Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e31372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          8PlHoCBlB7cTlk7V0wLc9UnLIXTbDbC0Hqpqlg5h+bs=
Subject key identifier:   50:10:26:87:71:39:01:82:FC:58:AF:D8:DB:31:42:3B:55:C3:4C:36
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       57A278014CBFF03956D7C06B6D53B372C4A1884E
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa
Signing time:             Sun 19 Oct 2025 12:53:33 +0000
ROA not before:           Sun 19 Oct 2025 12:48:33 +0000
ROA not after:            Sun 18 Oct 2026 12:53:33 +0000
asID:                     834
IP address blocks:        74.120.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a2:78:01:4c:bf:f0:39:56:d7:c0:6b:6d:53:b3:72:c4:a1:88:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Oct 19 12:48:33 2025 GMT
            Not After : Oct 18 12:53:33 2026 GMT
        Subject: CN=5010268771390182FC58AFD8DB31423B55C34C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:9f:5b:f2:cf:5c:7c:4c:a5:cb:59:e7:1c:
                    8d:3d:39:a2:2a:cb:fe:c2:d2:ba:fd:32:f2:80:a1:
                    80:e4:b3:45:92:b6:23:ff:b2:5e:e7:03:5e:33:bb:
                    2e:81:19:5c:5c:93:ad:8a:24:81:3f:95:a5:5d:3c:
                    cf:7f:d2:ea:56:e5:91:5e:33:c1:14:6f:3a:e0:af:
                    35:c0:05:0e:60:3b:b2:d0:ba:17:4b:ec:d1:50:54:
                    1f:64:82:f2:38:62:cd:b9:13:44:7c:0e:8f:6a:31:
                    8d:5e:aa:0b:71:f8:56:c4:1f:dd:54:c2:b5:0f:bf:
                    9b:15:41:08:69:a7:da:f6:e3:7c:29:8a:e5:4f:8e:
                    89:9d:38:95:3d:3f:bf:90:b0:6c:95:5b:07:d7:c3:
                    87:a3:46:28:ec:8f:fe:65:67:d1:8a:9c:88:f0:99:
                    33:97:0a:d0:09:1c:75:ab:f4:c8:fb:c7:b9:3d:ed:
                    e8:be:23:ef:ee:5d:3c:70:7b:24:30:33:15:82:7e:
                    f4:da:99:f3:9f:2f:f1:dc:f9:0d:6f:79:16:66:55:
                    dc:ad:42:17:a5:a4:0d:d8:99:ef:8a:87:8e:f8:71:
                    2a:1c:d6:db:2a:45:d5:ac:0f:b6:e1:e2:b2:3c:a5:
                    d6:13:49:76:2e:6f:fe:76:59:78:5c:54:d9:f7:5e:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:26:87:71:39:01:82:FC:58:AF:D8:DB:31:42:3B:55:C3:4C:36
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:25:c6:36:67:f4:7d:fc:31:30:70:3b:fb:17:44:03:a8:d7:
         85:68:92:3e:d4:7c:98:0d:98:a1:24:2c:71:da:c2:15:2f:a6:
         e9:7e:fc:88:66:17:ee:38:1b:29:b6:f3:68:9d:af:50:8a:e4:
         93:a7:1f:5c:df:e5:71:7c:78:0b:8e:f2:bc:02:c8:57:28:2f:
         cd:34:80:3d:61:80:e5:ce:51:42:00:ff:71:36:01:dc:bf:d9:
         e6:06:b7:07:89:0d:f2:e4:3a:99:37:6e:d0:7b:3f:17:b7:bd:
         d0:4e:4e:5f:13:f6:ca:ae:e6:f0:6f:23:83:93:96:aa:6b:1c:
         f9:fd:e8:2e:94:ca:41:02:2f:13:f5:9f:0c:34:be:d9:e8:2f:
         ae:1a:57:02:a9:3d:f0:8a:3d:49:dc:2f:c7:55:96:a1:49:61:
         17:64:75:63:84:26:26:9d:66:48:f7:01:a9:e8:e7:69:46:e3:
         bc:98:cd:a5:64:30:11:53:cd:81:12:99:de:35:ec:70:0c:92:
         59:5f:06:ab:02:d3:a9:c9:e2:12:e6:83:d2:bb:94:22:ff:fd:
         d8:cc:cb:ab:9b:71:06:7e:f5:4f:ba:81:79:d5:4e:35:f4:cf:
         73:41:73:88:1b:a7:fe:dd:e1:c4:e1:70:41:9f:0b:00:d9:4a:
         3f:34:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:51 2025 by rpki-client