Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e203136353039.roa
File:                     37342e3132342e3232302e302f32322d3234203d3e203136353039.roa (raw, json)
Hash identifier:          pmw0t1sSyyvqhXjRFFKLl+TCstQ+VyJ1MJEXrYZFysg=
Subject key identifier:   41:04:ED:8D:78:2B:0B:5E:4B:59:C8:C7:62:2B:38:2E:D7:6C:56:97
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       18EAD243C46378DA0C8A76B9E8BF4C8C01D539BD
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e203136353039.roa
Signing time:             Mon 02 Nov 2026 18:08:57 +0000
ROA not before:           Mon 02 Nov 2026 18:03:57 +0000
ROA not after:            Mon 01 Nov 2027 18:08:57 +0000
asID:                     16509
IP address blocks:        74.124.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 03:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ea:d2:43:c4:63:78:da:0c:8a:76:b9:e8:bf:4c:8c:01:d5:39:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Nov  2 18:03:57 2026 GMT
            Not After : Nov  1 18:08:57 2027 GMT
        Subject: CN=4104ED8D782B0B5E4B59C8C7622B382ED76C5697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:21:f7:db:b3:f8:dd:e7:e9:e2:b1:ad:84:
                    4f:64:dd:8b:73:01:dd:0b:e8:64:0e:a8:9c:d3:17:
                    8c:b0:75:ae:f3:3c:03:8e:de:92:17:fa:09:2c:93:
                    d8:24:2b:61:3e:4f:63:06:d0:22:5d:55:e3:18:c1:
                    20:4d:29:23:9d:0e:ed:f8:08:45:e5:82:5a:af:2b:
                    09:04:f9:f8:d3:e6:76:43:bf:9a:75:c6:43:6b:c9:
                    f9:58:bd:4d:c5:4f:ab:43:6d:48:1e:59:10:33:32:
                    70:bd:a8:97:67:4d:a6:8f:f7:8e:bf:05:39:6f:b4:
                    ab:a3:f6:f6:22:bf:85:ad:3f:19:6a:5c:00:97:3a:
                    33:e7:3f:c2:bf:a7:59:a4:28:a8:91:69:a0:d0:1a:
                    e8:de:b3:33:6e:6e:92:5a:04:00:a8:d1:f9:76:37:
                    95:68:95:6c:22:58:9b:aa:94:ce:06:6f:f3:8e:d6:
                    50:83:9e:f5:a2:26:e5:e9:01:96:64:12:54:6d:b5:
                    29:55:31:76:31:cd:4a:99:b6:b2:e2:b8:88:44:6d:
                    f5:d5:ac:00:01:62:85:65:75:58:09:b5:96:2f:86:
                    4d:18:e3:45:b9:95:98:89:c9:f1:61:bd:c2:1e:cb:
                    a3:e1:4f:a7:12:f4:0e:c9:48:8a:7e:69:a7:6b:02:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:04:ED:8D:78:2B:0B:5E:4B:59:C8:C7:62:2B:38:2E:D7:6C:56:97
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:ac:e1:5a:c3:45:c9:06:6a:e1:c9:7b:7c:12:d4:e9:0b:
         53:fb:59:ce:11:f9:33:e2:06:bd:a0:8f:55:40:cf:d5:5a:6c:
         f6:c1:a9:3e:cb:34:a8:0e:08:5f:a8:50:94:60:50:f4:02:2b:
         ae:9a:53:f2:17:bf:2c:fa:30:22:a8:3f:d6:46:06:26:16:dc:
         37:45:6a:df:51:7e:0a:1b:3b:83:a1:d9:d5:24:e3:20:65:10:
         a5:72:1e:39:7b:63:4a:34:5d:50:fa:9c:15:63:35:75:fd:cb:
         d3:81:fc:06:bc:81:bb:86:a8:ee:31:f5:88:6f:db:db:eb:a2:
         92:08:52:22:52:e9:3a:37:88:b1:18:05:2d:64:88:21:7f:ae:
         40:fb:cd:fe:5a:a7:6a:82:4d:75:0b:7d:5b:55:12:9d:b6:f4:
         a8:cc:5e:3a:81:e1:9d:6a:3a:4e:77:64:a9:82:db:0c:44:00:
         65:24:39:9b:ec:57:dd:0c:6d:9e:9b:1c:9c:f8:b2:25:16:56:
         0d:c0:a4:1b:82:9f:1e:cd:5c:28:0f:33:0c:2b:6b:1c:7b:bd:
         80:4c:b2:fc:9d:2d:30:a6:08:8c:46:5c:1b:62:cb:d4:cd:56:
         ba:ad:75:3c:88:99:35:32:0e:3a:38:d2:17:20:90:45:94:c6:
         28:3b:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:38 2026 by rpki-client