Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e2039333034.roa
File:                     37342e3132302e31362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          heSJsi2yoWZFbZSmFlbHCWTpJMZ5l85oIX5U8laogfQ=
Subject key identifier:   D5:D7:FC:9C:EF:BF:29:33:E5:09:0E:A8:7D:16:CD:EC:B3:E8:49:E6
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       52C7F6585022B3FCC56251FEBD3853E112A2AEE7
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 17 Aug 2025 16:26:59 +0000
ROA not before:           Sun 17 Aug 2025 16:21:59 +0000
ROA not after:            Sun 16 Aug 2026 16:26:59 +0000
asID:                     9304
IP address blocks:        74.120.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c7:f6:58:50:22:b3:fc:c5:62:51:fe:bd:38:53:e1:12:a2:ae:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Aug 17 16:21:59 2025 GMT
            Not After : Aug 16 16:26:59 2026 GMT
        Subject: CN=D5D7FC9CEFBF2933E5090EA87D16CDECB3E849E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:02:64:04:fa:cb:dd:86:7c:ff:31:0d:1d:
                    42:cf:dc:9f:1a:78:76:d8:43:1e:bb:c6:36:47:b8:
                    cb:a1:38:a9:53:51:73:cd:66:e1:5c:ce:b9:b7:9c:
                    7a:bf:56:de:f2:f1:d1:78:b1:af:9c:14:70:97:62:
                    40:7b:72:2b:cc:e1:63:86:3e:33:99:a1:49:7b:18:
                    ba:b0:e9:2a:c1:8d:ce:2e:53:62:22:58:bf:62:fc:
                    bd:3b:4a:66:86:3b:bf:90:15:ed:f6:9b:0a:cf:a4:
                    5e:36:23:c7:7f:7f:46:f4:bf:35:58:d6:7e:ce:f5:
                    05:d5:6d:11:fe:b2:33:e4:57:21:d8:87:3d:97:0a:
                    2d:ba:aa:a0:a5:49:88:c3:8b:d2:00:1b:a4:d2:12:
                    77:e6:84:66:19:14:c4:ea:3f:75:46:a0:47:07:f8:
                    24:9d:3d:03:e0:2c:02:ab:47:63:5d:bd:1e:53:7d:
                    b0:17:1a:1a:b8:d8:73:46:fb:5f:ff:17:3d:40:bf:
                    f9:09:ae:e5:9a:d4:b2:36:17:43:0e:e8:8b:d4:3f:
                    01:cc:14:bb:68:51:4e:b6:f3:5a:de:46:28:90:c1:
                    d2:65:65:ab:6c:7e:cc:95:6b:b4:11:5d:94:0c:f0:
                    37:4d:f9:8c:79:7f:1c:65:de:77:f4:18:80:58:d6:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D7:FC:9C:EF:BF:29:33:E5:09:0E:A8:7D:16:CD:EC:B3:E8:49:E6
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:89:80:1b:c0:52:09:66:31:7d:d5:f2:2e:02:c2:02:bb:
         c7:21:3a:cd:98:a7:05:69:f4:57:b5:f9:7c:79:c8:96:2c:2f:
         eb:44:25:d0:e9:39:c4:e6:78:3a:19:09:5f:a4:f8:33:35:a5:
         1f:d2:01:73:81:79:1a:3f:82:a2:0d:e1:6c:bd:ba:eb:fc:ad:
         bb:a6:59:97:d7:cb:63:8d:5d:4d:f0:9d:02:2f:33:35:12:e3:
         9b:61:11:a5:46:65:16:2e:83:be:e7:24:df:81:bf:60:6a:76:
         2b:81:b4:14:a9:ed:df:a1:06:26:4a:65:54:13:23:9b:19:19:
         7b:2a:32:df:01:4a:34:c3:0d:9f:9d:20:e5:d0:8c:93:bc:db:
         ad:ff:ea:6d:b3:e0:b5:b8:2b:87:70:b8:f7:f5:33:11:24:39:
         76:98:f2:3a:d0:70:a4:43:bd:5a:fd:3b:67:5f:11:fd:81:49:
         09:05:c8:28:77:24:2b:3a:db:4b:6c:bf:a9:73:a3:cc:2a:2c:
         c4:09:3d:65:24:c9:0f:6f:55:95:1b:65:25:d7:fe:f7:38:52:
         2c:e3:6f:22:c0:5b:68:61:2d:c3:cf:c2:78:d1:96:ec:ac:99:
         fa:95:17:f7:79:ee:df:47:e8:9d:f5:a9:03:19:1d:70:24:1a:
         46:26:68:ff
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUUsf2WFAis/zFYlH+vThT4RKirucwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDY2NzIwYzJjNTMwNTM3NDg2OTExZDFhNDJlYTg3YzI1
MmY2ZGJjN2Q3YmMyMTE4NTAwHhcNMjUwODE3MTYyMTU5WhcNMjYwODE2MTYyNjU5
WjAzMTEwLwYDVQQDEyhENUQ3RkM5Q0VGQkYyOTMzRTUwOTBFQTg3RDE2Q0RFQ0Iz
RTg0OUU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ICZAT6y92G
fP8xDR1Cz9yfGnh22EMeu8Y2R7jLoTipU1FzzWbhXM65t5x6v1be8vHReLGvnBRw
l2JAe3IrzOFjhj4zmaFJexi6sOkqwY3OLlNiIli/Yvy9O0pmhju/kBXt9psKz6Re
NiPHf39G9L81WNZ+zvUF1W0R/rIz5Fch2Ic9lwotuqqgpUmIw4vSABuk0hJ35oRm
GRTE6j91RqBHB/gknT0D4CwCq0djXb0eU32wFxoauNhzRvtf/xc9QL/5Ca7lmtSy
NhdDDuiL1D8BzBS7aFFOtvNa3kYokMHSZWWrbH7MlWu0EV2UDPA3TfmMeX8cZd53
9BiAWNYTyQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNXX/Jzvvykz5QkOqH0Wzeyz
6EnmMB8GA1UdIwQYMBaAFH5siClRU4l+u8EZBxa+zoSl9+ixMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4NGZhYTMxZjE3LzAv
N0U2Qzg4Mjk1MTUzODk3RUJCQzExOTA3MTZCRUNFODRBNUY3RThCMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2UzZjIxYmQ5LTI5MTMtNGQyMy1iOWQxLTIwZGViOWI0ZmM3Zi9kNjY3
MjBjMmM1MzA1Mzc0ODY5MTFkMWE0MmVhODdjMjUyZjZkYmM3ZDdiYzIxMTg1MC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4
NGZhYTMxZjE3LzAvMzczNDJlMzEzMjMwMmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKeBAwDQYJKoZIhvcNAQELBQADggEB
AKHBiYAbwFIJZjF91fIuAsICu8chOs2YpwVp9Fe1+Xx5yJYsL+tEJdDpOcTmeDoZ
CV+k+DM1pR/SAXOBeRo/gqIN4Wy9uuv8rbumWZfXy2ONXU3wnQIvMzUS45thEaVG
ZRYug77nJN+Bv2BqdiuBtBSp7d+hBiZKZVQTI5sZGXsqMt8BSjTDDZ+dIOXQjJO8
263/6m2z4LW4K4dwuPf1MxEkOXaY8jrQcKRDvVr9O2dfEf2BSQkFyCh3JCs620ts
v6lzo8wqLMQJPWUkyQ9vVZUbZSXX/vc4UizjbyLAW2hhLcPPwnjRluysmfqVF/d5
7t9H6J31qQMZHXAkGkYmaP8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:34:56 2025 by rpki-client