Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e2039333034.roa
File:                     37342e3132302e31392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          +KCcXQoi1IwSIKUdtRDyERQVvyHZjF4nKB0waFUbx2o=
Subject key identifier:   18:AE:81:89:D9:52:5E:51:0E:FC:A7:64:76:06:44:A3:D4:F7:F3:9F
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       298AB96D8309175EFE340B70BA3E33D7E8E65C0F
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 17 Aug 2025 16:26:59 +0000
ROA not before:           Sun 17 Aug 2025 16:21:59 +0000
ROA not after:            Sun 16 Aug 2026 16:26:59 +0000
asID:                     9304
IP address blocks:        74.120.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8a:b9:6d:83:09:17:5e:fe:34:0b:70:ba:3e:33:d7:e8:e6:5c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Aug 17 16:21:59 2025 GMT
            Not After : Aug 16 16:26:59 2026 GMT
        Subject: CN=18AE8189D9525E510EFCA764760644A3D4F7F39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:26:2f:24:9f:f5:49:60:97:6c:c7:f2:ca:
                    85:44:66:8a:86:17:92:ff:fe:e9:57:a2:ad:ba:9f:
                    78:dc:c3:d4:70:5c:61:7a:0e:4a:2f:0e:d4:57:d4:
                    f5:d2:89:c1:aa:8c:1f:42:7d:e7:57:95:a3:63:f7:
                    50:1b:5a:1b:18:57:5c:15:5a:c6:b7:d5:f3:e6:35:
                    f6:72:93:84:0b:8c:3a:73:ca:3b:d8:76:76:db:64:
                    bf:10:b6:36:c5:3b:4f:7e:db:69:36:11:2c:a4:74:
                    43:e9:a9:a2:76:98:1d:38:af:8a:55:7b:ad:e3:a3:
                    4b:36:08:9c:93:b6:32:c8:78:cc:c9:d3:95:de:6d:
                    ab:78:f8:8c:94:71:24:55:03:0c:59:86:b8:03:5a:
                    36:a2:cc:cd:cb:8a:7f:7b:b0:a4:b7:46:3f:23:5c:
                    00:dd:73:34:e6:d5:a1:53:be:d2:38:84:0c:70:88:
                    b5:21:06:5f:c5:e8:b9:50:b8:6c:c5:ba:d4:c7:f1:
                    a5:ec:c0:c5:df:a4:19:61:26:3c:22:e5:ef:06:27:
                    dc:a7:c8:e2:e9:a2:6d:b0:03:9f:95:b3:59:31:3e:
                    1a:67:e8:43:6f:6c:0f:29:0e:70:b9:bc:5b:91:41:
                    33:7f:ab:c5:5a:31:64:08:76:af:8a:e1:b3:85:a8:
                    2d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:81:89:D9:52:5E:51:0E:FC:A7:64:76:06:44:A3:D4:F7:F3:9F
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:00:93:77:3a:d1:88:53:26:3c:f9:46:05:79:26:af:f7:
         21:64:d4:a0:31:3a:97:52:dd:61:d5:72:84:8b:46:9a:da:6a:
         56:45:df:b7:26:55:9a:a2:b8:3c:9b:98:a1:df:b8:5d:aa:2f:
         c2:be:d8:25:ba:ad:66:bb:c5:2d:b1:1f:03:d4:b1:b3:5d:bd:
         8b:68:92:88:69:13:1a:9e:61:3e:0c:db:df:d5:a4:26:ce:4d:
         53:d5:8c:55:cc:5f:ae:a4:cc:60:14:77:57:69:19:45:31:e5:
         73:18:f0:f6:d0:e4:0b:be:1a:d4:31:8b:71:78:96:32:f5:9a:
         5e:5c:b6:2a:bc:42:b4:68:4c:f5:11:fb:c5:27:e1:4a:31:6f:
         67:21:65:1b:2b:69:98:70:95:1e:02:77:96:fc:de:d3:3a:d1:
         7b:66:0d:b1:89:6e:cd:53:bc:ba:03:aa:15:df:af:1f:9e:4a:
         04:7c:57:b5:98:24:24:a8:41:ca:4d:15:91:ae:a8:96:c9:1d:
         6c:63:1b:bd:2e:7b:51:ce:07:a6:c2:6a:40:b2:d7:5f:ec:a9:
         e0:6a:5e:98:91:35:ba:48:d5:c7:04:f4:b0:59:1a:0b:18:62:
         47:99:05:7c:80:47:14:ad:9c:f2:de:18:91:76:90:e5:6b:20:
         96:7a:61:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:34:46 2025 by rpki-client