Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e2039333034.roa
File:                     37342e3131342e33322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          4EBtrvhg8tr99MoG5KyKyLWqzKeteVgdJwLi0tGgMoc=
Subject key identifier:   C7:EE:28:96:98:B7:2A:36:77:C7:F6:D4:01:65:68:8C:64:5B:4E:32
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       0A4484854029DDB2C237BA309EA9A4EDB8FFA8B1
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 19 Oct 2025 12:54:56 +0000
ROA not before:           Sun 19 Oct 2025 12:49:56 +0000
ROA not after:            Sun 18 Oct 2026 12:54:56 +0000
asID:                     9304
IP address blocks:        74.114.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:44:84:85:40:29:dd:b2:c2:37:ba:30:9e:a9:a4:ed:b8:ff:a8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Oct 19 12:49:56 2025 GMT
            Not After : Oct 18 12:54:56 2026 GMT
        Subject: CN=C7EE289698B72A3677C7F6D40165688C645B4E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:3d:6d:dd:28:b1:d2:79:4b:a0:ed:92:e8:
                    1c:e9:62:9b:cf:07:19:83:2c:93:2d:cd:fe:30:07:
                    6a:1d:68:d7:d5:c7:ec:3e:73:7d:45:b4:73:d0:e2:
                    a9:c8:c2:f1:2d:6d:ff:de:40:48:5f:87:4a:6b:24:
                    6d:12:50:3e:42:82:44:5c:41:fa:27:b9:f2:44:dd:
                    60:96:eb:a0:6a:fd:3e:bf:eb:b9:a9:1d:31:e3:41:
                    8d:54:dd:e0:da:74:43:d6:9a:28:fc:96:a3:6e:8c:
                    bd:58:10:9d:ab:75:70:f3:7c:fb:57:23:fc:05:de:
                    49:a7:9e:47:4a:1f:9a:24:93:18:a6:fa:a0:d9:23:
                    34:f2:16:37:ae:d5:0b:e1:a3:99:af:ea:0f:39:63:
                    f9:7c:8a:9c:e8:f6:4d:e7:fa:30:0a:af:93:98:9d:
                    9c:9b:8d:53:1c:0e:d4:33:31:2c:1f:7f:3a:11:62:
                    f4:10:19:cd:91:6c:5f:dd:38:12:99:ae:a3:96:07:
                    5c:1d:51:7a:4d:25:c6:32:20:a8:7c:1d:41:12:88:
                    b5:ba:36:9a:26:a0:06:b0:f4:73:84:bc:31:8b:70:
                    5c:44:0a:59:b2:93:0c:c3:df:b5:08:a1:07:a0:a4:
                    f0:06:1b:b6:f4:ee:c1:cd:c5:d0:ec:7a:ab:dc:7f:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EE:28:96:98:B7:2A:36:77:C7:F6:D4:01:65:68:8C:64:5B:4E:32
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:eb:c7:4f:0f:6e:4f:41:3e:21:cb:20:8b:2c:bb:78:2c:
         9c:95:c9:ac:48:3f:0e:95:18:55:84:f9:d4:ca:69:8c:d4:0b:
         d7:f4:78:04:31:98:ae:3d:43:35:42:8b:4a:d8:59:0a:4d:de:
         72:83:5b:b8:2f:d9:82:a3:53:79:93:0d:ec:72:47:4b:44:66:
         73:1a:02:ef:24:ff:ca:3a:ad:70:8f:be:8c:46:f3:a4:8a:a1:
         e8:04:46:ae:02:a1:b0:7d:71:50:4e:07:e3:ba:f2:1e:19:c7:
         13:a0:4b:aa:2a:89:13:eb:b2:93:ed:4f:6b:82:7e:69:0a:cc:
         c3:15:75:ed:1d:47:cd:c3:19:96:68:55:76:66:29:5d:5c:46:
         ab:e1:5f:aa:67:e4:45:30:08:69:f2:cf:24:f3:0b:27:d9:8c:
         f9:6f:fc:49:86:6b:e5:02:5b:5e:8e:2a:49:78:c9:89:22:96:
         90:4a:36:57:f9:09:04:ff:17:03:8f:f6:eb:e7:9b:ac:90:14:
         45:26:b4:61:e0:05:d4:f2:9b:a9:43:99:a4:76:07:7f:01:da:
         4e:fd:c8:18:26:4c:ae:ed:4f:b0:f6:ef:8f:fb:69:ab:e1:3d:
         50:49:dc:75:66:de:76:0f:97:95:98:9f:a5:76:e2:4b:a4:ad:
         5a:f2:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:36:24 2025 by rpki-client