Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32322d3234203d3e20383334.roa
File:                     37342e3131342e33322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          R4VmqbClusFkzVHB1Z4wORuTbdcg2vlcpU8OO7yEQWI=
Subject key identifier:   B1:A5:46:26:94:A5:F1:7D:E2:69:15:11:65:04:F4:CD:35:98:21:C7
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       0A9E8144EEFCB34D373203808C83D5983BC04A1E
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32322d3234203d3e20383334.roa
Signing time:             Thu 15 Oct 2026 07:00:24 +0000
ROA not before:           Thu 15 Oct 2026 06:55:24 +0000
ROA not after:            Thu 14 Oct 2027 07:00:24 +0000
asID:                     834
IP address blocks:        74.114.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Nov 2026 07:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9e:81:44:ee:fc:b3:4d:37:32:03:80:8c:83:d5:98:3b:c0:4a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Oct 15 06:55:24 2026 GMT
            Not After : Oct 14 07:00:24 2027 GMT
        Subject: CN=B1A5462694A5F17DE26915116504F4CD359821C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:c9:c1:e6:f4:64:33:d5:ec:48:41:4d:22:
                    ce:7b:fa:95:6d:ac:f3:a7:e4:92:9b:bb:b9:15:73:
                    22:d0:64:58:5b:cb:1c:3a:39:2b:95:67:f1:2e:eb:
                    79:34:4f:de:f5:d6:3b:2a:28:68:db:f7:fd:5c:35:
                    75:fd:5a:14:f5:54:fb:1c:84:a4:bd:2b:6f:32:6a:
                    8b:a4:e1:e5:47:a4:e3:a1:4c:cb:bb:35:61:bd:3e:
                    25:da:6b:63:e1:e8:1a:43:ef:e8:0b:e9:04:32:f8:
                    3d:87:9c:08:54:c8:5a:1b:25:cf:b6:f6:86:d8:5d:
                    98:40:7f:c3:0d:e6:32:e3:eb:17:94:60:1c:59:0b:
                    76:cc:ab:2d:fc:3a:8b:02:a0:eb:d8:bd:80:35:5a:
                    aa:f9:c5:cf:8f:49:21:5a:e0:85:43:1c:b3:18:73:
                    7c:fe:8a:30:5d:5f:1f:03:cc:52:4d:ee:97:4d:ce:
                    6c:18:3a:b3:b3:78:32:38:e7:83:8a:9b:d1:b1:c5:
                    ee:09:b4:68:1d:57:82:a5:6f:2d:15:10:56:ba:8e:
                    57:62:4b:94:aa:8f:c3:3c:85:e0:b7:2d:43:e1:17:
                    19:e3:cb:ad:d4:75:a5:f5:d4:91:2c:e4:35:e0:b7:
                    41:d4:c5:bd:ad:84:18:ae:09:37:96:8d:98:48:31:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A5:46:26:94:A5:F1:7D:E2:69:15:11:65:04:F4:CD:35:98:21:C7
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ff:f8:c7:27:bf:f1:b6:90:43:ad:29:d4:98:fe:5d:6e:87:
         6a:2e:71:b4:24:54:d6:ba:4e:bf:c9:52:b9:7a:7e:50:45:f9:
         39:57:92:49:23:ac:fb:67:53:31:8d:e1:2a:3a:b5:b5:9d:28:
         06:26:56:5e:2f:b4:73:b4:e7:ce:9a:39:3b:d9:ea:ae:81:65:
         9b:2c:1d:83:11:b7:fb:8d:df:58:2e:ff:da:b7:89:22:5a:38:
         36:3e:bd:14:91:54:11:5e:eb:35:7d:65:ab:ae:69:50:24:12:
         95:14:cf:b4:1d:08:e4:7c:71:ad:af:d9:6d:3d:18:80:25:ef:
         73:b6:16:fa:99:6b:6a:d8:5e:94:08:75:17:0f:fa:f4:83:f2:
         26:72:a6:58:cc:2d:1e:3b:e1:9a:da:89:f6:44:e3:d4:02:85:
         d7:26:c4:8d:db:bc:f6:34:91:e7:a6:54:bb:b2:12:27:de:45:
         47:06:c7:6f:cf:3b:eb:d0:c3:3d:07:ef:b1:81:6f:f2:84:78:
         ee:ac:89:f5:70:db:ec:bc:cd:cc:22:5e:ec:a9:d4:ed:81:03:
         47:18:b2:c1:7f:37:09:19:66:69:63:5f:a3:b3:9c:7b:6f:f5:
         fd:a6:b3:47:46:46:65:fa:75:2c:69:61:aa:ab:e0:37:19:34:
         55:d2:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:24:00 2026 by rpki-client