Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32342d3234203d3e203235313938.roa
File:                     37342e3132302e31382e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          TfxX83XTwZqXNzi44u+WmSezRrGg+HMll/Ly6AH5IO0=
Subject key identifier:   12:DE:6B:2B:1D:EB:42:72:CF:48:D4:EA:C4:C1:99:C7:13:6F:D7:0D
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       3B2FA1EFE2C26BA439A057BBB593E7F74DA148DA
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32342d3234203d3e203235313938.roa
Signing time:             Fri 25 Jul 2025 12:29:16 +0000
ROA not before:           Fri 25 Jul 2025 12:24:16 +0000
ROA not after:            Fri 24 Jul 2026 12:29:16 +0000
asID:                     25198
IP address blocks:        74.120.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 22:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2f:a1:ef:e2:c2:6b:a4:39:a0:57:bb:b5:93:e7:f7:4d:a1:48:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Jul 25 12:24:16 2025 GMT
            Not After : Jul 24 12:29:16 2026 GMT
        Subject: CN=12DE6B2B1DEB4272CF48D4EAC4C199C7136FD70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:03:34:69:21:dd:78:42:43:dc:c9:34:7d:84:
                    e9:0b:22:f0:dd:00:e4:82:8c:23:f7:68:21:c1:c7:
                    41:ad:49:c7:7d:26:25:45:16:60:61:fa:95:4b:97:
                    93:e4:a5:fc:1c:da:3c:69:62:6f:a5:e9:20:1c:4e:
                    fc:a5:49:a5:56:92:10:e7:b3:d3:69:7e:76:5a:31:
                    58:a4:74:78:ce:98:3a:e3:4b:ce:f9:65:92:5a:d7:
                    ba:bc:10:96:11:c7:ed:90:d6:c1:21:71:65:ac:6b:
                    9c:bf:e8:2b:50:68:ab:1a:de:5a:8c:da:b1:2b:e2:
                    a8:2a:42:85:b3:7d:ff:ff:82:eb:d8:23:85:d9:dc:
                    5a:67:53:65:4d:94:41:ba:54:4c:01:8d:1f:1b:1c:
                    d9:30:0f:7a:6f:f2:88:c4:a1:5f:fb:e8:26:1c:13:
                    e8:78:02:7d:97:8a:b4:4b:59:69:31:37:0d:80:ea:
                    be:65:51:26:7a:f5:eb:56:38:02:af:b4:e7:8d:21:
                    8b:fc:4c:40:90:79:84:1e:53:6b:79:92:7e:78:61:
                    7a:65:33:0e:5f:e9:13:af:7a:46:03:81:b5:ba:5a:
                    4a:34:80:d9:60:89:aa:3b:df:ec:05:e3:77:fc:d7:
                    c7:7e:87:52:9d:f1:5f:99:6d:18:65:33:70:cb:a5:
                    cc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DE:6B:2B:1D:EB:42:72:CF:48:D4:EA:C4:C1:99:C7:13:6F:D7:0D
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:0f:07:73:97:d0:b0:53:33:58:cb:d7:fa:04:59:31:ce:
         10:c7:78:1e:50:07:17:cf:7b:dd:d0:20:ac:ef:57:b4:87:d1:
         de:f0:3e:5b:79:a8:21:af:63:88:76:da:4f:90:b3:63:6b:21:
         66:ee:48:65:78:24:79:c5:d5:c3:6b:2b:3e:df:0b:17:46:6e:
         9b:88:9b:c7:56:9f:22:29:98:3f:51:ba:79:a4:8a:14:9b:e0:
         dd:3b:04:b9:94:e9:9a:9b:8a:d7:6d:b1:7d:eb:65:4a:53:83:
         4a:06:03:a7:17:62:41:ee:15:f0:5c:61:04:6a:06:b2:b1:1f:
         26:82:bd:dd:2d:33:2c:e5:9d:61:09:e8:d4:d0:01:ca:f8:55:
         73:0f:61:fa:12:56:70:7f:ed:13:b1:80:68:4d:99:3e:eb:82:
         e0:a9:7a:2a:8b:5a:78:ff:9e:0a:43:30:43:45:a4:10:9c:cc:
         ec:a8:23:47:8b:4e:74:3b:ca:4f:0e:5b:61:e8:ef:3d:b2:35:
         1f:71:df:13:d2:4d:84:57:63:34:a2:77:16:ef:4f:6e:fe:79:
         aa:55:56:07:9e:14:ce:fc:5d:ec:f2:95:f4:bb:b4:2a:23:6c:
         0e:d0:92:d5:1c:ac:f6:05:36:36:04:88:f9:f2:db:0c:70:02:
         d2:f2:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:31 2025 by rpki-client