Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20313438393936.roa
File:                     37342e3132302e3132322e302f32342d3234203d3e20313438393936.roa (raw, json)
Hash identifier:          xoDbEPIsAn4O6BZpSGc+ZMmjhApQJ7HbrSpIUiepH2Q=
Subject key identifier:   E8:0C:67:FC:2C:51:80:1A:9D:CC:E4:83:B3:53:9E:C8:BA:1C:66:DD
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       225BE0AAEC7B35AF0F9CDE97AD51B50ACB786940
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20313438393936.roa
Signing time:             Wed 06 May 2026 07:05:53 +0000
ROA not before:           Wed 06 May 2026 07:00:53 +0000
ROA not after:            Wed 05 May 2027 07:05:53 +0000
asID:                     148996
IP address blocks:        74.120.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 12:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5b:e0:aa:ec:7b:35:af:0f:9c:de:97:ad:51:b5:0a:cb:78:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: May  6 07:00:53 2026 GMT
            Not After : May  5 07:05:53 2027 GMT
        Subject: CN=E80C67FC2C51801A9DCCE483B3539EC8BA1C66DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:c8:ed:0a:20:61:e3:a7:40:00:78:45:45:
                    75:ea:08:ba:b5:5f:ac:f4:2b:7c:e3:45:43:77:6e:
                    b9:8b:15:0d:45:51:c9:03:62:8b:d0:23:ef:3a:b7:
                    de:d4:e7:9e:0a:52:b4:d0:26:e3:84:79:8c:5b:b9:
                    b2:35:b6:16:23:8f:fd:58:7b:2b:4c:52:d2:b9:42:
                    24:88:43:a5:c5:ee:54:3d:56:59:f0:3b:db:4b:3c:
                    0a:66:ac:48:1d:7c:01:07:a6:56:c0:c6:5d:29:e3:
                    a0:7e:2c:9e:c2:d0:21:11:cd:f6:36:6d:72:d0:45:
                    bd:a7:79:5d:26:ff:fd:88:38:29:47:5c:da:4a:35:
                    dc:a5:f5:58:b1:96:23:0c:05:0d:50:74:90:69:e6:
                    a0:97:80:49:f7:e8:48:93:59:d2:e4:38:0b:c3:f5:
                    76:81:8b:9b:ec:d1:6c:38:00:1e:13:00:38:9c:2d:
                    14:a3:92:82:ab:dd:5f:04:71:c9:86:27:5a:a0:da:
                    b7:8f:f6:5a:42:76:61:68:e1:cd:29:05:b7:5c:5f:
                    f4:14:90:f3:e5:e5:d7:65:f6:aa:57:28:58:e3:61:
                    52:94:30:62:52:2a:0d:35:7b:25:bd:4a:02:22:5d:
                    73:ab:be:90:31:dd:47:9a:28:bc:9d:5a:fa:20:29:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0C:67:FC:2C:51:80:1A:9D:CC:E4:83:B3:53:9E:C8:BA:1C:66:DD
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20313438393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:75:f4:0c:f7:af:9d:7c:73:f8:0f:a1:3a:de:0e:0f:5b:
         f4:45:9d:35:00:c8:cf:d0:36:70:92:9b:4e:22:b6:fc:8b:4d:
