Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32332d3234203d3e20383334.roa
File:                     37342e3131342e33342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          K2hrXYa4o+XaljQ3eZHy7hYnEALWmU4jVDBrPX4fID0=
Subject key identifier:   DC:9E:4F:E1:90:47:71:F3:FB:48:46:ED:0C:F9:4A:CD:48:89:CF:73
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       797CA99655E5EC07D14033F0476D7A14EF58CE79
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32332d3234203d3e20383334.roa
Signing time:             Fri 25 Jul 2025 12:31:36 +0000
ROA not before:           Fri 25 Jul 2025 12:26:36 +0000
ROA not after:            Fri 24 Jul 2026 12:31:36 +0000
asID:                     834
IP address blocks:        74.114.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7c:a9:96:55:e5:ec:07:d1:40:33:f0:47:6d:7a:14:ef:58:ce:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Jul 25 12:26:36 2025 GMT
            Not After : Jul 24 12:31:36 2026 GMT
        Subject: CN=DC9E4FE1904771F3FB4846ED0CF94ACD4889CF73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:b8:cf:3a:17:df:c3:21:1d:38:b9:6d:84:
                    38:31:09:01:fd:99:f9:51:54:bb:53:cd:59:96:66:
                    7c:d3:26:6a:7f:9b:b1:2d:fc:74:8a:81:8d:e7:10:
                    3d:3f:41:15:2f:b8:89:c1:c5:3f:2c:9a:b5:39:36:
                    4e:1e:e9:92:38:17:5a:f9:ee:76:16:fd:31:d2:b6:
                    d7:64:ed:e6:f1:b0:40:e6:f2:f4:97:9a:50:b7:ba:
                    0c:12:73:4f:87:e1:3c:c9:bb:13:40:20:0b:3d:fe:
                    4b:1c:b1:76:97:ca:13:65:ea:d0:d0:7e:d0:a9:15:
                    f8:2b:21:18:38:66:db:f1:a5:5f:04:19:64:41:e1:
                    6a:a7:91:ca:b7:ef:a0:4b:56:9b:3d:23:8e:83:42:
                    d4:b7:90:61:2c:4c:68:04:d2:47:cd:2a:37:b7:3a:
                    0d:13:02:2a:f4:aa:27:62:b3:91:15:e7:4d:e9:4a:
                    f1:13:3b:3d:4b:83:58:c0:5f:75:49:0a:a0:38:17:
                    dc:46:9f:79:a0:8d:81:b2:d4:dd:99:13:6a:77:6f:
                    3c:c4:1d:0a:51:58:49:23:92:53:35:f5:f3:33:01:
                    00:8c:9d:0b:4f:0a:7f:47:bf:f4:fb:37:23:21:05:
                    b8:b1:02:56:78:d9:e6:96:88:e9:d8:f8:02:23:02:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:4F:E1:90:47:71:F3:FB:48:46:ED:0C:F9:4A:CD:48:89:CF:73
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:b6:9c:16:c5:d4:38:c8:bb:8e:32:23:bb:9b:25:0f:12:5a:
         86:47:6e:6e:1a:1b:5b:d4:56:09:55:bc:72:d4:a7:5b:b4:00:
         89:be:f6:4f:ae:fe:b7:f7:d0:34:6d:b7:7a:64:51:49:53:d9:
         9d:3d:13:ae:fa:0d:de:80:55:c2:d3:3a:d9:77:a3:d5:1d:d9:
         c2:d1:74:bb:a8:57:92:dc:73:1d:75:c6:a8:b0:3f:d9:43:ec:
         d1:aa:26:28:08:50:ef:26:ec:c6:51:b4:c7:91:98:be:da:22:
         82:d7:5c:cb:05:e7:23:7a:69:68:f2:e8:de:07:3c:0a:81:9a:
         26:c4:5e:ef:55:1d:95:01:41:a5:a8:db:63:48:f4:44:a5:b8:
         e8:a1:91:a0:44:d1:78:fb:9f:b2:96:d3:fe:18:0f:9f:06:de:
         73:ac:44:02:4c:57:69:3c:c6:15:71:e6:e7:b5:b5:14:34:1f:
         df:6c:d6:ed:2b:5d:27:f6:c8:62:bf:42:d1:ff:75:f9:4f:96:
         03:7e:13:43:5a:cc:49:7e:c6:10:dd:0e:a6:05:61:4c:2c:bb:
         ca:38:4b:e8:47:c0:a7:aa:6f:4b:55:44:5e:f6:0e:0a:cc:70:
         18:b3:98:35:92:e8:ad:4b:69:32:20:43:ab:4c:63:31:40:4b:
         c4:e9:61:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:21:21 2025 by rpki-client