Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e31392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          1VbbVeTphvVMpp3ushMdu0kRCGZpzhCujfIq2fnV+tE=
Subject key identifier:   21:0A:AC:66:7B:34:21:C4:F1:60:B1:D0:76:26:D7:75:09:D1:DC:AE
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       2C6B79A73BFB27F420AB6F35EA810923A90F17A8
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa
Signing time:             Fri 25 Jul 2025 12:31:36 +0000
ROA not before:           Fri 25 Jul 2025 12:26:36 +0000
ROA not after:            Fri 24 Jul 2026 12:31:36 +0000
asID:                     834
IP address blocks:        74.120.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6b:79:a7:3b:fb:27:f4:20:ab:6f:35:ea:81:09:23:a9:0f:17:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Jul 25 12:26:36 2025 GMT
            Not After : Jul 24 12:31:36 2026 GMT
        Subject: CN=210AAC667B3421C4F160B1D07626D77509D1DCAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:71:f8:c2:e6:c5:7d:35:fa:29:35:c1:ca:17:
                    80:a5:ae:74:84:35:50:e5:69:f0:fb:30:f4:7c:be:
                    0e:86:66:44:2d:aa:d8:ec:5d:34:8e:fa:91:63:e6:
                    a1:97:01:e6:26:8c:ff:6b:26:61:da:5b:41:90:50:
                    fe:75:8b:e8:88:b2:53:2d:48:73:c2:7b:c3:99:68:
                    53:b6:6a:3b:70:56:d5:dc:5b:c0:4c:76:f0:50:a2:
                    c4:80:07:a8:63:a5:98:0c:4f:a5:cb:00:99:01:48:
                    dd:b4:91:51:a1:bc:60:9f:3c:20:ef:b1:77:53:62:
                    26:4c:4c:aa:f8:2e:34:17:d6:14:7c:39:d3:ce:d3:
                    45:da:37:7f:a7:a6:ec:af:19:69:61:b1:fc:e7:ec:
                    9e:20:6a:92:ed:89:2c:47:c4:f2:e8:1a:62:d8:b9:
                    4b:15:ed:df:39:10:0b:f8:c6:f3:83:c3:a3:77:c5:
                    a1:da:cb:5b:10:d7:fa:fe:f0:cb:47:e6:30:a8:d4:
                    40:a4:da:12:b6:8f:25:13:7f:83:01:25:4f:9f:f8:
                    63:21:c0:6b:6d:36:29:98:1e:ee:90:27:1e:85:97:
                    27:4a:b0:53:13:44:89:2a:39:16:b9:56:c8:1d:92:
                    37:d5:39:1b:aa:ec:c1:a7:7e:3e:a7:73:87:cb:ba:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0A:AC:66:7B:34:21:C4:F1:60:B1:D0:76:26:D7:75:09:D1:DC:AE
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:6c:2c:a3:e5:4b:e7:e5:9c:05:5c:66:b9:37:2f:e6:d1:
         fd:88:ea:d6:bb:cc:44:f7:ec:85:d2:4d:9a:e5:e6:83:32:0a:
         71:b3:ce:9b:06:57:ea:8f:a5:c3:f9:c6:da:0b:3a:9e:ab:39:
         4d:7c:8a:7c:f5:28:9e:a3:67:b9:b0:66:30:bf:29:30:86:00:
         fc:a5:77:15:35:7b:46:6c:3b:d5:91:6c:d2:62:1f:9c:6a:27:
         c6:68:22:9b:d9:4f:c4:24:09:66:4b:e5:1a:96:0e:fa:d3:da:
         13:0d:19:8b:6b:19:4d:2c:58:01:da:6d:9c:d8:07:97:34:4d:
         f8:30:d5:a2:63:0d:68:8d:78:39:7c:e6:82:01:ba:a2:c1:2f:
         c6:ef:2f:46:77:84:9b:81:30:87:1b:7a:83:17:1c:a7:0b:20:
         52:a6:48:bb:8b:05:92:51:64:37:d6:06:9b:30:5f:79:69:d9:
         7a:11:96:11:a1:1b:df:d4:95:d7:85:52:fe:33:e1:0b:f5:f8:
         e5:a7:b1:e9:2e:c8:22:73:61:68:e9:6c:1c:ab:92:8b:65:12:
         50:c7:a4:ec:15:07:f4:78:ca:f6:7f:d6:cb:e7:c8:ad:c0:69:
         7e:31:1e:b8:85:b3:76:ef:84:8e:fe:7b:17:ce:c9:08:4c:9a:
         98:8f:32:0f
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIULGt5pzv7J/Qgq2816oEJI6kPF6gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDY2NzIwYzJjNTMwNTM3NDg2OTExZDFhNDJlYTg3YzI1
MmY2ZGJjN2Q3YmMyMTE4NTAwHhcNMjUwNzI1MTIyNjM2WhcNMjYwNzI0MTIzMTM2
WjAzMTEwLwYDVQQDEygyMTBBQUM2NjdCMzQyMUM0RjE2MEIxRDA3NjI2RDc3NTA5
RDFEQ0FFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XH4wubFfTX6
KTXByheApa50hDVQ5Wnw+zD0fL4OhmZELarY7F00jvqRY+ahlwHmJoz/ayZh2ltB
kFD+dYvoiLJTLUhzwnvDmWhTtmo7cFbV3FvATHbwUKLEgAeoY6WYDE+lywCZAUjd
tJFRobxgnzwg77F3U2ImTEyq+C40F9YUfDnTztNF2jd/p6bsrxlpYbH85+yeIGqS
7YksR8Ty6Bpi2LlLFe3fORAL+Mbzg8Ojd8Wh2stbENf6/vDLR+YwqNRApNoSto8l
E3+DASVPn/hjIcBrbTYpmB7ukCcehZcnSrBTE0SJKjkWuVbIHZI31TkbquzBp34+
p3OHy7oQpwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCEKrGZ7NCHE8WCx0HYm13UJ
0dyuMB8GA1UdIwQYMBaAFH5siClRU4l+u8EZBxa+zoSl9+ixMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4NGZhYTMxZjE3LzAv
N0U2Qzg4Mjk1MTUzODk3RUJCQzExOTA3MTZCRUNFODRBNUY3RThCMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2UzZjIxYmQ5LTI5MTMtNGQyMy1iOWQxLTIwZGViOWI0ZmM3Zi9kNjY3
MjBjMmM1MzA1Mzc0ODY5MTFkMWE0MmVhODdjMjUyZjZkYmM3ZDdiYzIxMTg1MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4
NGZhYTMxZjE3LzAvMzczNDJlMzEzMjMwMmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASngTMA0GCSqGSIb3DQEBCwUAA4IBAQAh
tWwso+VL5+WcBVxmuTcv5tH9iOrWu8xE9+yF0k2a5eaDMgpxs86bBlfqj6XD+cba
CzqeqzlNfIp89Sieo2e5sGYwvykwhgD8pXcVNXtGbDvVkWzSYh+caifGaCKb2U/E
JAlmS+Ualg7609oTDRmLaxlNLFgB2m2c2AeXNE34MNWiYw1ojXg5fOaCAbqiwS/G
7y9Gd4SbgTCHG3qDFxynCyBSpki7iwWSUWQ31gabMF95adl6EZYRoRvf1JXXhVL+
M+EL9fjlp7HpLsgic2Fo6Wwcq5KLZRJQx6TsFQf0eMr2f9bL58itwGl+MR64hbN2
74SO/nsXzskITJqYjzIP
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:21 2025 by rpki-client