Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa
File:                     37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa (raw, json)
Hash identifier:          R6b8isKveojFNaqjGrpvnB4XnVBpccDpKgaZfen/4fg=
Subject key identifier:   94:4C:34:BC:93:C6:A5:EB:2A:17:66:FB:4F:75:FE:1A:1D:D3:FE:01
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       1B5F06EC10C13B1129358BF14A902488C9840176
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa
Signing time:             Sat 12 Jul 2025 06:34:14 +0000
ROA not before:           Sat 12 Jul 2025 06:29:14 +0000
ROA not after:            Sat 11 Jul 2026 06:34:14 +0000
asID:                     401294
IP address blocks:        74.124.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5f:06:ec:10:c1:3b:11:29:35:8b:f1:4a:90:24:88:c9:84:01:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:14 2025 GMT
            Not After : Jul 11 06:34:14 2026 GMT
        Subject: CN=944C34BC93C6A5EB2A1766FB4F75FE1A1DD3FE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:dc:58:17:4e:01:55:37:70:d6:f4:cd:a5:
                    ee:dc:c6:84:e2:52:dc:86:8d:d2:5a:0a:b7:0b:51:
                    a8:6d:c8:00:e6:99:65:59:b1:ea:95:ba:1f:73:1c:
                    3e:55:81:a7:9d:6c:aa:79:f1:07:ec:be:53:73:8f:
                    94:df:4d:a5:49:30:4c:60:d8:d1:eb:4a:c7:21:8b:
                    6b:e8:a7:7e:a9:a6:8d:05:64:60:7e:f0:cd:6f:e5:
                    d8:a4:99:e0:94:d4:4b:c7:31:4f:4d:f9:14:cc:c2:
                    1a:1e:1a:35:0e:e7:6a:8f:31:0e:32:7e:5b:0c:18:
                    a3:65:f2:26:6a:79:05:8b:36:1b:d1:1b:d2:0a:86:
                    96:63:03:7b:ca:17:a7:76:01:c4:42:f8:18:a0:7f:
                    72:71:bf:db:ae:27:3e:0e:a3:67:62:a8:90:18:ad:
                    1c:9e:12:10:b7:69:7d:dc:83:fa:4c:93:c6:43:aa:
                    71:f8:98:ed:5d:4a:5a:b3:9e:7c:b8:ea:85:1c:d4:
                    b0:9a:df:9d:a1:b6:83:a7:d5:02:e0:be:33:2b:b0:
                    2a:94:a6:bf:b1:8f:2b:22:90:63:cc:df:00:5f:74:
                    2a:b7:52:6b:7e:ca:f6:5c:9a:46:d6:38:8f:5b:d0:
                    88:8f:6f:e8:ee:f7:ee:23:be:48:fd:51:6c:b0:22:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4C:34:BC:93:C6:A5:EB:2A:17:66:FB:4F:75:FE:1A:1D:D3:FE:01
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230382e302f32342d3234203d3e20343031323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f6:eb:9e:4d:51:ae:f3:fc:d1:71:09:cc:b6:f8:9a:7b:29:
         ed:b2:cf:27:36:1e:7c:1e:97:d8:8e:87:48:9f:9a:97:74:5a:
         ce:75:d8:fa:a3:9a:b9:7c:f1:06:e9:af:53:a5:03:90:f3:40:
         c4:70:06:fe:aa:23:60:a2:86:73:15:03:5f:95:55:b7:57:5c:
         c8:15:5f:5e:2a:07:81:1e:1e:7b:15:77:28:4d:c9:b4:ba:ea:
         fe:55:6e:69:ed:26:47:61:20:2e:00:41:51:1c:cc:4d:eb:9d:
         cf:cb:e3:0d:5b:20:3f:c7:48:d4:4e:f3:8d:8e:08:a6:96:b9:
         52:fc:8f:57:67:3c:fb:15:3a:7c:a2:c9:0d:66:77:69:9e:40:
         3a:7a:8b:16:a9:cb:12:49:11:d9:cd:cb:37:bf:76:da:da:d4:
         c8:af:34:4a:83:59:e0:ed:72:64:76:7e:04:13:36:56:59:84:
         0c:60:b4:c5:f9:61:c8:6a:3c:7a:3b:a3:ea:fd:e7:48:0a:8a:
         fb:83:e4:8b:99:ea:67:0f:2b:46:b2:82:19:0e:a6:86:10:7d:
         d7:52:85:66:e0:4f:c1:d8:30:4d:f9:6a:7b:55:40:21:13:3c:
         09:ff:d6:f4:28:dd:40:30:c3:41:ac:d4:db:c1:95:ba:5d:f5:
         ab:d3:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:26 2025 by rpki-client