Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/37342e3131322e31332e302f32342d3234203d3e203137343937.roa
File:                     37342e3131322e31332e302f32342d3234203d3e203137343937.roa (raw, json)
Hash identifier:          7kHU6as+TzXm4QC7h64drUAEe+1bDxkam0VbL49Mzrk=
Subject key identifier:   9B:23:92:05:7C:C4:C0:21:49:E8:3D:F9:2D:4B:B8:36:D9:53:1F:34
Certificate issuer:       /CN=988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b
Certificate serial:       58D1C1997774540098ECB1DD44BEBA858B999BD0
Authority key identifier: A5:0A:E3:6B:0D:CE:F0:AB:91:A2:90:FE:C4:B0:EA:4A:BF:89:27:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/37342e3131322e31332e302f32342d3234203d3e203137343937.roa
Signing time:             Tue 17 Mar 2026 19:53:53 +0000
ROA not before:           Tue 17 Mar 2026 19:48:53 +0000
ROA not after:            Tue 16 Mar 2027 19:53:53 +0000
asID:                     17497
IP address blocks:        74.112.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/A50AE36B0DCEF0AB91A290FEC4B0EA4ABF8927DA.crl
                          rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/A50AE36B0DCEF0AB91A290FEC4B0EA4ABF8927DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d1:c1:99:77:74:54:00:98:ec:b1:dd:44:be:ba:85:8b:99:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b
        Validity
            Not Before: Mar 17 19:48:53 2026 GMT
            Not After : Mar 16 19:53:53 2027 GMT
        Subject: CN=9B2392057CC4C02149E83DF92D4BB836D9531F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:48:80:ee:de:52:4b:78:3f:dd:d4:73:ba:
                    d7:30:df:7d:c0:6b:ba:f4:83:ba:b9:49:09:a2:ce:
                    d1:82:32:c4:97:d9:ab:95:86:a8:ef:6a:76:b8:03:
                    01:1b:f4:70:b6:17:53:16:78:90:0a:cc:35:da:81:
                    c5:7e:65:9e:05:ea:4a:97:b4:aa:33:33:3b:d3:5b:
                    d0:e7:92:51:dc:83:30:cb:92:82:d2:1b:cf:01:43:
                    86:ed:18:25:ff:b0:6d:84:81:69:13:ab:69:b1:24:
                    1a:fb:49:42:da:aa:49:93:5d:bb:7f:f7:9c:1d:12:
                    b4:90:76:22:e3:99:14:5a:45:a3:c5:1f:83:17:7a:
                    19:fb:07:98:af:bd:cf:7b:c1:1b:71:b8:7b:ca:8e:
                    4c:31:29:b3:7b:5a:03:20:8e:c6:02:36:38:52:db:
                    0d:33:eb:76:9c:1c:41:39:9a:b4:2e:5f:98:35:cd:
                    15:a4:4c:e6:88:9b:8c:25:63:e0:50:04:2f:ab:ec:
                    c6:d4:2c:d4:8b:0b:44:13:cd:11:51:7f:1a:62:39:
                    51:a2:74:a2:ff:98:46:9d:92:73:0e:84:9e:79:7e:
                    32:8e:72:1b:4c:90:29:f2:62:be:8e:b1:41:16:90:
                    22:c9:8a:6b:ad:c5:13:13:61:2c:0e:4a:35:70:66:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:23:92:05:7C:C4:C0:21:49:E8:3D:F9:2D:4B:B8:36:D9:53:1F:34
            X509v3 Authority Key Identifier:
                keyid:A5:0A:E3:6B:0D:CE:F0:AB:91:A2:90:FE:C4:B0:EA:4A:BF:89:27:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/A50AE36B0DCEF0AB91A290FEC4B0EA4ABF8927DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/37342e3131322e31332e302f32342d3234203d3e203137343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d0:c6:58:cf:8b:49:dd:02:02:ed:95:aa:f4:e3:56:75:e3:
         d8:13:23:70:fb:3d:8b:89:c4:b2:4f:3a:3e:23:64:66:74:97:
         2f:6c:0c:3f:0d:22:42:df:4c:4e:c6:c0:4b:18:f5:87:45:a2:
         9a:7c:08:eb:71:ba:2c:69:d7:ca:c8:be:85:00:7b:56:7c:c2:
         34:84:ad:10:04:ba:5f:16:9e:19:87:88:5d:c6:64:b6:cd:51:
         b7:a2:bc:e3:5b:45:07:9a:5d:dd:39:92:8c:93:43:d9:75:9d:
         0a:b4:74:e0:2e:0e:6a:0c:66:f0:7b:5d:3b:07:e2:35:35:54:
         88:5c:13:2e:4f:e4:3c:42:c6:e2:fd:dc:1d:75:ad:4a:51:7d:
         c9:08:32:9a:20:eb:bf:cb:d1:1f:dc:18:55:f8:89:fc:5e:9c:
         d1:a9:db:e8:ad:02:bb:0c:f8:3b:bb:11:32:92:e0:9e:3e:46:
         2a:77:43:32:b2:55:5e:0e:c2:be:6b:2d:f6:15:ea:55:da:eb:
         ca:b9:93:c5:3d:37:d9:7f:b0:d8:63:c7:bf:7c:2b:cf:04:98:
         e0:c2:2d:de:2d:ad:86:d7:26:b4:ce:bb:76:c5:12:c3:db:61:
         9d:d5:31:16:5b:09:9e:30:81:48:b3:22:a5:b4:ea:07:84:ac:
         3a:9e:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:42:31 2026 by rpki-client