Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33352e302f32342d3234203d3e2039333034.roa
File:                     37342e3131342e33352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          pvX8VL7BsjtOA4YkarpSCqYG3OhGNXFmHU+RInB7lb8=
Subject key identifier:   BE:DD:52:10:19:51:CD:D9:37:6C:AA:3C:AD:92:98:14:86:62:A8:61
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       5D971B5ED22114496655951C8882B6B425AC4152
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33352e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 19 Oct 2025 12:52:32 +0000
ROA not before:           Sun 19 Oct 2025 12:47:32 +0000
ROA not after:            Sun 18 Oct 2026 12:52:32 +0000
asID:                     9304
IP address blocks:        74.114.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:1b:5e:d2:21:14:49:66:55:95:1c:88:82:b6:b4:25:ac:41:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Oct 19 12:47:32 2025 GMT
            Not After : Oct 18 12:52:32 2026 GMT
        Subject: CN=BEDD52101951CDD9376CAA3CAD9298148662A861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:62:8b:b9:fb:a8:e7:52:d5:30:9b:88:76:
                    3d:f8:1d:ad:f1:58:f4:19:ac:ba:18:9e:39:ca:2b:
                    50:e8:c4:e3:79:2b:1a:c5:d2:fc:38:69:46:e6:94:
                    08:b4:c7:2d:f3:01:93:7b:06:ea:41:d6:c0:dc:a3:
                    59:b3:cc:f7:31:40:da:05:80:35:f2:fd:ed:e9:76:
                    bf:83:7d:4e:62:1b:21:21:0e:23:3f:c5:18:68:90:
                    f5:2b:3e:b6:f6:b1:5c:cb:70:ac:87:c3:58:6f:8e:
                    59:97:3b:89:2f:ea:b9:24:3e:69:3a:0d:56:2e:81:
                    c0:e2:33:1a:1a:76:ac:d0:b1:f9:52:a8:8e:c8:a8:
                    43:92:a9:f8:61:ab:39:96:c4:97:aa:55:9c:79:21:
                    59:46:9c:15:34:18:8d:75:86:5b:a7:18:da:26:08:
                    17:96:2d:1e:5a:db:3d:be:30:6e:80:30:3a:ae:63:
                    1e:bd:07:a3:a3:0b:06:b8:e4:43:71:c2:22:94:ae:
                    c2:cf:a9:3d:e5:a7:39:1a:f6:bf:26:0d:37:9a:a7:
                    99:31:19:c6:c8:e2:0f:e4:54:f4:28:6c:d7:8e:de:
                    9f:7d:17:5d:12:aa:4a:70:04:b8:4f:ed:28:e7:02:
                    7d:4d:55:8f:85:e8:6c:a5:06:05:97:8d:a3:75:f2:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DD:52:10:19:51:CD:D9:37:6C:AA:3C:AD:92:98:14:86:62:A8:61
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33352e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b3:fd:ef:89:3d:df:ea:4f:09:96:39:bf:92:cb:6e:1b:e6:
         b8:ae:a4:fa:e6:1e:db:1f:b7:82:4b:7c:9d:e9:10:6d:81:7e:
         d1:c6:83:37:c2:8c:a4:78:33:e5:83:ba:07:30:16:9d:3f:b8:
         e3:31:46:a4:77:f0:f7:8a:78:bc:7e:60:34:cd:05:7d:d3:a0:
         0b:23:43:28:3f:0e:97:98:65:17:b8:c1:27:05:40:48:4b:8d:
         f4:64:aa:c8:b7:70:22:cc:79:16:88:6d:9b:d2:51:85:e1:3e:
         1a:4f:6a:03:42:1e:40:d3:9a:de:e3:ae:78:5e:aa:31:cf:81:
         13:5e:9f:0c:59:90:c1:b8:13:7d:97:29:58:4a:a6:d0:51:e2:
         9a:fe:0f:6d:89:a3:9c:40:45:4e:7b:c3:3e:29:30:39:42:ce:
         62:4e:92:25:9d:bf:6c:0e:c5:90:6f:54:73:39:25:40:f9:1d:
         5e:de:d9:11:3a:08:35:02:bd:bc:79:95:17:62:6d:40:6f:43:
         c6:cb:67:47:9b:b0:18:95:0b:43:bd:81:e2:7a:ef:3b:53:59:
         fa:4b:66:c8:d2:15:42:fa:73:a2:5f:a9:66:f4:6a:0e:0a:c9:
         d3:26:76:c4:0e:6c:bb:3d:a6:e7:90:db:03:b3:97:1c:59:67:
         ef:ab:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:23 2025 by rpki-client