Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
File:                     37342e3132302e3132302e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          cwfdP3Kbn44SSbeAwXfE/O0oAR10U9r5KVPq//kcSrQ=
Subject key identifier:   68:2C:3F:94:80:EF:94:63:BC:2B:DA:E4:43:6A:40:FB:84:F2:3B:5D
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       383567CD6A29C76CAA4EA1BFEDFB11B21ED6E593
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 24 Oct 2025 21:30:39 +0000
ROA not before:           Fri 24 Oct 2025 21:25:39 +0000
ROA not after:            Fri 23 Oct 2026 21:30:39 +0000
asID:                     8888
IP address blocks:        74.120.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:67:cd:6a:29:c7:6c:aa:4e:a1:bf:ed:fb:11:b2:1e:d6:e5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Oct 24 21:25:39 2025 GMT
            Not After : Oct 23 21:30:39 2026 GMT
        Subject: CN=682C3F9480EF9463BC2BDAE4436A40FB84F23B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:4c:f1:ae:b7:1c:8e:74:37:20:a2:de:82:
                    2d:b8:b6:ce:98:19:d5:17:99:31:3b:6c:bc:14:1e:
                    b6:c8:90:f5:f7:96:2a:e4:a4:fc:50:50:d3:6a:1d:
                    f5:b9:32:83:d2:e9:a4:b7:7c:d1:5e:98:72:b8:7a:
                    a0:80:04:15:fd:6a:7d:e2:7e:31:24:a5:8e:61:36:
                    67:c5:cb:64:44:5b:84:d5:07:86:78:20:ed:0f:2a:
                    5a:2e:0b:d1:49:48:2c:2a:1f:33:7c:4a:88:6a:e4:
                    b1:f3:06:7e:9c:bb:cd:ad:56:17:90:f2:28:64:46:
                    4e:58:16:c0:a1:c3:3f:41:13:1e:d3:24:f5:de:9b:
                    00:7f:d3:65:27:72:b3:7e:19:37:c2:05:04:ef:32:
                    06:84:65:30:df:e0:9d:f6:13:ca:54:f8:fa:ee:06:
                    a0:a5:40:ab:7f:61:43:87:1c:09:ce:79:23:a2:4b:
                    26:fb:b9:a6:50:4e:ed:e2:27:d0:b7:7c:f3:1e:0b:
                    aa:80:31:79:3e:fc:88:7e:ea:d6:6a:39:26:f6:b2:
                    47:a2:5c:84:3d:1d:b0:1c:f5:49:6e:cb:23:cb:b8:
                    87:8f:00:6c:33:e7:4b:35:c8:94:32:9d:a3:89:38:
                    f1:40:90:01:4f:bf:33:d7:d8:65:3d:4c:91:47:39:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2C:3F:94:80:EF:94:63:BC:2B:DA:E4:43:6A:40:FB:84:F2:3B:5D
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:51:90:92:76:1d:26:f1:77:c8:b4:9b:b5:b4:4f:9a:f5:95:
         79:60:17:fd:a1:f5:5c:fe:2c:33:96:f8:7b:02:cc:b6:d0:70:
         6b:5b:37:86:04:81:71:73:81:dc:3f:11:63:0a:e5:ff:06:bd:
         a3:70:db:fa:73:8d:d2:bd:74:33:de:35:f1:a7:cb:76:7c:1f:
         49:fd:fe:b1:a0:8e:42:30:fb:7c:e4:33:b1:9f:24:68:d2:b1:
         7a:f0:57:cd:bd:ad:2c:29:1c:e4:b4:c7:86:9c:1e:98:cd:4f:
         cb:6d:a8:0c:a4:b0:23:5b:7a:23:93:e3:95:bb:d3:13:cc:62:
         91:8f:23:f4:4e:2c:62:45:76:d1:f6:51:5b:f2:76:27:c5:6b:
         4e:88:e0:e3:1e:8b:4c:35:f8:ce:13:56:d5:6d:91:83:93:26:
         33:f3:ff:9a:e1:ff:cf:ba:ad:6b:1c:a9:53:29:eb:02:1b:33:
         a8:30:2c:30:f0:94:d3:67:15:0e:9e:31:7e:b9:69:c2:06:86:
         41:1a:9e:8e:95:46:6b:2b:a5:23:af:8f:e6:a7:35:0c:ff:06:
         2a:58:fc:98:db:67:f8:bf:8e:f2:5c:b7:5d:4a:b9:2e:a4:7f:
         30:a7:fc:37:29:c3:9e:91:36:4c:aa:7a:55:34:65:3a:a7:f5:
         f5:22:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:30 2025 by rpki-client