Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20323032373336.roa
File:                     37342e3132302e3132332e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          2N3SNZvBgR6QIyumoQ4Tf0UWof53Su6vjiLrusRaI/U=
Subject key identifier:   F2:80:4F:20:81:C1:7B:CA:5A:30:D0:AD:71:93:08:78:B7:78:AF:3F
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       26FF7209780BA80AC85E59DA9E1D0B34E1CD2521
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20323032373336.roa
Signing time:             Sat 05 Jul 2025 15:54:58 +0000
ROA not before:           Sat 05 Jul 2025 15:49:58 +0000
ROA not after:            Sat 04 Jul 2026 15:54:58 +0000
asID:                     202736
IP address blocks:        74.120.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 02:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ff:72:09:78:0b:a8:0a:c8:5e:59:da:9e:1d:0b:34:e1:cd:25:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Jul  5 15:49:58 2025 GMT
            Not After : Jul  4 15:54:58 2026 GMT
        Subject: CN=F2804F2081C17BCA5A30D0AD71930878B778AF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:c5:94:3e:3c:a4:2e:b8:d7:c9:6b:85:91:
                    48:2b:17:08:8c:6c:40:8b:51:13:4e:8d:41:cc:f4:
                    80:7f:e3:e1:fe:da:7e:14:fa:ac:af:86:e6:80:f9:
                    1f:8e:f5:09:5a:90:4b:11:b5:7c:f1:a4:31:cb:79:
                    6d:2d:2f:7b:d4:35:26:e6:96:95:1b:bd:86:75:27:
                    c4:ca:80:e5:26:ac:b7:38:57:da:9c:47:5d:43:3b:
                    0a:09:99:2a:86:84:6c:20:66:d6:78:92:72:99:24:
                    cb:7c:4a:7b:c7:d7:a1:c6:59:35:e3:21:71:e6:b6:
                    53:88:93:fa:b6:3b:df:1f:eb:76:0c:e5:7b:02:80:
                    a3:a3:14:b8:0a:30:5e:96:40:e0:7a:ed:4d:53:3d:
                    71:77:b3:e5:10:05:0a:8b:71:70:1e:72:d1:dc:13:
                    8c:9a:b3:e2:7f:5f:87:70:0e:5a:11:35:35:94:8a:
                    b2:ea:34:bc:5e:17:20:91:7e:3e:f9:ea:ed:8a:e2:
                    5c:95:30:0f:96:12:f4:db:22:14:ee:46:02:52:da:
                    d9:f8:f1:ef:72:ab:02:b3:b4:b6:4a:ee:f5:17:1f:
                    60:6d:10:bb:57:05:3a:de:01:6d:31:93:9a:0c:81:
                    77:26:8d:6a:73:78:d5:c9:84:77:34:2a:b2:c5:c5:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:4F:20:81:C1:7B:CA:5A:30:D0:AD:71:93:08:78:B7:78:AF:3F
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:0d:11:8d:44:c9:86:d8:08:d5:7e:4a:94:ca:eb:38:de:
         34:e0:b6:c3:8e:a8:c9:90:1f:b7:38:05:8f:5c:2f:d6:30:f4:
         54:36:f3:68:d5:d0:a5:77:24:a9:39:30:86:07:60:e5:cc:3f:
         47:4a:a8:79:11:41:3c:46:45:bf:e4:b6:6e:ff:fa:de:7b:bb:
         c5:1a:d4:a4:29:29:84:67:da:40:d6:f3:ad:6a:1c:a2:00:b5:
         a8:b3:ef:82:4b:aa:eb:c6:57:6f:0e:a4:2a:8a:94:20:19:64:
         4b:7c:43:33:4e:ed:54:18:64:01:48:15:7e:9d:3f:01:7c:b6:
         f3:99:56:ec:49:83:58:48:bd:b7:5e:7d:de:68:92:c0:dc:bb:
         b3:72:e7:03:e8:e4:1b:01:4c:5d:15:10:fc:6e:26:b4:59:c9:
         85:8e:81:55:a3:cb:6a:2c:68:63:fe:27:4b:a9:ff:01:00:85:
         b0:6a:96:dc:61:fa:be:f4:b6:ce:df:30:a4:38:30:9a:37:2b:
         43:08:20:84:31:0d:5f:10:08:00:67:3c:06:76:88:99:ea:62:
         cb:54:33:09:83:c2:b3:b9:24:61:47:56:f8:7f:11:04:f4:00:
         cc:ec:37:4b:8f:13:00:61:f5:67:6e:c6:57:67:65:90:f9:09:
         aa:b1:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:00:35 2025 by rpki-client