Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32342d3234203d3e2039333034.roa
File:                     37342e3131342e33342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          5CYDtYemCgtcexb+oCF9UkMBVJ7YdSSGrACMxC3zqXE=
Subject key identifier:   9B:C7:FF:9D:36:F5:5F:68:E9:10:FD:73:CB:08:C6:31:FB:9E:FF:3D
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       5C6CEAB7B3F86910133C3450BFA01442484FA4F0
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 18 Aug 2025 16:06:43 +0000
ROA not before:           Mon 18 Aug 2025 16:01:43 +0000
ROA not after:            Mon 17 Aug 2026 16:06:43 +0000
asID:                     9304
IP address blocks:        74.114.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6c:ea:b7:b3:f8:69:10:13:3c:34:50:bf:a0:14:42:48:4f:a4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Aug 18 16:01:43 2025 GMT
            Not After : Aug 17 16:06:43 2026 GMT
        Subject: CN=9BC7FF9D36F55F68E910FD73CB08C631FB9EFF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:60:7a:79:29:8a:fe:50:13:3f:b8:69:c2:
                    65:35:b2:e5:7e:89:1f:4a:a2:e5:31:eb:76:43:79:
                    79:aa:ea:68:76:0c:9d:7b:25:e9:72:21:f0:6c:98:
                    06:fa:09:b0:8c:63:25:ce:b5:c2:56:cf:27:fc:49:
                    f5:34:99:38:1c:db:bc:90:26:46:88:16:93:60:25:
                    ff:9a:36:da:49:cb:dd:10:e7:ba:6f:a7:49:58:a7:
                    86:fc:a2:20:b6:9c:c5:6f:55:9f:a9:1e:6f:07:22:
                    7d:a9:1f:50:37:45:c7:f4:c7:ea:b7:b7:8b:9c:6e:
                    31:fb:75:be:53:21:e2:c5:09:b7:07:33:68:04:f2:
                    20:2c:f7:7f:f8:31:ad:bc:6a:e7:2f:51:8b:6b:8e:
                    60:12:e4:11:8a:25:fa:0e:cc:d7:b4:8e:a1:e2:43:
                    25:e2:63:31:81:6e:d7:de:31:ce:5a:09:3b:d4:5c:
                    44:76:19:4e:07:59:d6:48:57:02:c4:06:4f:70:8d:
                    a3:f2:ed:60:ef:c1:71:92:df:dc:be:67:ae:04:61:
                    51:fc:88:d8:d2:cd:66:84:95:fd:9e:e1:b1:51:db:
                    00:10:b8:33:2c:8a:e6:7e:fd:a6:85:91:f2:1e:5e:
                    b9:bb:2d:57:92:cd:ec:07:af:fa:d0:3f:26:77:75:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:FF:9D:36:F5:5F:68:E9:10:FD:73:CB:08:C6:31:FB:9E:FF:3D
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:61:19:9a:cb:1d:74:9b:43:50:af:97:63:05:78:b4:f0:
         c9:a0:bb:be:fa:d6:42:da:93:9f:0c:4f:aa:5a:ff:df:3d:09:
         4c:65:df:12:c3:06:4e:90:1d:09:cc:d0:0b:7c:a3:93:a9:e3:
         9c:f8:ff:6c:94:d3:9f:6c:8b:1f:a0:66:0a:60:8d:9a:eb:46:
         1e:fa:b3:a9:5f:5c:03:a1:1a:d3:99:26:09:5b:bb:25:df:2c:
         2e:13:04:b8:1b:90:56:f6:f1:08:88:56:b6:18:23:64:bc:6e:
         6e:66:c0:02:36:1e:49:35:c8:1e:cf:56:85:15:a3:a9:a1:5c:
         0f:48:98:46:72:cf:11:0c:91:44:81:fd:1f:88:12:b1:39:18:
         2f:33:f8:ce:8b:c8:bd:fe:39:27:ae:c8:41:d6:8d:7b:61:ed:
         e0:b2:b9:76:c9:6e:44:20:fd:07:a4:21:51:94:2a:cb:37:78:
         a1:3c:dd:4b:f7:7e:26:6f:54:4e:ed:c5:bc:cc:03:ed:8f:be:
         8b:78:a2:a9:53:1c:46:c1:19:31:23:67:7b:7d:fd:98:b5:11:
         c9:da:ab:be:02:52:c2:b8:4f:ea:3e:7e:d6:b2:0c:34:ac:c1:
         47:1d:81:2b:c6:08:44:1e:e3:7f:58:a1:ff:c6:e2:b6:6a:53:
         0e:eb:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:13 2025 by rpki-client