Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e2039333034.roa
File:                     37342e3132302e31362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          brBi7iJDA45vpJy85LO6pKPAlBcJR8BXxczO+giF4wg=
Subject key identifier:   D3:9A:28:B1:40:62:82:D7:F7:1F:A4:BF:48:F7:D7:E2:BB:0A:57:D0
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       26A83A44004870CDC090D4037E3CCB7BBCC29CB1
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 19 Oct 2025 12:52:31 +0000
ROA not before:           Sun 19 Oct 2025 12:47:31 +0000
ROA not after:            Sun 18 Oct 2026 12:52:31 +0000
asID:                     9304
IP address blocks:        74.120.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a8:3a:44:00:48:70:cd:c0:90:d4:03:7e:3c:cb:7b:bc:c2:9c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Oct 19 12:47:31 2025 GMT
            Not After : Oct 18 12:52:31 2026 GMT
        Subject: CN=D39A28B1406282D7F71FA4BF48F7D7E2BB0A57D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:e2:c2:d1:f1:eb:84:db:5c:72:ff:a8:84:
                    bd:88:0c:56:25:5d:2c:97:d2:70:d2:05:36:12:a4:
                    0d:44:fa:9d:f4:50:3b:06:51:af:57:ec:96:2e:48:
                    37:84:2e:6c:fa:06:98:2d:79:57:a3:78:0d:91:f4:
                    cb:34:d5:cf:57:67:a2:9e:ea:7f:12:44:43:93:e5:
                    55:25:87:96:38:d5:d4:e8:aa:9d:3f:94:35:16:06:
                    8a:ac:fe:12:bb:81:3e:fb:ba:f2:eb:a9:e0:a2:9e:
                    05:fe:14:b6:1f:8e:ad:a6:ce:6e:80:d7:c5:b9:6c:
                    1f:1b:9a:b6:66:9a:15:6e:a5:8f:c1:20:ef:a4:a1:
                    f1:ee:0a:70:85:87:67:cf:73:cd:f0:56:65:de:2b:
                    0c:01:2d:f0:d9:10:f0:ff:15:74:5c:53:95:65:a4:
                    5a:de:18:03:8a:4b:2a:40:22:04:18:98:64:00:be:
                    2f:f6:d0:cc:57:07:0a:a2:7b:f9:0a:99:e2:20:24:
                    34:a7:6f:a1:ac:e7:42:eb:46:f5:50:12:44:65:63:
                    ba:b9:bc:e1:70:9d:a0:80:a4:45:0d:b8:59:e6:bc:
                    73:db:78:fc:55:0c:16:a7:01:1b:d6:69:0d:78:35:
                    9c:b5:36:0b:16:75:d8:0e:65:17:67:2c:f7:a9:f6:
                    a0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9A:28:B1:40:62:82:D7:F7:1F:A4:BF:48:F7:D7:E2:BB:0A:57:D0
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ee:c4:31:51:be:3a:d5:77:94:a6:39:d8:29:12:fd:3b:29:
         61:37:f5:ec:40:a9:8c:40:0a:ba:f1:31:75:75:73:56:4d:e7:
         0a:13:99:5f:5c:fc:6b:8d:c2:04:b1:02:3f:6c:9a:85:75:b2:
         84:b9:dd:f5:88:19:42:b9:3e:d1:15:b4:d1:ec:c2:90:7c:ea:
         6c:f6:19:37:b9:91:02:58:cc:19:67:48:33:7c:ff:0b:c8:68:
         e4:bc:76:50:72:00:53:14:16:bf:19:63:ad:83:6a:73:59:6c:
         8f:8f:b7:79:49:76:e4:07:24:13:21:a4:aa:d7:88:7a:33:36:
         29:34:c0:d6:b5:38:43:fa:a6:ef:71:a2:5c:66:0b:13:4e:2e:
         79:44:79:12:93:48:27:e4:a6:01:4b:3f:8b:b3:4a:58:2e:20:
         13:ca:78:b1:73:9f:36:e4:6e:5e:60:44:d3:d3:ae:6a:c4:a5:
         07:7e:b7:ef:d2:fe:df:ec:43:a6:6f:ae:10:70:bb:97:5e:82:
         05:fb:fd:8b:fa:63:72:b0:c7:b2:94:92:d9:57:47:bf:89:18:
         bd:cc:3a:5d:df:70:56:d2:33:19:b6:58:7f:14:13:dc:7c:5c:
         b2:26:d2:92:c6:a0:6f:f8:fc:0c:30:9a:8c:b4:84:b2:bc:1a:
         d8:ef:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:22:16 2025 by rpki-client