Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230392e302f32342d3234203d3e203236383139.roa
File:                     37342e3132342e3230392e302f32342d3234203d3e203236383139.roa (raw, json)
Hash identifier:          Hz5sVCakTsYBnap+6xPJB13PkguxbCkA06Z4uJk0aDw=
Subject key identifier:   C9:A6:26:95:67:2B:E8:B7:4E:3D:5D:45:A9:FA:59:3A:96:F5:F7:9C
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       7AAB7F38B0919CC0492A45B5E753DC2E824B9BBB
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230392e302f32342d3234203d3e203236383139.roa
Signing time:             Sat 13 Jun 2026 06:36:07 +0000
ROA not before:           Sat 13 Jun 2026 06:31:07 +0000
ROA not after:            Sat 12 Jun 2027 06:36:07 +0000
asID:                     26819
IP address blocks:        74.124.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ab:7f:38:b0:91:9c:c0:49:2a:45:b5:e7:53:dc:2e:82:4b:9b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:07 2026 GMT
            Not After : Jun 12 06:36:07 2027 GMT
        Subject: CN=C9A62695672BE8B74E3D5D45A9FA593A96F5F79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:b6:09:68:4e:8b:48:b2:11:20:81:e9:b7:
                    36:e4:ef:f7:de:0a:94:7b:61:49:7a:c7:38:f7:b4:
                    1e:07:dd:6d:a8:e8:9d:e3:44:f7:47:69:d3:11:96:
                    6b:9b:f5:fc:ae:54:04:81:03:56:6e:49:59:63:49:
                    0c:bd:57:d0:70:cf:b5:6c:56:5e:7c:b9:6f:16:54:
                    e9:53:9f:4b:ac:60:ef:5e:b8:40:ef:c5:4c:7f:6f:
                    34:6b:48:e6:a7:f6:bc:c7:f4:ee:be:fc:07:6f:75:
                    58:20:75:f5:df:2a:a1:6e:0e:5c:ef:cc:8d:f1:07:
                    8a:e1:22:6c:4c:9a:fb:f6:60:79:a4:1b:0a:1f:0d:
                    ea:12:20:36:af:9c:d8:d8:00:eb:fa:4e:63:57:95:
                    44:e3:17:a9:60:da:ac:fa:23:70:c7:20:4c:d5:e6:
                    bf:c2:5c:2c:fd:f2:ec:a6:54:d6:89:3c:a0:6e:17:
                    81:c5:2e:5a:67:3c:d4:e8:8d:5a:a0:a0:5b:16:aa:
                    f6:e6:a2:60:90:96:39:48:ff:9d:a5:4a:23:7c:96:
                    22:50:9e:dd:06:22:2f:66:9a:ce:d4:32:46:81:3c:
                    bf:70:fa:f4:03:13:3b:9c:7c:8a:1b:99:f4:6a:c4:
                    98:5e:04:d6:30:a3:37:ce:c3:94:10:68:02:4d:5a:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:26:95:67:2B:E8:B7:4E:3D:5D:45:A9:FA:59:3A:96:F5:F7:9C
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3230392e302f32342d3234203d3e203236383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:36:29:aa:87:f1:69:0e:e9:60:a3:fd:08:46:d3:3c:07:
         8a:60:a1:f5:a9:fb:ad:50:df:38:c8:8c:24:90:fe:56:fb:59:
         45:5c:ec:3e:b8:66:bc:e2:ed:32:ee:02:30:f0:15:0e:73:cd:
         f9:0c:3d:d6:40:f1:90:41:b0:de:e0:3b:ab:1d:7e:4d:14:93:
         d6:f0:b2:bd:8e:69:49:63:32:8c:f5:89:d0:f5:25:c9:08:10:
         b3:7a:7d:3a:5b:ba:85:42:5d:76:e7:25:a8:f9:f1:7b:63:7c:
         4e:02:db:d1:d6:1c:09:98:96:dc:0d:45:3c:6b:6d:f4:61:06:
         df:de:88:cb:96:8c:6f:dc:c0:bb:39:d0:e8:e6:e5:16:7f:a8:
         8c:b0:95:b6:0c:7d:e9:76:b3:22:25:d3:a1:fd:fa:c6:37:58:
         11:53:ec:86:91:2d:d8:5c:35:e8:61:30:52:e3:50:bd:a6:0a:
         97:e8:e4:33:a9:d4:2b:3b:c4:4a:97:77:0f:cd:24:04:d1:4f:
         2b:d9:2b:bb:b2:a6:69:13:1e:88:b3:8a:b3:19:cd:c9:06:9f:
         e6:35:78:98:29:bc:be:18:04:11:f7:b7:7a:34:df:f2:68:cf:
         40:ce:f6:d4:83:c7:bd:19:1d:3a:ad:21:02:e5:35:c0:2f:a4:
         f3:b0:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:19 2026 by rpki-client