Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e3132332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Lg46MXSFiod7sTvlwa5rulagWrE+7uvASV/5COAFbdI=
Subject key identifier:   4B:C1:90:D9:FD:22:48:8C:F3:95:F3:10:69:18:85:5E:77:96:F9:15
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       0720B0E2AACA77A17D1FC2C3A6F652DF52BE56E2
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa
Signing time:             Wed 06 May 2026 07:06:28 +0000
ROA not before:           Wed 06 May 2026 07:01:28 +0000
ROA not after:            Wed 05 May 2027 07:06:28 +0000
asID:                     834
IP address blocks:        74.120.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 12:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:20:b0:e2:aa:ca:77:a1:7d:1f:c2:c3:a6:f6:52:df:52:be:56:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: May  6 07:01:28 2026 GMT
            Not After : May  5 07:06:28 2027 GMT
        Subject: CN=4BC190D9FD22488CF395F3106918855E7796F915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:b6:09:5f:f6:94:a4:bb:39:07:0b:bb:29:
                    a8:79:c5:c7:81:ee:b8:1a:ae:48:08:fe:64:0f:db:
                    87:5c:a9:0c:c2:96:ab:02:9f:00:a1:67:e0:6a:1b:
                    13:b5:fc:99:8f:13:d3:49:e1:22:ee:dc:91:83:7d:
                    7a:d5:82:49:18:3f:02:1b:fa:db:6b:cf:aa:ec:45:
                    c0:d3:6a:96:83:67:c5:03:21:e1:4a:c9:55:5d:2f:
                    b8:43:6e:0a:ca:03:eb:fe:9e:dd:67:83:40:a5:29:
                    65:8f:d6:37:ed:1a:7e:3f:21:e9:76:23:6c:3c:d9:
                    a2:9f:7a:e4:0d:67:eb:86:17:67:7f:4d:16:1f:ec:
                    81:93:3e:c6:3b:28:57:64:c1:ad:2a:b7:6b:ac:fb:
                    9d:b0:a2:58:5a:e3:c9:fc:8a:cf:cd:d5:0f:ba:f7:
                    bd:79:08:82:42:e2:5a:90:97:e5:ff:e9:17:9a:22:
                    37:db:9c:c7:ae:1a:c3:08:19:81:3b:ce:b9:7a:fd:
                    aa:f5:52:dc:b3:d5:38:b9:8a:8f:26:38:e0:85:bf:
                    c5:76:5a:cd:48:14:89:ea:a0:31:1a:a8:b6:c3:5a:
                    d0:14:2d:d4:8f:c8:9c:d1:b3:b8:8e:a5:f3:30:a0:
                    93:fc:6f:89:88:96:53:4c:c1:51:3e:43:46:00:95:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C1:90:D9:FD:22:48:8C:F3:95:F3:10:69:18:85:5E:77:96:F9:15
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:ea:57:22:f1:c6:30:5c:9c:58:44:64:72:1b:4c:e4:10:7d:
         17:f4:19:6a:1b:d7:eb:16:92:dc:2d:26:4c:42:3f:dd:1f:31:
         24:69:6d:f9:16:8e:84:44:47:43:2d:8d:1a:91:d6:16:2c:d0:
         08:f6:97:7d:54:65:70:1e:84:5b:1e:d1:7c:97:70:94:36:b5:
         61:0a:57:c5:db:73:72:08:b4:2f:12:be:33:db:9d:c4:3a:a7:
         36:5f:8d:2a:ed:e5:5e:43:ed:17:d0:69:3f:97:37:a7:25:25:
         c9:12:a2:d1:a5:45:8d:a1:10:68:ff:33:85:d8:6c:6d:b8:f6:
         e6:95:b5:df:7e:4d:20:1f:d5:0f:b0:b1:0c:e6:c8:94:48:f2:
         ae:a2:16:47:d6:fe:94:9e:e9:84:c1:84:d4:e8:ce:58:9e:dc:
         fb:92:9a:b2:8b:9d:a9:9e:17:58:cb:0a:21:8d:56:69:9e:92:
         0e:a7:a7:2b:69:f0:56:20:cd:24:95:31:39:53:b8:26:36:cd:
         e8:ad:5b:ec:1f:b9:26:02:e6:09:71:67:82:bc:e9:06:85:13:
         80:3c:7d:1c:da:6c:99:85:18:f9:ea:a4:d0:21:d7:1b:43:3f:
         0a:5c:2d:58:88:38:9a:09:4c:0a:d9:39:25:39:16:ec:40:76:
         77:8b:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:22:49 2026 by rpki-client