Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e20383334.roa
File:                     37342e3131342e33332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          3uso8MOJM1rcbdnR06xnQkps5FLYwfWn0Rp9KiMt/N8=
Subject key identifier:   DA:14:F3:1C:D5:15:6D:8C:9D:AB:60:E6:1A:25:94:2F:22:E9:B0:E0
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       5A310F11D2D02F1F98232E2A8858625FC23C3728
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 26 Feb 2026 09:41:49 +0000
ROA not before:           Thu 26 Feb 2026 09:36:49 +0000
ROA not after:            Thu 25 Feb 2027 09:41:49 +0000
asID:                     834
IP address blocks:        74.114.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:31:0f:11:d2:d0:2f:1f:98:23:2e:2a:88:58:62:5f:c2:3c:37:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Feb 26 09:36:49 2026 GMT
            Not After : Feb 25 09:41:49 2027 GMT
        Subject: CN=DA14F31CD5156D8C9DAB60E61A25942F22E9B0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:ff:86:6f:1d:43:9d:e9:60:fc:4c:d5:90:
                    7b:06:10:e1:f9:7b:e8:40:91:c7:36:c0:d4:1d:73:
                    bf:ae:41:51:28:cd:1a:3d:a1:71:03:af:11:8c:54:
                    e3:6b:7e:ef:58:50:8c:51:96:d6:05:da:7e:c4:64:
                    4c:a2:99:28:7b:b0:05:76:58:3e:89:78:37:61:ff:
                    91:f9:e3:ea:32:68:64:6c:1a:09:16:e7:58:f3:65:
                    87:a0:0e:0f:c1:67:82:44:ba:ad:b2:04:9f:96:1c:
                    b8:82:91:b4:d7:d1:33:5c:ce:11:dd:fe:a9:55:ab:
                    ff:23:02:56:c3:ac:d7:40:47:a3:15:e3:7c:b4:20:
                    f4:c5:8e:cb:54:c2:79:0f:b7:d7:e4:4e:13:6a:76:
                    d3:20:6c:30:fe:01:c7:8a:7b:8f:0c:b4:24:7c:67:
                    81:74:df:16:1c:4f:39:71:5f:29:11:58:67:4b:95:
                    5c:4d:f4:50:d0:44:35:1b:0e:91:66:d6:29:3d:59:
                    db:1d:8a:ae:35:57:78:90:bf:52:49:f3:5f:a1:6c:
                    7f:d6:d2:61:a9:03:f5:59:07:6d:38:23:10:4d:d1:
                    84:dd:6a:af:9e:0f:32:8d:be:4b:97:2b:be:00:4f:
                    28:a1:c6:ed:a0:23:11:29:87:c6:ac:08:31:89:c1:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:14:F3:1C:D5:15:6D:8C:9D:AB:60:E6:1A:25:94:2F:22:E9:B0:E0
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:63:46:fa:94:78:4b:1e:8c:4c:3c:1f:dc:2a:f5:89:c4:59:
         70:28:80:7c:3c:0f:8d:da:31:e5:ef:dc:73:a4:26:3c:8f:a3:
         3d:d9:f2:50:d1:e7:dc:f2:90:d5:80:9a:fc:89:96:b6:d3:f4:
         a4:a5:2e:55:20:85:b7:0a:ac:03:90:4a:a4:c8:b3:32:b4:ea:
         01:1c:33:1a:7d:53:19:8c:7c:91:8c:27:03:7e:64:ed:c7:2f:
         98:82:e4:ae:5c:a2:e4:11:59:3e:84:35:7e:4e:b8:57:c2:b1:
         5e:4d:dd:26:a2:bf:8f:bd:11:e3:5b:a0:e6:99:a4:79:92:aa:
         6d:c3:f9:92:73:a9:32:03:9f:e5:f6:cd:c1:20:d6:02:35:af:
         25:87:b3:8e:0a:68:58:b1:7f:33:7b:8b:0a:e4:86:bf:11:d0:
         e0:ca:6c:30:7c:96:94:c6:fe:20:23:0b:79:c2:84:5a:7d:7f:
         cc:e3:96:b1:57:06:89:06:49:d7:65:85:b7:75:01:ae:24:54:
         ff:3b:32:52:37:b9:76:56:67:ac:9f:a9:ad:29:a7:45:c7:9f:
         8d:1e:a4:07:33:3b:a9:95:71:11:08:00:e7:7f:66:4d:c2:b9:
         c7:76:21:49:26:83:12:47:c8:75:55:92:7a:bb:9b:f9:f8:22:
         4e:43:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:19 2026 by rpki-client