Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e31392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          cvR3iy0rLGkwaGq+DqPP4iQ1/NrYRyNpY6DbLmOqnpY=
Subject key identifier:   D0:D0:23:93:7E:24:D6:9F:DE:61:39:0C:4B:AE:13:42:1E:B7:7F:28
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       5E68E2D7D58CB048B0C287E7A0EF57AA52602A80
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa
Signing time:             Mon 07 Sep 2026 06:24:24 +0000
ROA not before:           Mon 07 Sep 2026 06:19:24 +0000
ROA not after:            Mon 06 Sep 2027 06:24:24 +0000
asID:                     834
IP address blocks:        74.120.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 00:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:68:e2:d7:d5:8c:b0:48:b0:c2:87:e7:a0:ef:57:aa:52:60:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Sep  7 06:19:24 2026 GMT
            Not After : Sep  6 06:24:24 2027 GMT
        Subject: CN=D0D023937E24D69FDE61390C4BAE13421EB77F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:e5:60:c8:89:a9:b7:c2:e8:43:41:68:3d:
                    11:00:11:13:e1:e7:31:84:56:0e:9a:db:ac:56:ac:
                    a4:e0:95:28:7e:93:66:26:65:0a:57:af:39:a1:58:
                    2e:4e:2d:c0:4e:73:cf:fa:06:5b:0a:e8:0f:8d:47:
                    57:fa:39:a0:4a:e0:49:53:bc:58:d1:17:d3:97:46:
                    4e:a3:8a:07:51:1a:7f:5d:c7:41:83:13:a2:bd:5c:
                    ad:d8:48:f9:3f:cf:ef:5c:9f:52:d8:76:b6:3a:08:
                    de:99:13:89:06:20:d1:47:33:4e:f5:b4:94:22:51:
                    6c:dd:4f:01:73:d9:51:65:43:2a:ca:e9:a2:c5:28:
                    48:ba:a1:bf:2e:b1:6e:de:12:ed:c1:b8:d5:48:51:
                    d5:c9:bf:71:10:ec:3d:a9:23:01:47:92:5d:9d:72:
                    44:da:9b:25:37:ab:18:6f:f4:13:5a:77:2a:87:88:
                    18:89:d8:f6:80:f4:b9:d1:22:44:fb:39:16:14:94:
                    57:45:0d:ef:0e:73:7a:93:20:af:00:50:b6:da:41:
                    51:9b:bc:c0:47:47:a4:7c:66:98:1c:23:68:b4:7d:
                    7b:87:d6:22:e2:69:86:62:c3:74:2d:fa:99:bd:a0:
                    57:64:de:7e:31:a4:b4:18:b3:41:7f:b8:c9:d6:32:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D0:23:93:7E:24:D6:9F:DE:61:39:0C:4B:AE:13:42:1E:B7:7F:28
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:35:e4:c7:ec:e3:68:b0:a0:36:2a:09:42:d5:a8:18:ee:10:
         dd:85:fe:61:37:58:86:8b:b9:dc:2d:1a:a5:f1:11:d7:20:fd:
         8d:44:5e:a0:3d:d9:16:5d:a8:e6:60:e8:fa:0a:8f:6f:7d:62:
         21:72:dd:46:c7:31:d0:00:52:57:d3:84:74:05:6a:d0:2f:8b:
         b9:d2:74:25:78:44:aa:10:00:bf:eb:64:36:a6:40:1a:9a:0c:
         1f:fa:92:5c:61:2a:83:5c:b4:eb:f2:f0:b0:b0:61:b4:1b:99:
         61:f3:c3:c9:85:70:3b:77:0d:f4:0a:b7:8a:77:50:7a:bc:17:
         6f:f7:07:e7:79:c8:d9:06:51:a5:c3:2b:20:92:84:d1:98:bd:
         d0:08:79:48:09:3b:95:5c:0e:30:ef:c1:1b:9e:1e:f2:7e:42:
         2d:d4:01:53:64:04:e8:d8:4e:a5:ec:cf:fd:33:60:a2:f5:65:
         17:92:52:45:53:70:6e:be:b0:ad:3f:d1:ed:67:78:d6:da:8c:
         c2:f0:7a:77:61:1f:1c:f6:06:f1:f0:45:d6:e5:4e:cd:68:b8:
         93:8a:c5:f2:e9:f5:32:e2:65:02:03:a1:ff:ad:3d:72:5a:fb:
         ab:b8:a3:ee:0a:34:5c:3c:46:8b:c4:46:7e:b5:bc:89:6d:e9:
         2f:6d:ac:ba
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUXmji19WMsEiwwofnoO9XqlJgKoAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDY2NzIwYzJjNTMwNTM3NDg2OTExZDFhNDJlYTg3YzI1
MmY2ZGJjN2Q3YmMyMTE4NTAwHhcNMjYwOTA3MDYxOTI0WhcNMjcwOTA2MDYyNDI0
WjAzMTEwLwYDVQQDEyhEMEQwMjM5MzdFMjRENjlGREU2MTM5MEM0QkFFMTM0MjFF
Qjc3RjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjrlYMiJqbfC
6ENBaD0RABET4ecxhFYOmtusVqyk4JUofpNmJmUKV685oVguTi3ATnPP+gZbCugP
jUdX+jmgSuBJU7xY0RfTl0ZOo4oHURp/XcdBgxOivVyt2Ej5P8/vXJ9S2Ha2Ogje
mROJBiDRRzNO9bSUIlFs3U8Bc9lRZUMqyumixShIuqG/LrFu3hLtwbjVSFHVyb9x
EOw9qSMBR5JdnXJE2pslN6sYb/QTWncqh4gYidj2gPS50SJE+zkWFJRXRQ3vDnN6
kyCvAFC22kFRm7zAR0ekfGaYHCNotH17h9Yi4mmGYsN0LfqZvaBXZN5+MaS0GLNB
f7jJ1jKKCQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNDQI5N+JNaf3mE5DEuuE0Ie
t38oMB8GA1UdIwQYMBaAFH5siClRU4l+u8EZBxa+zoSl9+ixMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4NGZhYTMxZjE3LzAv
N0U2Qzg4Mjk1MTUzODk3RUJCQzExOTA3MTZCRUNFODRBNUY3RThCMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2UzZjIxYmQ5LTI5MTMtNGQyMy1iOWQxLTIwZGViOWI0ZmM3Zi9kNjY3
MjBjMmM1MzA1Mzc0ODY5MTFkMWE0MmVhODdjMjUyZjZkYmM3ZDdiYzIxMTg1MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4
NGZhYTMxZjE3LzAvMzczNDJlMzEzMjMwMmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASngTMA0GCSqGSIb3DQEBCwUAA4IBAQAY
NeTH7ONosKA2KglC1agY7hDdhf5hN1iGi7ncLRql8RHXIP2NRF6gPdkWXajmYOj6
Co9vfWIhct1GxzHQAFJX04R0BWrQL4u50nQleESqEAC/62Q2pkAamgwf+pJcYSqD
XLTr8vCwsGG0G5lh88PJhXA7dw30CreKd1B6vBdv9wfnecjZBlGlwysgkoTRmL3Q
CHlICTuVXA4w78Ebnh7yfkIt1AFTZATo2E6l7M/9M2Ci9WUXklJFU3BuvrCtP9Ht
Z3jW2ozC8Hp3YR8c9gbx8EXW5U7NaLiTisXy6fUy4mUCA6H/rT1yWvuruKPuCjRc
PEaLxEZ+tbyJbekvbay6
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:38:54 2026 by rpki-client