:ee:ea:16:ff:ed:df:a1:b2:
         80:7c:df:36:05:a9:94:cc:e1:26:03:47:09:5c:e8:df:93:b8:
         fa:12:45:93:2e:53:a2:8d:91:b9:c4:31:eb:f4:f5:af:dd:21:
         ee:32:e0:ce:82:d0:43:72:1d:9a:ab:90:15:9b:1f:19:06:85:
         f0:a2:17:db:f6:0b:69:2e:ca:5e:f3:6b:4e:83:cb:f4:d9:e2:
         54:eb:d3:28:8c:22:20:3e:e2:fa:75:d4:54:8f:ed:da:39:43:
         cf:6c:b0:8e:79:57:41:c9:5e:37:e9:a8:c0:25:af:9c:15:c0:
         63:16:9f:61:e1:0c:86:e2:4c:34:2e:f3:81:32:46:04:0f:20:
         60:e7:11:87:bd:41:bc:02:47:94:45:33:71:7d:84:cc:b4:b8:
         82:9b:ff:c4:df:91:19:12:00:52:d1:4b:1a:93:43:39:6c:a4:
         07:a9:16:22:20:f9:28:3a:59:1e:60:54:42:00:d4:0a:d8:94:
         5e:ac:54:36:93:08:31:78:dd:1d:51:09:c2:71:34:ed:4d:fb:
         32:95:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:23:56 2026 by rpki-client