Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20343032323231.roa
File:                     37342e3132302e31392e302f32342d3234203d3e20343032323231.roa (raw, json)
Hash identifier:          Yay7fVmRpyexZOZ50BmkXV28aEZiTpTG7qym7IXPbQ8=
Subject key identifier:   AF:1E:69:33:72:11:54:F1:2A:50:52:E3:0B:C3:4B:40:1F:60:DC:01
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       7AE9E413BC721A4A3CFAF6CACBB37924EC5F9A97
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20343032323231.roa
Signing time:             Sat 28 Feb 2026 08:28:57 +0000
ROA not before:           Sat 28 Feb 2026 08:23:57 +0000
ROA not after:            Sat 27 Feb 2027 08:28:57 +0000
asID:                     402221
IP address blocks:        74.120.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e9:e4:13:bc:72:1a:4a:3c:fa:f6:ca:cb:b3:79:24:ec:5f:9a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Feb 28 08:23:57 2026 GMT
            Not After : Feb 27 08:28:57 2027 GMT
        Subject: CN=AF1E6933721154F12A5052E30BC34B401F60DC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:8b:f9:a1:f0:7f:10:61:7c:fe:e9:2d:53:
                    fb:ab:db:20:45:84:e2:86:a4:f9:ff:64:9e:10:3c:
                    eb:65:3c:15:ce:2c:62:db:3d:c2:8b:ef:31:bf:1d:
                    11:f9:a0:35:5f:c1:11:66:34:20:2d:66:5c:4c:97:
                    50:4b:67:37:7d:96:d0:6f:8e:3d:7c:4e:b0:b1:5b:
                    0f:31:5d:51:90:34:cf:a6:63:d9:76:6a:88:88:b1:
                    61:28:6c:14:92:f8:e9:49:fa:af:47:00:63:25:31:
                    84:73:0b:54:80:89:a1:ca:f5:7d:80:b1:ba:85:d8:
                    4e:a9:41:4a:a4:ca:99:d0:8a:13:00:cb:33:2e:a4:
                    f5:50:a9:58:1b:ad:b6:d6:55:3d:4a:2b:19:44:ef:
                    fc:c8:a6:16:d6:20:0e:0e:d3:f7:cc:02:ed:d4:cf:
                    97:d1:b9:4d:12:84:e0:02:5d:14:01:6b:3b:67:63:
                    00:d5:ce:b5:c4:97:5f:07:23:8b:b7:bd:5c:bf:2c:
                    e7:b4:76:29:32:2b:1b:81:5c:0c:ff:b7:0b:ed:de:
                    97:e3:e0:2e:52:91:62:a5:43:77:2c:db:c4:ac:db:
                    ff:37:ea:8c:e2:ad:f7:7d:e9:28:c8:18:01:ec:d3:
                    4a:07:84:bf:6e:29:6c:2a:83:2c:d7:c0:f0:90:68:
                    0d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1E:69:33:72:11:54:F1:2A:50:52:E3:0B:C3:4B:40:1F:60:DC:01
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20343032323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:af:bf:03:94:6d:aa:f2:3a:4c:a2:0a:9d:cb:8c:76:87:
         99:04:2a:72:ae:7b:ad:14:6d:e1:10:b3:39:11:a3:fc:41:f8:
         d9:1f:4c:6c:ae:99:b8:78:73:f8:13:69:14:33:98:71:45:16:
         70:ce:32:80:e1:cd:c6:af:05:9c:31:60:9a:90:41:1e:82:d6:
         62:14:b7:84:75:dc:4a:68:f7:d7:62:df:a3:9a:35:f8:3b:5b:
         7d:4e:30:15:f4:68:3b:04:25:53:18:81:2f:51:df:10:c1:3c:
         3d:f3:b5:af:8f:82:4e:1d:e5:ce:03:b5:73:0f:d1:21:43:95:
         6d:66:d7:31:c1:0d:29:34:ab:53:6a:58:28:03:fd:3d:2e:e2:
         6e:a7:e0:53:13:58:88:a8:0b:b0:68:cf:40:0b:dd:de:f4:a5:
         77:fa:ea:bd:e0:84:21:9b:e2:15:96:b0:29:d2:ac:11:f9:d8:
         70:45:1f:21:d3:ca:90:10:b0:a6:79:e5:5a:47:74:ec:99:19:
         b6:31:9b:34:b2:c5:5b:7f:07:d7:62:6f:6f:92:f0:90:88:80:
         30:29:54:36:86:df:f1:f9:ec:99:86:76:67:b8:45:f3:50:ca:
         df:ca:1d:ac:ec:8c:5f:15:1e:e2:8d:3c:39:4a:9a:f7:4f:49:
         9b:b9:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:52 2026 by rpki-client