Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e203134363138.roa
File:                     37342e3132342e3232302e302f32322d3234203d3e203134363138.roa (raw, json)
Hash identifier:          JQIDHN7420xILnMXmp6bdViHsBSw2njPq55xRdaDt2U=
Subject key identifier:   D9:7C:28:D7:E4:99:D9:0B:A1:8D:5E:91:B0:DF:B3:7F:B9:51:7B:72
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       130FE8A6FACCD8FF3583EB735DD48614ACF35CAD
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e203134363138.roa
Signing time:             Mon 02 Nov 2026 18:08:57 +0000
ROA not before:           Mon 02 Nov 2026 18:03:57 +0000
ROA not after:            Mon 01 Nov 2027 18:08:57 +0000
asID:                     14618
IP address blocks:        74.124.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 03:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0f:e8:a6:fa:cc:d8:ff:35:83:eb:73:5d:d4:86:14:ac:f3:5c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Nov  2 18:03:57 2026 GMT
            Not After : Nov  1 18:08:57 2027 GMT
        Subject: CN=D97C28D7E499D90BA18D5E91B0DFB37FB9517B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:d0:54:b2:2a:63:c1:69:2b:da:34:c9:02:
                    22:36:92:b0:65:d0:be:5c:56:81:9c:66:74:04:6f:
                    eb:60:90:56:e4:20:27:14:d4:cd:2a:a9:38:10:32:
                    0c:59:f8:68:67:d8:e4:96:09:07:e4:a9:0c:4e:28:
                    c2:16:fc:3c:6a:0f:3d:d0:38:4d:46:5d:00:10:ce:
                    87:4a:01:63:74:32:93:4d:6b:69:28:80:8d:3d:5b:
                    25:c7:d9:44:9e:26:0b:56:4a:6d:1f:06:68:27:b1:
                    99:5f:42:f4:00:0c:89:5f:7c:55:1b:ae:37:26:18:
                    77:c2:d9:d5:74:3b:a2:a5:e1:3f:d2:b4:4b:3d:7e:
                    03:de:fa:48:b8:e8:2d:18:d9:1b:0d:76:4a:b4:a1:
                    65:a4:1f:ab:26:63:00:ad:f7:52:21:02:de:d6:5d:
                    0a:26:c4:f0:3f:13:7d:c4:4a:72:c6:25:48:ff:e4:
                    1d:c5:65:29:15:01:85:04:eb:e4:67:bc:fa:f0:68:
                    5f:62:1b:c3:8b:e9:49:c2:4e:52:06:5b:8a:8e:b2:
                    a8:49:13:62:69:d2:18:47:14:b3:40:58:92:be:fa:
                    45:a7:40:c0:12:cb:bd:4a:4f:8d:cb:40:5b:0d:94:
                    03:a9:51:77:07:fc:ec:5d:96:d4:0d:4b:4b:b0:56:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7C:28:D7:E4:99:D9:0B:A1:8D:5E:91:B0:DF:B3:7F:B9:51:7B:72
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:8b:2a:47:e9:78:4d:f8:ff:74:1f:9a:2a:58:9c:ca:a3:
         e7:60:16:0c:87:f7:52:fb:63:c3:a9:98:9c:9b:7a:47:4f:44:
         2f:5a:98:b8:39:07:75:3f:83:24:c5:e4:da:e3:91:2c:13:9a:
         10:b5:ae:e9:89:35:95:ba:60:0d:03:88:87:6c:d4:27:13:a1:
         84:2a:d5:2b:99:eb:6c:65:8a:0d:b6:ae:7d:00:fe:52:39:69:
         ba:c1:ad:f3:73:c1:87:2d:d6:2c:a0:65:eb:56:42:c0:e3:84:
         b4:71:0f:70:99:7c:3c:77:ec:bd:9f:b3:2c:b2:16:b7:df:cb:
         f5:21:9a:36:20:66:9a:74:b2:1f:ce:0f:86:3a:da:cd:9f:0f:
         42:9f:03:5d:f7:ef:b3:a3:a7:01:fe:b1:ec:e8:c6:f7:b8:8f:
         4a:9d:25:4d:70:3b:6d:40:d2:0f:0e:dd:db:4e:3b:9f:6a:46:
         2c:8e:47:ca:43:97:c5:27:74:6e:d3:06:3e:66:77:60:c3:65:
         40:f1:af:af:10:d6:7e:0e:f3:f8:49:7b:3c:84:68:b7:e6:71:
         a9:6e:f0:61:2c:ff:bb:4c:80:a2:7d:87:81:dd:80:06:db:06:
         5f:b9:5d:b7:bc:86:51:74:98:29:13:11:6d:b2:44:97:cd:f9:
         1d:48:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:08:36 2026 by rpki-client