Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e203134333135.roa
File:                     37342e3132302e3132312e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          GO5uZz2z5ZNSJIfdcR5xmrzs5Q+38SMY6y9HyztmlKs=
Subject key identifier:   EB:F3:53:59:90:CA:FC:D4:1C:3A:E1:7A:06:6A:C4:2A:4D:6D:A7:88
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       428C276A6216C3D5E0DB4F10F0F56E48B0B237D2
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e203134333135.roa
Signing time:             Thu 10 Jul 2025 11:29:44 +0000
ROA not before:           Thu 10 Jul 2025 11:24:44 +0000
ROA not after:            Thu 09 Jul 2026 11:29:44 +0000
asID:                     14315
IP address blocks:        74.120.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8c:27:6a:62:16:c3:d5:e0:db:4f:10:f0:f5:6e:48:b0:b2:37:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Jul 10 11:24:44 2025 GMT
            Not After : Jul  9 11:29:44 2026 GMT
        Subject: CN=EBF3535990CAFCD41C3AE17A066AC42A4D6DA788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:34:32:7d:d0:21:8b:96:4c:a6:f2:99:00:
                    ab:d7:59:ea:b9:be:60:d7:e2:be:c9:f6:1f:e7:01:
                    e5:48:ee:e2:39:8e:ce:6c:df:d2:91:4c:e3:f9:42:
                    75:4f:ba:ba:74:70:8b:1b:d8:8e:b9:f3:1d:f8:fe:
                    cf:e7:a2:82:a9:14:16:8b:26:9c:53:07:da:87:e5:
                    11:24:12:77:d8:36:08:6f:b1:05:c1:c6:9e:ae:ce:
                    a7:d6:58:a6:8f:78:40:48:a9:73:63:2f:50:ee:be:
                    4b:96:5b:25:8c:40:e4:71:f5:11:54:e8:7d:03:f7:
                    dd:bb:7c:5f:04:a8:9d:62:f6:69:3e:ca:d4:09:0a:
                    f1:e1:bf:52:ad:6d:da:6a:75:b0:1d:9c:ba:8c:69:
                    9b:dc:66:24:36:78:bf:96:24:04:f6:ba:5d:80:30:
                    2d:4a:08:ef:75:d6:40:2d:fa:07:50:5c:58:e4:50:
                    fb:c1:f3:e3:6d:2f:8f:06:58:1c:66:01:2e:8e:cc:
                    3a:14:17:92:c9:bb:75:c9:69:c8:55:43:07:43:76:
                    b7:7f:b5:ff:63:77:24:d1:f6:17:69:f1:11:55:d5:
                    17:99:39:3f:c0:9e:74:c3:e5:42:92:f4:b0:e0:21:
                    44:b8:aa:04:45:84:d2:a8:02:18:1f:fd:2b:90:cb:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F3:53:59:90:CA:FC:D4:1C:3A:E1:7A:06:6A:C4:2A:4D:6D:A7:88
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:73:bf:1f:05:fc:82:3d:d0:bc:e0:24:fb:e1:f2:2f:c4:
         ba:73:c3:1c:a9:9d:00:7c:a5:05:94:cc:a8:46:e3:0b:3f:bb:
         2f:8d:08:a6:3a:cd:11:a5:5d:ba:c3:ee:c6:7f:9a:c6:8e:cd:
         68:6f:62:29:2b:2a:6f:dd:33:9e:24:d7:84:91:34:3d:0d:d3:
         e8:59:29:f6:3b:11:f9:b8:2d:a4:12:d3:45:45:8d:55:b6:c5:
         3e:65:5f:8e:a5:a2:c5:4f:b5:1d:b7:34:bc:8e:40:81:d0:9d:
         07:42:27:e2:93:10:60:77:0b:23:d8:5f:fb:6e:a0:6e:a5:0a:
         b1:2d:01:10:33:14:da:7d:19:63:a4:d8:b3:2c:f6:e3:73:50:
         b7:ee:80:80:21:60:01:88:3e:42:55:1a:38:ba:5d:ca:e0:ea:
         36:41:13:b9:de:6c:16:72:5b:23:5e:57:8b:e2:aa:62:aa:ec:
         d5:cd:1a:2b:9c:7c:23:ba:c5:25:38:5a:8f:0c:41:c4:7f:3a:
         3a:68:34:78:f0:f2:05:ad:32:f6:a8:c4:e0:cc:1a:7d:16:e6:
         9a:b4:6d:7b:ae:aa:73:3e:de:e5:1b:96:de:b4:b6:3b:e8:18:
         6f:55:09:ce:95:c1:1c:5e:2d:53:de:64:95:5c:83:00:a4:2a:
         19:2f:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:25:20 2025 by rpki-client