Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32342d3234203d3e20323138383632.roa
File:                     37342e3131342e33342e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier:          MWPGIQiXAmJOnwBRHfS9UTm+XeVcBh0DpB0hpOb+7Cc=
Subject key identifier:   FD:57:A3:F4:08:3A:9F:4D:6E:8A:EC:20:D6:61:75:3B:CD:61:46:3F
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       126A6D5C667FB6510F672C0CE90A8AFA4092FB2B
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32342d3234203d3e20323138383632.roa
Signing time:             Tue 15 Sep 2026 05:49:49 +0000
ROA not before:           Tue 15 Sep 2026 05:44:49 +0000
ROA not after:            Tue 14 Sep 2027 05:49:49 +0000
asID:                     218862
IP address blocks:        74.114.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6a:6d:5c:66:7f:b6:51:0f:67:2c:0c:e9:0a:8a:fa:40:92:fb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Sep 15 05:44:49 2026 GMT
            Not After : Sep 14 05:49:49 2027 GMT
        Subject: CN=FD57A3F4083A9F4D6E8AEC20D661753BCD61463F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:ad:57:f5:1d:d6:b9:df:56:ef:0c:c5:7a:
                    cc:9c:96:b8:8b:d9:22:f8:7a:f7:70:e2:25:7e:e9:
                    be:a8:7e:89:de:3a:76:3e:d8:af:10:9f:12:f3:29:
                    0e:1e:13:a7:27:54:c9:73:39:27:56:12:c6:54:6a:
                    82:08:6a:ef:8c:d2:a3:78:d8:fd:8e:10:54:bd:e6:
                    1e:51:d0:98:b6:c1:5a:eb:f7:c8:44:11:0a:ff:37:
                    ba:e8:fd:04:c2:d1:b3:d8:20:70:05:dc:24:f7:cc:
                    06:6a:63:1d:5c:0b:e6:40:23:ce:f5:ad:7b:73:f9:
                    a8:c2:00:d3:66:1c:43:51:26:02:0a:a8:df:61:c3:
                    b1:2f:e0:e5:93:4a:f8:e0:15:25:a8:95:ba:48:c9:
                    2f:8a:89:ec:52:d4:26:cc:f3:9e:ed:32:86:11:c3:
                    7c:cc:a2:9f:ed:d1:8f:9c:c2:51:a5:23:fb:7c:1e:
                    c1:1b:b3:f5:42:df:46:43:d5:5e:70:95:f6:f6:22:
                    05:b5:a5:10:76:32:7c:5e:48:9d:af:fb:63:29:29:
                    08:6d:5f:9d:9f:79:f0:7c:8d:bf:37:bf:15:53:10:
                    48:bb:43:4a:1e:5d:b0:7e:51:08:4f:2e:75:59:26:
                    88:b2:e6:1f:e3:f4:c9:ae:10:17:4a:68:1c:27:b1:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:57:A3:F4:08:3A:9F:4D:6E:8A:EC:20:D6:61:75:3B:CD:61:46:3F
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33342e302f32342d3234203d3e20323138383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:a4:fa:21:a3:09:a8:ed:63:51:bb:a0:94:9d:c3:27:a9:
         8d:7b:7c:42:1c:f9:ef:53:99:88:5e:de:ef:b4:f0:60:2f:6b:
         e0:64:1f:22:22:e9:41:95:31:3c:a0:c0:b4:0f:ad:11:7e:6d:
         48:23:60:d8:f0:02:6f:ee:b4:44:25:a7:8c:96:75:a6:46:91:
         0e:3f:cf:0f:e7:ab:aa:ef:f0:c6:ef:27:37:6c:42:47:c3:ca:
         0f:83:82:f2:f1:cf:93:23:b5:a8:d2:ef:0a:f5:45:41:21:9a:
         5b:24:1c:15:db:05:bf:0b:a9:51:d1:ef:f2:d7:b5:a2:70:90:
         88:79:c7:95:9d:de:02:dc:3b:3e:35:cb:9d:0a:56:1b:c0:b2:
         02:64:2e:c4:da:11:8b:a1:63:4a:33:f1:2f:7a:df:55:74:ee:
         79:14:94:6a:9e:65:55:fe:b6:fc:6b:4d:6d:b1:99:6c:e0:e7:
         2e:c6:5c:de:46:46:6a:c0:a0:07:24:32:66:cc:bf:15:3a:e4:
         a9:a3:c0:7b:11:d7:25:24:2e:81:65:eb:13:51:d5:2c:c6:10:
         53:83:76:2f:71:5a:40:be:15:83:26:fc:61:bc:ae:4b:84:34:
         24:72:bb:04:ae:fe:33:b1:e4:55:fd:88:83:10:e4:80:6c:25:
         71:01:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:53:03 2026 by rpki-client