Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e31372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          rPVb6Xmgj6gm8Go+ags7ailngpD6qc9X7chUVqzbYTA=
Subject key identifier:   94:26:2E:B7:24:B7:E4:E2:88:03:AD:EE:F3:13:E6:54:8B:5C:F0:4D
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       46B45037A309AEC46E6D4075F00FC0F550A4EAA5
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa
Signing time:             Thu 26 Feb 2026 09:41:48 +0000
ROA not before:           Thu 26 Feb 2026 09:36:48 +0000
ROA not after:            Thu 25 Feb 2027 09:41:48 +0000
asID:                     834
IP address blocks:        74.120.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b4:50:37:a3:09:ae:c4:6e:6d:40:75:f0:0f:c0:f5:50:a4:ea:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Feb 26 09:36:48 2026 GMT
            Not After : Feb 25 09:41:48 2027 GMT
        Subject: CN=94262EB724B7E4E28803ADEEF313E6548B5CF04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:a0:04:2e:21:30:3b:bd:01:47:74:4b:fa:
                    ce:75:89:0a:62:0b:c4:e2:2e:b8:d2:96:c6:39:3d:
                    0c:5d:c8:d8:1b:0b:1d:24:57:28:e7:b0:22:21:93:
                    c1:24:36:21:fc:01:60:73:e6:c7:47:c4:c4:09:4b:
                    0c:3a:65:c0:b4:45:96:27:3a:cd:27:76:13:15:65:
                    0d:3f:3f:05:18:df:85:a9:d6:f8:b1:37:50:63:24:
                    f6:61:89:d0:8a:61:e3:0b:a7:28:56:78:52:f1:de:
                    d4:38:55:fb:8a:40:7c:ab:38:28:18:eb:f8:6b:70:
                    16:67:65:ce:03:59:cd:fa:ea:19:e2:70:07:79:9c:
                    73:84:12:3e:ea:95:23:36:c8:cd:70:2d:17:e5:04:
                    fd:d3:e8:34:9b:68:7a:bf:ea:c4:55:75:12:58:61:
                    78:2e:e9:ea:a9:c4:7a:08:43:ab:30:28:c4:51:66:
                    b3:12:ca:07:37:12:e5:bc:f0:6f:10:25:e7:e7:5c:
                    f3:dd:4d:01:9c:e0:0d:a0:b3:c1:9a:68:5b:c0:e8:
                    72:e5:4b:c0:14:98:cd:01:48:12:d7:bc:8b:96:d1:
                    ee:77:44:b3:a9:73:72:4c:e0:7c:64:73:68:3c:b6:
                    0f:ed:3d:39:3f:d5:6e:a1:7f:95:ca:f4:b3:ad:fe:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:2E:B7:24:B7:E4:E2:88:03:AD:EE:F3:13:E6:54:8B:5C:F0:4D
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:1f:a1:b3:a1:a1:bb:88:ee:3d:6a:f6:c7:b2:cd:b9:b7:96:
         fc:84:52:0d:00:64:d2:02:0b:6b:9e:f3:f6:53:78:8d:81:bb:
         5f:17:fd:41:b6:89:11:97:2c:8f:40:7d:8b:ce:bb:ad:87:4b:
         15:64:aa:4d:90:c1:8f:b2:49:ce:af:1a:17:35:b0:45:3a:4b:
         05:15:b2:9a:41:56:da:75:43:75:1e:9b:56:d9:fb:60:32:86:
         7d:be:72:73:c8:fc:af:a8:6f:0a:6e:dc:e0:39:63:4d:d1:15:
         48:50:3d:70:83:c1:6c:86:a5:52:2f:1b:2d:c8:7e:0c:0e:60:
         95:4b:ce:b2:c5:6d:9c:03:ae:bf:9c:87:a3:fa:43:87:1f:ce:
         ca:7b:ed:15:33:c3:56:4f:3a:24:b1:8a:8e:bc:07:68:f5:0e:
         73:ec:d3:d7:a8:85:1c:00:c7:91:0b:eb:47:58:65:c7:96:cb:
         39:cb:ec:6d:47:b0:c3:b4:fa:2f:b4:3d:67:13:2d:f6:b0:94:
         a5:5e:18:62:f5:45:fe:4d:b5:ea:21:a1:c4:bf:c4:55:71:c9:
         ee:9b:c7:46:dc:b2:64:dc:47:31:d1:3f:2c:63:fc:36:71:b9:
         a2:c3:f6:a1:53:8b:e5:f3:bb:ca:16:6e:18:03:16:10:89:3a:
         1a:a3:52:4d
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIURrRQN6MJrsRubUB18A/A9VCk6qUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDY2NzIwYzJjNTMwNTM3NDg2OTExZDFhNDJlYTg3YzI1
MmY2ZGJjN2Q3YmMyMTE4NTAwHhcNMjYwMjI2MDkzNjQ4WhcNMjcwMjI1MDk0MTQ4
WjAzMTEwLwYDVQQDEyg5NDI2MkVCNzI0QjdFNEUyODgwM0FERUVGMzEzRTY1NDhC
NUNGMDREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D6gBC4hMDu9
AUd0S/rOdYkKYgvE4i640pbGOT0MXcjYGwsdJFco57AiIZPBJDYh/AFgc+bHR8TE
CUsMOmXAtEWWJzrNJ3YTFWUNPz8FGN+Fqdb4sTdQYyT2YYnQimHjC6coVnhS8d7U
OFX7ikB8qzgoGOv4a3AWZ2XOA1nN+uoZ4nAHeZxzhBI+6pUjNsjNcC0X5QT90+g0
m2h6v+rEVXUSWGF4LunqqcR6CEOrMCjEUWazEsoHNxLlvPBvECXn51zz3U0BnOAN
oLPBmmhbwOhy5UvAFJjNAUgS17yLltHud0SzqXNyTOB8ZHNoPLYP7T05P9VuoX+V
yvSzrf6uPQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJQmLrckt+TiiAOt7vMT5lSL
XPBNMB8GA1UdIwQYMBaAFH5siClRU4l+u8EZBxa+zoSl9+ixMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4NGZhYTMxZjE3LzAv
N0U2Qzg4Mjk1MTUzODk3RUJCQzExOTA3MTZCRUNFODRBNUY3RThCMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2UzZjIxYmQ5LTI5MTMtNGQyMy1iOWQxLTIwZGViOWI0ZmM3Zi9kNjY3
MjBjMmM1MzA1Mzc0ODY5MTFkMWE0MmVhODdjMjUyZjZkYmM3ZDdiYzIxMTg1MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4
NGZhYTMxZjE3LzAvMzczNDJlMzEzMjMwMmUzMTM3MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASngRMA0GCSqGSIb3DQEBCwUAA4IBAQCU
H6GzoaG7iO49avbHss25t5b8hFINAGTSAgtrnvP2U3iNgbtfF/1BtokRlyyPQH2L
zruth0sVZKpNkMGPsknOrxoXNbBFOksFFbKaQVbadUN1HptW2ftgMoZ9vnJzyPyv
qG8KbtzgOWNN0RVIUD1wg8FshqVSLxstyH4MDmCVS86yxW2cA66/nIej+kOHH87K
e+0VM8NWTzoksYqOvAdo9Q5z7NPXqIUcAMeRC+tHWGXHlss5y+xtR7DDtPovtD1n
Ey32sJSlXhhi9UX+TbXqIaHEv8RVccnum8dG3LJk3Ecx0T8sY/w2cbmiw/ahU4vl
87vKFm4YAxYQiToao1JN
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:04 2026 by rpki-client