Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa
File:                     37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa (raw, json)
Hash identifier:          Du9J2ejoVZJ+9gmq6l4VWQ3KYw6OZgVlWM6MaoTLqko=
Subject key identifier:   80:5A:7C:2A:B1:62:0D:BC:FE:DB:D0:9D:EC:61:B8:CE:81:CD:9B:53
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       69880DEB5FE381379B65453C51F8F4AF36ECAA2A
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa
Signing time:             Sat 13 Jun 2026 06:36:07 +0000
ROA not before:           Sat 13 Jun 2026 06:31:07 +0000
ROA not after:            Sat 12 Jun 2027 06:36:07 +0000
asID:                     401294
IP address blocks:        74.124.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:88:0d:eb:5f:e3:81:37:9b:65:45:3c:51:f8:f4:af:36:ec:aa:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:07 2026 GMT
            Not After : Jun 12 06:36:07 2027 GMT
        Subject: CN=805A7C2AB1620DBCFEDBD09DEC61B8CE81CD9B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:f9:bd:c7:8c:ae:42:e2:59:32:b0:c7:3a:
                    f7:72:80:75:6d:ab:b2:45:7a:13:04:4b:7f:60:1f:
                    04:2c:d0:79:32:ef:6b:48:13:7d:de:02:a3:18:11:
                    6e:56:96:37:03:98:5e:70:8d:a6:12:d2:bc:60:82:
                    14:39:38:7b:57:0e:53:be:08:62:36:40:b4:7b:1b:
                    8b:46:d2:7d:92:de:c8:db:9f:43:7f:96:8e:a0:ca:
                    04:b9:2c:38:0f:36:bf:93:5d:ff:df:9f:38:6e:a6:
                    c3:f0:69:3b:2d:bf:3d:d9:b9:eb:88:a7:00:58:c7:
                    89:b5:14:d1:aa:8e:53:ae:f8:5f:b5:50:74:84:ec:
                    26:10:66:2a:ce:5c:c1:c5:8e:72:a4:fb:29:79:6a:
                    58:9a:6d:20:ec:bb:6e:48:d0:5d:34:bb:0f:f3:e4:
                    7e:29:c2:a4:cf:25:53:b2:7b:d4:b1:96:24:39:20:
                    e4:f9:5b:2e:05:8b:a1:42:a5:8f:00:36:3c:8e:0e:
                    e8:da:4f:69:3d:39:96:82:88:eb:46:4b:a5:69:42:
                    79:ea:02:e0:bd:6d:7b:33:37:ac:df:18:b4:25:da:
                    a8:25:d5:98:e7:57:ca:52:01:8d:af:bd:78:e0:a4:
                    c2:48:21:10:2c:6f:91:c0:6e:f8:b5:8b:c7:cb:46:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:7C:2A:B1:62:0D:BC:FE:DB:D0:9D:EC:61:B8:CE:81:CD:9B:53
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:4e:f1:e3:68:7b:4a:5e:a3:eb:be:46:66:44:a5:93:33:13:
         63:26:a3:17:f2:7a:2f:2a:1f:f2:27:a8:46:bb:bd:3b:e5:a3:
         0a:a4:49:fd:a3:5c:dc:83:4a:82:ad:68:cb:fb:17:48:2f:c0:
         e3:e1:a6:fe:1b:a1:35:d9:db:62:56:55:8d:ac:a6:e1:6d:cc:
         ea:51:8d:1a:73:fe:19:b3:3b:4f:f4:2f:9a:c0:ae:6f:32:09:
         72:74:18:3c:e0:89:f3:7d:b8:5c:e3:26:84:8a:4f:30:4b:c2:
         d2:82:c1:51:b8:09:3d:ff:da:4d:7f:81:55:f8:dc:eb:24:cb:
         a9:b1:4f:3b:1b:bd:72:95:67:60:44:6e:ff:76:bb:e9:77:62:
         61:8e:7a:6d:c8:99:c3:83:c1:83:06:46:48:0f:fb:dc:7a:12:
         59:0c:69:f5:d4:d8:19:c5:5e:88:e8:92:4d:86:a8:33:a2:e3:
         d3:37:d8:80:7b:34:37:87:bd:93:29:db:6d:43:38:2b:8e:d2:
         cf:42:b1:2b:8f:c8:57:de:a2:18:be:f2:87:0b:de:14:c5:40:
         fd:eb:87:5a:b2:1e:6d:30:f1:58:9b:07:a5:07:12:f7:28:a9:
         ef:5d:31:64:cd:c2:77:fa:60:db:b6:c1:2f:5a:88:61:8c:3e:
         d2:74:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:53 2026 by rpki-client