Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32322d3234203d3e20383334.roa
File:                     37342e3131342e33322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          ppPqdnNIeuOIFEiwYbml/GrRIKYa4hY0ie9jZqdKQLQ=
Subject key identifier:   93:DD:4C:2C:E8:7A:64:6C:9C:BE:53:36:8E:31:31:9D:96:87:FA:4E
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       1B412323362B364E444714CA6162C0312306F41B
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32322d3234203d3e20383334.roa
Signing time:             Sun 26 Apr 2026 09:36:23 +0000
ROA not before:           Sun 26 Apr 2026 09:31:23 +0000
ROA not after:            Sun 25 Apr 2027 09:36:23 +0000
asID:                     834
IP address blocks:        74.114.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:41:23:23:36:2b:36:4e:44:47:14:ca:61:62:c0:31:23:06:f4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Apr 26 09:31:23 2026 GMT
            Not After : Apr 25 09:36:23 2027 GMT
        Subject: CN=93DD4C2CE87A646C9CBE53368E31319D9687FA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:c1:9a:70:2a:d6:fa:aa:9a:95:c5:55:df:
                    68:bc:83:12:d9:84:71:e8:e8:df:9c:e7:9f:57:fd:
                    1d:b6:49:f2:0c:87:60:a1:c2:19:b9:6b:d5:43:50:
                    2d:c0:21:91:5a:ed:99:e5:0a:1b:f9:fd:69:c3:11:
                    06:bb:9f:f8:32:07:10:2a:d0:6a:d4:61:57:6d:1e:
                    34:16:41:42:77:d2:8a:85:9d:f6:f8:e4:b0:9e:b0:
                    98:48:75:d6:8c:a0:89:1f:dd:ec:03:42:2c:be:b1:
                    af:10:43:8b:c0:2c:6c:ca:d0:a8:98:74:0a:6f:10:
                    27:f8:6a:f1:73:bf:01:e0:be:26:7a:f0:ef:11:db:
                    f9:77:85:9a:90:64:8f:34:14:f4:9a:b8:1a:24:56:
                    af:38:cd:e7:bf:4c:83:e5:ac:62:93:96:97:00:b2:
                    ea:2a:e4:4c:5a:b2:cb:0e:64:54:2a:25:fe:61:fa:
                    15:06:81:80:47:f6:4d:e2:7e:2f:7d:60:3c:e8:6c:
                    2a:77:45:74:8d:b3:4d:26:79:0c:24:d7:87:71:79:
                    e1:ed:c8:d7:5c:6e:32:03:c9:bc:d1:d1:e5:0f:3a:
                    f1:e3:97:fb:fb:d5:ad:c3:bb:a2:51:36:b7:0d:a3:
                    4f:14:c3:a8:c8:7a:f8:82:f8:f4:fb:88:29:37:c8:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DD:4C:2C:E8:7A:64:6C:9C:BE:53:36:8E:31:31:9D:96:87:FA:4E
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:fc:86:be:d8:38:de:ee:a5:25:cf:8d:8c:e9:79:49:46:dd:
         31:89:77:99:9d:79:da:77:2b:ba:21:e6:76:42:9f:35:92:c1:
         5a:3a:e7:f6:f4:40:96:21:3d:ad:d4:5b:0a:c3:a5:f8:b4:01:
         56:5f:c1:97:5f:73:0a:25:16:63:9c:ca:28:22:be:1c:c8:cc:
         fc:ac:d8:1e:d2:43:f8:b9:d0:7a:0c:d8:ea:ca:70:f1:1c:5f:
         86:f0:0f:30:4e:98:36:cf:84:9b:1c:bb:80:aa:b2:b0:c1:ce:
         a2:0a:55:1a:7f:62:f8:7e:ab:61:10:4e:a0:20:b8:c1:47:49:
         3a:80:8e:99:22:db:35:67:1c:3d:f3:45:5b:f1:d4:50:52:87:
         f0:c5:30:58:b6:29:78:7a:30:2b:26:7f:22:5b:03:a6:54:dd:
         b5:a8:16:42:ee:9b:ed:60:6e:7b:a6:69:81:a4:f5:73:4d:ee:
         a9:b8:e3:f9:15:1d:47:2d:3f:f7:5d:53:0e:96:ee:40:3b:08:
         a7:1a:55:7a:84:3d:8a:f1:9e:ff:f2:9f:2e:5a:6f:bd:81:45:
         ee:ef:a2:0c:72:94:b6:f6:40:c9:ff:1e:7e:6c:d7:33:f9:61:
         f8:44:f9:58:bc:f3:dc:63:29:30:63:4a:2d:18:23:f2:d5:8a:
         a3:f4:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:09 2026 by rpki-client