Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20313937353337.roa
File:                     37342e3132302e3132332e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          gTkCPHQo/ZirPSkBLX7RM074x++rjHP4wIK46eXxIU8=
Subject key identifier:   55:3B:62:D8:0E:A6:F7:7C:7B:FA:1C:D7:21:2A:CC:E3:89:95:79:3B
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       398525B3C86BE3DE347E383AE9577FF85E3BA6F7
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20313937353337.roa
Signing time:             Sat 05 Jul 2025 15:46:17 +0000
ROA not before:           Sat 05 Jul 2025 15:41:17 +0000
ROA not after:            Sat 04 Jul 2026 15:46:17 +0000
asID:                     197537
IP address blocks:        74.120.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:85:25:b3:c8:6b:e3:de:34:7e:38:3a:e9:57:7f:f8:5e:3b:a6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Jul  5 15:41:17 2025 GMT
            Not After : Jul  4 15:46:17 2026 GMT
        Subject: CN=553B62D80EA6F77C7BFA1CD7212ACCE38995793B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:07:44:e8:02:b5:d4:40:66:e9:6e:4e:e4:
                    a9:85:15:2b:48:2f:67:cf:eb:ed:23:60:7f:04:7b:
                    c7:02:d1:35:f1:dd:ff:b5:83:4b:28:d4:27:e8:70:
                    7a:b8:75:97:91:24:ef:bd:26:62:48:5f:a2:68:d8:
                    05:7c:b4:1f:87:d2:0c:70:8d:a2:07:39:34:ef:5b:
                    ab:52:6c:21:5d:a9:0a:43:9e:e9:92:a4:b1:cb:a9:
                    60:89:ba:48:a0:cc:21:98:39:42:58:be:71:bb:4f:
                    7e:ca:75:1c:08:69:52:e4:47:6c:a4:d5:55:4c:d6:
                    c9:6f:e5:76:a0:e1:fd:5c:35:5f:92:a3:de:36:1a:
                    e4:41:78:13:4b:a2:af:21:e3:1f:a8:b0:b5:a0:da:
                    ee:46:78:03:0a:f0:37:89:da:01:09:72:6e:75:b2:
                    fb:e2:1d:8c:7a:55:c7:56:95:c5:f0:f1:1a:76:5c:
                    16:8a:d2:7f:01:0d:97:98:e6:e7:fb:69:7e:b6:f8:
                    98:ba:28:47:26:8e:48:43:e4:c8:44:16:3e:eb:65:
                    24:f7:0b:c7:1a:fd:94:fa:ec:c9:c8:17:f4:eb:a4:
                    3a:43:58:8a:cc:9a:2d:c9:9a:08:7f:98:2f:28:40:
                    27:80:f3:21:8c:11:68:be:80:92:08:63:50:a2:26:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3B:62:D8:0E:A6:F7:7C:7B:FA:1C:D7:21:2A:CC:E3:89:95:79:3B
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:4b:43:ac:ab:36:8f:cb:9e:1d:71:6d:0c:af:56:da:5c:
         fa:82:13:b4:2e:e9:95:f7:24:82:84:c8:91:16:d8:ff:b0:48:
         7d:4d:9c:41:14:15:69:d3:53:a4:1a:50:a5:57:c9:fd:53:aa:
         ad:36:ed:fb:39:25:f2:af:ff:c9:d9:36:64:3e:26:c6:ab:be:
         1d:6e:0b:ee:36:bc:a3:62:59:c3:31:48:ba:8c:fc:62:1a:d4:
         8d:c4:ee:10:56:54:36:ab:18:f4:57:4b:f5:d3:ae:f1:ea:f9:
         81:a8:df:70:ef:1e:b7:40:54:25:1d:fe:20:a1:d2:5b:1c:29:
         76:0d:fb:cd:01:56:b3:34:6d:54:1f:58:40:85:3f:45:2f:8b:
         f5:08:5f:ee:8e:19:54:67:ca:a5:d8:98:a7:23:e8:14:62:9a:
         98:83:01:49:b9:6d:10:a7:d1:06:e1:ed:a2:25:23:44:e7:97:
         16:25:9c:f0:52:9f:aa:a7:00:60:1d:07:a5:b6:9e:67:88:ff:
         34:15:54:1f:6a:17:ce:21:dd:66:9f:48:14:16:57:a7:2e:3f:
         4d:07:1a:3b:f2:e8:2d:ad:57:26:0b:de:6f:a4:98:ee:35:01:
         42:43:88:28:23:c2:36:c4:5a:5a:a1:c1:ce:37:d0:89:f2:c1:
         93:ab:9f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:23 2025 by rpki-client