Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32332d3233203d3e203137313339.roa
File:                     37342e3132342e3230382e302f32332d3233203d3e203137313339.roa (raw, json)
Hash identifier:          F+witonCb02N3CgYV3+yKGzsm8sgrDBLYvc/RIHDB9E=
Subject key identifier:   F6:C6:3B:6E:24:C3:D2:E0:91:97:D7:CA:A2:03:45:8D:FB:91:10:EE
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       3822C9FF76D1A02B2C455893B4585E598D396377
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32332d3233203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:14 +0000
ROA not before:           Sat 12 Jul 2025 06:29:14 +0000
ROA not after:            Sat 11 Jul 2026 06:34:14 +0000
asID:                     17139
IP address blocks:        74.124.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:22:c9:ff:76:d1:a0:2b:2c:45:58:93:b4:58:5e:59:8d:39:63:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:14 2025 GMT
            Not After : Jul 11 06:34:14 2026 GMT
        Subject: CN=F6C63B6E24C3D2E09197D7CAA203458DFB9110EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:41:ed:62:86:08:f1:92:a7:c9:ae:b6:7d:
                    63:55:5a:15:c1:6e:f2:80:b0:ad:8c:02:24:95:a9:
                    f8:28:4c:22:7d:55:4e:47:e0:1a:21:26:13:c2:21:
                    8b:3c:e9:ea:9a:eb:cc:c9:ef:8d:81:bb:b5:7d:6e:
                    d0:ad:63:7b:7c:3e:17:70:e3:c5:ba:8a:53:22:a0:
                    cf:49:c6:f1:a9:ef:5e:de:0e:04:f9:f7:a9:ff:d3:
                    c5:41:f5:fa:c5:75:5d:b5:b5:58:01:09:12:86:e1:
                    bb:46:5c:66:6b:9c:88:5d:ae:91:2f:a9:9b:91:7a:
                    98:c0:1b:fb:f4:58:62:13:46:57:7e:b1:28:79:38:
                    a0:76:f8:c2:27:c3:47:c3:c6:04:3c:88:04:07:a3:
                    ef:d9:36:d9:53:09:0a:3c:79:a2:3b:4e:db:81:7e:
                    eb:6a:28:5a:87:f2:38:28:ca:d5:bf:5f:f9:51:0c:
                    9d:eb:3d:f7:f3:9d:d0:98:4c:b9:fb:e2:d3:63:13:
                    78:b8:8e:c6:79:da:ad:3a:ef:41:f3:00:01:82:b4:
                    75:85:e2:c2:9a:40:30:1b:99:ab:ba:2e:57:76:24:
                    ff:b1:4d:80:dc:4d:7f:bd:db:ab:c7:da:78:66:60:
                    50:cc:67:8c:ee:7a:30:ee:a9:79:99:9e:91:37:d6:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C6:3B:6E:24:C3:D2:E0:91:97:D7:CA:A2:03:45:8D:FB:91:10:EE
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32332d3233203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:60:00:75:0c:71:bc:ec:fb:ec:4e:67:0c:f2:82:45:bf:dc:
         12:94:b4:85:64:be:9c:45:ce:fa:14:cd:b2:48:5f:9c:59:ce:
         cd:e4:e5:34:46:bb:4e:5e:d2:7b:84:e8:fb:0a:b5:c3:4d:21:
         17:d1:2e:ff:21:d3:8a:d5:c9:0b:86:8b:56:cf:b7:61:16:a4:
         da:8f:b6:0a:1b:23:29:5c:04:0b:6e:39:dc:dc:be:16:6a:f3:
         c1:8b:3b:1b:b9:d9:1d:53:60:a7:eb:d9:a1:b0:da:34:d6:3c:
         e0:16:0a:30:95:26:25:31:46:10:c4:ab:a5:e4:c6:be:d8:96:
         03:70:6c:63:b1:a4:24:16:58:3c:a2:4e:93:38:82:fd:74:81:
         0a:0a:f2:cb:e8:52:d6:a9:73:fe:61:2d:11:05:97:eb:9e:2c:
         9a:5a:9c:dc:95:a8:7c:95:43:b2:3d:90:fa:be:8b:20:8b:40:
         0f:e3:80:dc:32:f3:29:71:80:2f:b0:ac:25:0a:0d:31:c8:c4:
         03:41:53:4c:d8:f3:92:67:1b:05:29:fb:85:9f:78:55:d4:a4:
         2f:fb:90:69:94:16:0d:0e:50:d8:74:4b:d9:29:09:b2:8d:a2:
         89:dd:27:88:4e:fb:92:d2:4f:5b:34:cf:21:cf:b0:4d:a0:a8:
         36:df:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:33 2025 by rpki-client