Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e203235313938.roa
File:                     37342e3131342e33332e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          2ov5m6io1WzhXekl7a2SqaTGbqwvBOqnz3TrBIYDim8=
Subject key identifier:   CE:90:ED:28:7C:96:53:50:DC:15:3F:3D:B7:53:45:93:6C:F4:6B:F8
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       1D5E3F67A284AC1EF7D433C878B720EF5E5928C2
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e203235313938.roa
Signing time:             Fri 25 Jul 2025 12:29:16 +0000
ROA not before:           Fri 25 Jul 2025 12:24:16 +0000
ROA not after:            Fri 24 Jul 2026 12:29:16 +0000
asID:                     25198
IP address blocks:        74.114.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 22:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5e:3f:67:a2:84:ac:1e:f7:d4:33:c8:78:b7:20:ef:5e:59:28:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Jul 25 12:24:16 2025 GMT
            Not After : Jul 24 12:29:16 2026 GMT
        Subject: CN=CE90ED287C965350DC153F3DB75345936CF46BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:58:f9:94:ad:a8:bf:ca:7c:6d:37:3d:12:a3:
                    5c:24:68:e3:f1:e0:35:bd:36:27:6f:1f:b8:60:2c:
                    ac:ae:5b:0a:6f:4b:85:dd:63:b1:7c:a6:24:4d:cb:
                    29:f6:c7:30:12:a5:e1:80:d1:ef:44:85:53:d0:07:
                    30:b1:13:24:4b:43:63:87:2b:8a:0e:b9:ad:74:07:
                    4b:7e:92:0b:bf:7a:de:0e:64:85:0d:01:f4:f6:92:
                    67:d3:2c:62:b7:56:52:a9:ff:75:87:a6:6e:28:72:
                    9f:e2:2a:7e:f0:90:87:c9:51:54:56:59:34:70:f7:
                    f3:47:15:e5:f8:0f:52:42:ab:b0:30:1a:c0:5d:c6:
                    f7:56:6b:be:45:d6:dc:a8:80:21:85:33:1c:c3:9b:
                    a6:62:0f:3e:3f:fd:c4:1a:cb:a2:33:69:ec:88:dd:
                    76:1d:fb:cf:58:1d:29:6a:24:c3:f6:80:ee:99:3d:
                    c9:1c:7d:d5:4c:9d:d2:ba:34:25:e6:ef:d3:b1:1c:
                    19:45:76:cc:0f:91:e7:6f:95:52:0b:a1:bd:8a:77:
                    37:04:19:e2:9f:fc:71:21:63:d0:a2:eb:b1:12:09:
                    9f:90:37:2f:ef:5d:42:0a:9b:3b:ac:05:85:a4:25:
                    2e:9a:91:89:f2:84:33:cc:4b:91:38:03:d1:28:da:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:90:ED:28:7C:96:53:50:DC:15:3F:3D:B7:53:45:93:6C:F4:6B:F8
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a5:2c:09:80:52:a1:09:53:72:09:9f:89:8a:74:f0:ac:03:
         b0:93:07:76:58:21:85:38:18:6f:09:f8:88:68:93:df:d2:37:
         53:08:c9:59:75:db:0b:19:52:84:ca:36:b4:f4:06:0e:16:f4:
         19:60:11:8f:e7:82:97:18:9b:4a:e4:e1:39:5d:d1:22:26:8a:
         b8:fb:a5:40:f0:1a:be:e3:ac:f6:38:a9:a9:4b:9e:2e:ec:12:
         7c:19:24:07:56:94:e6:2b:84:c7:28:cf:51:44:86:57:81:51:
         37:e1:36:f7:11:64:1e:c7:dd:3c:b2:e8:42:44:03:a4:ce:b8:
         ab:56:a3:b4:0e:c8:cc:2b:6f:de:c3:a6:a7:a8:10:cd:f6:4d:
         15:8e:75:40:40:10:23:31:8c:7b:41:b3:10:1c:7f:fe:35:b4:
         3e:6b:0d:35:1f:4c:c3:8f:d9:e5:9a:07:9f:64:85:ce:94:4e:
         41:c1:f2:83:84:14:68:42:fc:51:f4:5e:05:c9:2b:cf:7c:19:
         5b:a9:3d:8d:4e:b7:d6:05:8e:0a:c8:2c:5e:80:40:07:7a:73:
         88:22:7e:89:ee:df:64:ed:8d:db:fb:62:8e:8a:d6:63:57:b0:
         88:48:03:79:cd:cb:96:71:f3:8f:c7:8a:9d:fd:30:70:f6:c7:
         30:b7:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:17 2025 by rpki-client