Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa
File:                     37342e3132342e3139392e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          /64YhDyLjOqahFyWYhUPyCglZLPnZ0GaWC130JjnrxQ=
Subject key identifier:   37:A9:A9:1E:DA:42:FA:1D:90:AC:1B:A1:CA:DF:A7:E9:50:BF:CF:99
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       42E44A81E9F8DA68EFE820F11A28EE6AE24E4564
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:15 +0000
ROA not before:           Sat 12 Jul 2025 06:29:15 +0000
ROA not after:            Sat 11 Jul 2026 06:34:15 +0000
asID:                     17139
IP address blocks:        74.124.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:4a:81:e9:f8:da:68:ef:e8:20:f1:1a:28:ee:6a:e2:4e:45:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:15 2025 GMT
            Not After : Jul 11 06:34:15 2026 GMT
        Subject: CN=37A9A91EDA42FA1D90AC1BA1CADFA7E950BFCF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:ef:dc:f9:d8:ff:c9:03:8c:32:52:0b:a8:
                    a2:d2:5d:13:dc:5b:5e:9b:b0:48:ca:47:88:e1:ba:
                    63:63:4a:d9:68:c3:99:7a:f2:9b:8f:2f:4f:d3:b7:
                    29:0e:5b:12:d8:15:0d:da:5b:eb:e1:d6:43:6c:34:
                    b5:ff:a0:53:9b:bf:55:3c:2b:91:9f:ed:60:e4:c8:
                    3c:23:e1:12:fe:24:c4:88:0e:70:84:e2:9e:fc:e6:
                    d3:f6:b5:74:77:78:aa:a6:7e:96:1c:b9:16:71:94:
                    9a:74:f4:86:4d:6a:98:e8:8f:df:1e:a8:1a:fd:56:
                    59:ef:77:d3:e4:a2:de:e9:c4:7f:53:f1:64:df:db:
                    03:8f:3f:4f:dd:2f:1b:74:5c:44:c9:78:2f:a3:23:
                    3d:c9:f0:67:cf:6b:cb:b3:59:ed:c8:58:db:87:02:
                    fc:88:04:e4:f0:fe:73:bb:72:6b:3a:8a:ce:79:e5:
                    3f:3a:68:25:51:08:31:1f:71:c5:00:52:92:73:82:
                    c1:0c:9c:5c:b0:57:58:11:5c:bb:3e:cb:5b:79:20:
                    b5:e1:ce:2a:80:91:0e:0d:df:1f:13:df:1f:40:ac:
                    6f:eb:28:b0:c0:8a:fc:19:50:f3:ff:ec:de:bb:49:
                    bb:29:f2:c0:a6:98:57:63:df:92:64:b0:fa:a2:39:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:A9:1E:DA:42:FA:1D:90:AC:1B:A1:CA:DF:A7:E9:50:BF:CF:99
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:7a:33:5c:e8:a6:ad:03:5a:2a:10:b8:d0:e4:39:68:59:8a:
         8d:b1:a6:51:68:99:e1:5f:41:94:25:a8:50:86:70:4f:6c:1e:
         3c:37:45:62:3a:23:be:5b:51:59:8b:49:e6:ad:bf:6d:9f:4f:
         16:be:ee:01:cc:07:dd:d9:d9:bd:2a:31:e6:28:c6:3f:6b:d3:
         bc:d3:48:28:87:50:bc:54:ac:8e:1f:13:9c:26:9a:fe:a6:01:
         c9:62:8e:fb:5d:c0:c1:37:93:48:90:62:f4:6d:7d:f7:8f:5b:
         99:0e:77:f6:48:d4:73:fd:85:ff:5e:73:73:61:de:87:75:f1:
         0a:15:4c:13:74:7e:11:3f:34:f4:fa:09:62:82:3b:ff:30:b2:
         11:b4:c4:ce:56:8e:a8:28:f9:a2:65:b4:f7:47:4f:3f:bb:32:
         a8:ac:a6:46:ff:a9:c6:59:ce:94:d7:5c:34:ce:40:f9:1b:48:
         8a:16:59:1b:e5:a6:87:2c:57:0d:fd:69:b0:b3:e4:74:0e:d3:
         f7:14:2b:6e:59:b1:14:64:4c:f0:ac:a3:97:c5:22:26:1a:eb:
         24:7b:a3:50:2f:94:08:de:c7:ef:cf:ad:13:98:e4:2e:a8:0e:
         04:64:2a:ea:1f:58:17:44:38:e0:d4:72:69:39:20:77:4d:59:
         4f:ee:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:43 2025 by rpki-client