         ed:57:f2:0e:75:a3:88:47:bf:d3:60:b2:15:33:60:dc:7f:5d:
         cf:61:79:81:71:d0:79:67:1d:2c:c0:54:8d:82:10:10:7f:46:
         71:1b:76:38:bc:10:e4:b7:da:0e:00:b9:6a:52:ef:c5:18:5b:
         7d:fe:ef:c1:0e:fe:c5:ec:95:b7:81:04:99:1f:16:68:49:c8:
         ef:78:16:bf:b0:42:23:16:97:b4:f3:ce:08:2f:6c:c6:65:2f:
         bb:af:1b:2b:29:46:76:c7:30:6f:e9:7e:b2:d4:6f:3c:62:e5:
         df:7e:7e:7e:80:d3:fe:ae:f7:3e:89:0f:8f:dd:7f:fe:41:5c:
         7d:af:13:7d:9a:f3:85:e1:fb:47:d2:f1:7c:0a:71:a5:14:39:
         bb:11:bd:66:85:df:52:90:39:76:e5:74:56:e9:b6:ff:b2:d0:
         69:e2:96:09:f5:25:c9:28:fb:5f:74:fb:86:e3:a3:00:1d:b7:
         7e:66:ec:70:98:2d:a3:99:b0:a8:93:a9:ad:81:0c:77:5d:3d:
         5c:40:c9:34:1b:d3:2a:ee:96:c4:fd:0e:4b:e7:d3:62:06:c6:
         c3:c9:4f:19
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUIlvgqux7Na8PnN6XrVG1Cst4aUAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTk5NWJhMDVlOTBhYTM5NTFkOWFiMzlkOTM1NWI2YjY4
M2UzMmU2YTE5YWRmMTUzZjIwHhcNMjYwNTA2MDcwMDUzWhcNMjcwNTA1MDcwNTUz
WjAzMTEwLwYDVQQDEyhFODBDNjdGQzJDNTE4MDFBOURDQ0U0ODNCMzUzOUVDOEJB
MUM2NkREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6HI7QogYeOn
QAB4RUV16gi6tV+s9Ct840VDd265ixUNRVHJA2KL0CPvOrfe1OeeClK00CbjhHmM
W7myNbYWI4/9WHsrTFLSuUIkiEOlxe5UPVZZ8DvbSzwKZqxIHXwBB6ZWwMZdKeOg
fiyewtAhEc32Nm1y0EW9p3ldJv/9iDgpR1zaSjXcpfVYsZYjDAUNUHSQaeagl4BJ
9+hIk1nS5DgLw/V2gYub7NFsOAAeEwA4nC0Uo5KCq91fBHHJhidaoNq3j/ZaQnZh
aOHNKQW3XF/0FJDz5eXXZfaqVyhY42FSlDBiUioNNXslvUoCIl1zq76QMd1Hmii8
nVr6ICn/HQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFOgMZ/wsUYAanczkg7NTnsi6
HGbdMB8GA1UdIwQYMBaAFDUU7tDuXFU0I6JfHX1W/CYTEaHrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1ZDA3YzVmNjA0NGViLzAv
MzUxNEVFRDBFRTVDNTUzNDIzQTI1RjFEN0Q1NkZDMjYxMzExQTFFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzkwN2UwMTA1LTM1MTYtNDdhMC1hOWMyLTVmMGI3NzY2MWNiMS85OTk1
YmEwNWU5MGFhMzk1MWQ5YWIzOWQ5MzU1YjZiNjgzZTMyZTZhMTlhZGYxNTNmMi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1ODgwMjllMDE4NWQw
N2M1ZjYwNDRlYi8wLzM3MzQyZTMxMzIzMDJlMzEzMjMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNDM4MzkzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnh6MA0GCSqGSIb3DQEB
CwUAA4IBAQACLXX0DPevnXxz+A+hOt4OD1v0RZ01AMjP0DZwkptOIrb8i03tV/IO
daOIR7/TYLIVM2Dcf13PYXmBcdB5Zx0swFSNghAQf0ZxG3Y4vBDkt9oOALlqUu/F
GFt9/u/BDv7F7JW3gQSZHxZoScjveBa/sEIjFpe0884IL2zGZS+7rxsrKUZ2xzBv
6X6y1G88YuXffn5+gNP+rvc+iQ+P3X/+QVx9rxN9mvOF4ftH0vF8CnGlFDm7Eb1m
hd9SkDl25XRW6bb/stBp4pYJ9SXJKPtfdPuG46MAHbd+ZuxwmC2jmbCok6mtgQx3
XT1cQMk0G9Mq7pbE/Q5L59NiBsbDyU8Z
-----END CERTIFICATE-----
Generated at Wed May 13 02:41:11 2026 by rpki-client