Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20383334.roa
File:                     37342e3131342e33322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          dMhLZe4bp3v6KIn8lEhpH3Qs5E3DAg996DfXeTNLs8Q=
Subject key identifier:   6A:27:92:DA:91:28:45:DD:F7:10:ED:0E:A6:2B:36:39:5F:B9:1E:1A
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       07F9CC46200175ED96A9558C40A9262B279A8D23
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20383334.roa
Signing time:             Mon 07 Sep 2026 07:04:01 +0000
ROA not before:           Mon 07 Sep 2026 06:59:01 +0000
ROA not after:            Mon 06 Sep 2027 07:04:01 +0000
asID:                     834
IP address blocks:        74.114.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f9:cc:46:20:01:75:ed:96:a9:55:8c:40:a9:26:2b:27:9a:8d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Sep  7 06:59:01 2026 GMT
            Not After : Sep  6 07:04:01 2027 GMT
        Subject: CN=6A2792DA912845DDF710ED0EA62B36395FB91E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:6f:fb:fb:95:ce:f5:ee:92:67:d8:00:63:
                    13:40:5e:ca:c4:71:e5:11:47:07:45:b0:c0:2f:f5:
                    df:b0:97:04:4e:d1:25:4b:2f:68:e4:0e:f7:c0:b8:
                    0e:6a:a4:e5:4a:0e:c3:41:7d:f7:ed:f8:ff:e7:d7:
                    88:e2:b4:a3:4a:50:c0:28:9f:92:dd:88:d5:fc:79:
                    bf:21:af:7b:54:f1:4f:bb:c1:a8:a3:ac:af:16:23:
                    2e:22:5a:84:ba:a0:15:5c:c1:e6:38:0e:48:35:c9:
                    ae:94:90:b6:86:ed:a5:1c:8b:fc:47:3a:6f:0b:1b:
                    38:1b:9f:49:ed:93:4e:8c:cb:8f:07:2a:15:1a:99:
                    87:6e:ba:c5:53:a0:bf:5d:10:69:4f:5e:03:ad:d2:
                    b9:a3:33:c8:6f:e0:87:5f:db:94:87:15:0c:54:ff:
                    4b:ed:60:ad:18:81:ad:77:76:cd:2a:ae:59:23:ef:
                    a0:e8:6a:a3:fc:b3:01:55:3e:2a:84:d7:a4:7d:93:
                    b4:74:2e:71:df:df:b8:db:7a:f8:65:48:20:8a:be:
                    2b:ad:47:50:47:27:92:27:fa:22:8c:c6:5f:80:ec:
                    fa:7d:75:c4:74:7c:42:cd:0f:f9:18:69:00:74:ba:
                    91:6e:7a:53:d9:f4:68:6a:42:b0:87:4b:c3:45:f1:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:27:92:DA:91:28:45:DD:F7:10:ED:0E:A6:2B:36:39:5F:B9:1E:1A
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:b5:6f:57:99:43:4c:67:0d:20:88:d8:7c:01:fc:ba:ef:
         77:42:48:25:7f:17:f2:f0:67:57:5d:19:db:3d:32:97:34:23:
         ff:e1:ac:33:1b:68:26:ff:19:fd:b4:0d:2e:82:c8:01:7b:25:
         49:fe:8e:30:44:38:6e:7b:7d:03:70:e4:80:e8:12:a1:1c:4a:
         18:04:69:9c:6c:89:fb:16:08:81:d8:7f:17:e6:6f:84:f4:d0:
         20:fb:99:80:41:db:f8:46:ee:1b:e2:5e:a0:ec:6a:47:92:3d:
         98:fb:01:db:4a:d5:04:ec:c0:fe:89:e7:87:37:93:c9:9f:75:
         05:05:83:a8:2e:25:2b:de:77:2f:b7:c5:47:3e:ec:78:d4:e2:
         e0:ba:e3:ae:d4:f8:b9:47:ea:9c:49:75:84:5e:c5:42:05:f9:
         23:e3:1b:17:cf:a2:58:09:d5:10:67:39:e8:7d:2b:91:cf:97:
         1e:41:33:22:c3:84:51:28:e7:f8:44:56:ba:dd:db:1f:d7:67:
         c8:74:6f:0e:1d:68:90:7b:00:69:75:bf:f3:26:9c:05:77:24:
         47:21:55:d0:7d:cd:b8:af:0a:40:a2:ed:1e:ab:ba:3d:63:db:
         30:06:f2:1b:f8:3d:ad:50:7f:78:cc:6c:d9:d8:b7:35:1d:d8:
         d6:64:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:50:17 2026 by rpki-client