Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e2039333034.roa
File:                     37342e3132302e31392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          HBAxolthZDAyDwvwYtUZgXu90Fobv4jT3Y+j2LFjEbQ=
Subject key identifier:   64:1C:4D:05:1C:EE:96:50:48:96:9D:D6:33:3A:4A:91:C0:D0:A0:65
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       236047B0334499A054255D6FA586471774E898A5
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 19 Oct 2025 12:52:31 +0000
ROA not before:           Sun 19 Oct 2025 12:47:31 +0000
ROA not after:            Sun 18 Oct 2026 12:52:31 +0000
asID:                     9304
IP address blocks:        74.120.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:60:47:b0:33:44:99:a0:54:25:5d:6f:a5:86:47:17:74:e8:98:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Oct 19 12:47:31 2025 GMT
            Not After : Oct 18 12:52:31 2026 GMT
        Subject: CN=641C4D051CEE965048969DD6333A4A91C0D0A065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:4f:c6:b9:93:ce:66:03:52:a2:f4:46:e1:
                    f9:b7:9f:3b:8a:bd:d9:8d:c5:8c:a7:b5:4b:2b:a2:
                    46:25:32:04:a7:87:38:b7:29:d5:9f:a9:35:62:dd:
                    87:ac:30:8e:7d:85:39:fa:39:e7:3f:81:2b:4d:09:
                    50:bd:cf:e4:df:57:b4:59:6f:df:65:3a:41:1d:85:
                    b7:b1:46:d6:5b:ba:5d:08:00:25:23:1a:81:4d:95:
                    58:ac:d7:d1:b0:5e:88:e7:fb:a8:3c:e6:44:d2:57:
                    08:9c:f1:30:98:ad:6c:e4:80:ae:6b:34:98:9a:3f:
                    19:9a:d0:ce:ce:19:08:c7:e3:bf:1c:1d:9d:c0:24:
                    ea:c2:55:35:9b:65:73:d6:a2:f8:7a:a2:78:39:9a:
                    79:69:39:e7:52:ea:5d:d8:5a:22:41:1f:be:cd:b1:
                    b3:01:6e:0a:7a:3b:dd:c8:97:d6:e4:2e:34:50:e3:
                    ca:51:cf:42:34:ba:9d:de:68:67:72:4b:2d:51:79:
                    9c:9f:15:ee:46:2a:38:94:5d:36:6b:12:50:7e:27:
                    bf:df:6a:85:29:ce:7c:4d:0c:03:8f:49:0e:e8:e9:
                    cb:37:1a:02:8b:4e:7f:51:dd:ee:3f:f5:cc:da:8d:
                    72:24:4b:ca:b7:4c:bb:cd:84:3b:d7:b2:11:22:85:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1C:4D:05:1C:EE:96:50:48:96:9D:D6:33:3A:4A:91:C0:D0:A0:65
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:89:7b:19:5f:e7:3a:fc:78:07:55:fe:d5:ce:8b:23:41:f3:
         94:20:cd:ca:bb:1f:d1:68:cb:b0:05:24:8c:18:8e:0e:e0:de:
         fb:95:31:86:b7:6e:52:2c:c7:7f:26:d4:0f:ed:a6:b2:7b:fb:
         ab:f7:22:1e:dd:0d:50:fc:c3:8c:82:bb:1e:fa:21:d1:4b:43:
         d1:41:53:06:62:8b:81:42:03:12:1f:91:ea:37:85:5d:b7:ad:
         6a:37:e7:c9:52:a8:1a:b2:d4:1f:eb:eb:55:5c:5a:c4:eb:ee:
         94:a4:1c:f5:98:d4:a7:97:3c:2f:70:4c:82:a4:03:2b:e9:53:
         68:aa:6d:b8:8e:93:11:50:da:72:86:fe:a0:3f:5d:00:ca:9a:
         e0:7f:c7:ae:01:bd:82:81:02:8d:1a:be:0d:24:1a:44:55:4c:
         88:23:a1:68:ad:71:10:52:df:ce:f9:54:10:51:9c:80:2e:8c:
         57:04:56:33:dc:90:e7:10:91:db:18:73:28:22:07:48:7f:5a:
         d6:4a:26:c8:35:7f:97:33:ac:03:c4:de:13:10:ce:b8:7d:e2:
         18:ab:bf:7b:72:4c:3d:24:62:4d:53:1a:e7:c0:e6:d5:d2:fa:
         d9:d2:79:e8:23:d6:78:a5:d7:b8:61:98:41:32:f9:bb:84:de:
         0a:e7:4e:3c
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUI2BHsDNEmaBUJV1vpYZHF3TomKUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDY2NzIwYzJjNTMwNTM3NDg2OTExZDFhNDJlYTg3YzI1
MmY2ZGJjN2Q3YmMyMTE4NTAwHhcNMjUxMDE5MTI0NzMxWhcNMjYxMDE4MTI1MjMx
WjAzMTEwLwYDVQQDEyg2NDFDNEQwNTFDRUU5NjUwNDg5NjlERDYzMzNBNEE5MUMw
RDBBMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3xPxrmTzmYD
UqL0RuH5t587ir3ZjcWMp7VLK6JGJTIEp4c4tynVn6k1Yt2HrDCOfYU5+jnnP4Er
TQlQvc/k31e0WW/fZTpBHYW3sUbWW7pdCAAlIxqBTZVYrNfRsF6I5/uoPOZE0lcI
nPEwmK1s5ICuazSYmj8ZmtDOzhkIx+O/HB2dwCTqwlU1m2Vz1qL4eqJ4OZp5aTnn
Uupd2FoiQR++zbGzAW4KejvdyJfW5C40UOPKUc9CNLqd3mhnckstUXmcnxXuRio4
lF02axJQfie/32qFKc58TQwDj0kO6OnLNxoCi05/Ud3uP/XM2o1yJEvKt0y7zYQ7
17IRIoVPEwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGQcTQUc7pZQSJad1jM6SpHA
0KBlMB8GA1UdIwQYMBaAFH5siClRU4l+u8EZBxa+zoSl9+ixMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4NGZhYTMxZjE3LzAv
N0U2Qzg4Mjk1MTUzODk3RUJCQzExOTA3MTZCRUNFODRBNUY3RThCMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2UzZjIxYmQ5LTI5MTMtNGQyMy1iOWQxLTIwZGViOWI0ZmM3Zi9kNjY3
MjBjMmM1MzA1Mzc0ODY5MTFkMWE0MmVhODdjMjUyZjZkYmM3ZDdiYzIxMTg1MC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4
NGZhYTMxZjE3LzAvMzczNDJlMzEzMjMwMmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKeBMwDQYJKoZIhvcNAQELBQADggEB
ADaJexlf5zr8eAdV/tXOiyNB85Qgzcq7H9Foy7AFJIwYjg7g3vuVMYa3blIsx38m
1A/tprJ7+6v3Ih7dDVD8w4yCux76IdFLQ9FBUwZii4FCAxIfkeo3hV23rWo358lS
qBqy1B/r61VcWsTr7pSkHPWY1KeXPC9wTIKkAyvpU2iqbbiOkxFQ2nKG/qA/XQDK
muB/x64BvYKBAo0avg0kGkRVTIgjoWitcRBS3875VBBRnIAujFcEVjPckOcQkdsY
cygiB0h/WtZKJsg1f5czrAPE3hMQzrh94hirv3tyTD0kYk1TGufA5tXS+tnSeegj
1nil17hhmEEy+buE3grnTjw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:05 2025 by rpki-client