Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3232203d3e20323132323338.roa
File:                     37342e3132342e3232302e302f32322d3232203d3e20323132323338.roa (raw, json)
Hash identifier:          G+iZX03JXWQC/lTbpnmf3ZZuq0gIAqwCao9U9Fx6rR8=
Subject key identifier:   61:8E:2C:80:2C:48:65:BC:CC:A9:D3:59:F7:77:A2:59:90:F1:5F:8B
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       5EA34EF99FB1F93A6F50671633389A4AA1DE86D7
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3232203d3e20323132323338.roa
Signing time:             Sat 12 Jul 2025 06:34:15 +0000
ROA not before:           Sat 12 Jul 2025 06:29:15 +0000
ROA not after:            Sat 11 Jul 2026 06:34:15 +0000
asID:                     212238
IP address blocks:        74.124.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a3:4e:f9:9f:b1:f9:3a:6f:50:67:16:33:38:9a:4a:a1:de:86:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:15 2025 GMT
            Not After : Jul 11 06:34:15 2026 GMT
        Subject: CN=618E2C802C4865BCCCA9D359F777A25990F15F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:ff:5b:2b:3e:50:f6:0f:83:6f:e2:95:7b:
                    24:fb:be:98:b2:ad:e4:21:db:7d:d8:a7:ba:2c:2c:
                    cd:5c:18:78:47:90:dd:14:0e:d9:ec:39:86:af:6f:
                    92:1c:33:dd:e5:7d:9c:d0:13:b5:63:88:96:97:5b:
                    5f:ac:a7:93:41:0a:4f:19:38:71:66:80:2a:5d:07:
                    9e:71:c8:45:21:aa:f5:4c:95:d8:35:56:76:71:05:
                    dc:9f:f1:73:85:d5:bb:18:87:49:7e:20:eb:54:91:
                    a2:27:8f:ae:41:18:5f:eb:83:b6:69:f1:8c:c5:41:
                    81:fc:05:11:b1:6a:c3:51:76:7e:fa:89:3f:2c:6a:
                    24:6d:fc:af:a7:22:2d:e6:f1:b0:92:ff:4d:df:cf:
                    70:d5:72:c2:c8:b8:26:e5:c2:bf:17:a6:20:92:9e:
                    8a:44:4a:49:d3:ec:2f:b7:53:61:12:06:c1:44:3a:
                    40:0f:a6:a6:78:70:f9:6d:ec:c6:7c:0c:09:ce:75:
                    c7:74:fe:23:df:e5:81:36:a9:00:79:d3:51:26:b2:
                    2e:ae:db:08:65:5b:8b:9b:12:ce:b2:35:5f:91:ff:
                    10:24:eb:dc:7f:40:9c:c0:87:43:81:bc:0b:f0:d2:
                    bc:bc:ee:e6:b1:0f:97:8c:36:a3:6d:fb:8d:d7:7d:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8E:2C:80:2C:48:65:BC:CC:A9:D3:59:F7:77:A2:59:90:F1:5F:8B
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3232203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:a7:d6:c8:50:de:0e:3a:da:4e:1f:bc:9a:06:5e:dd:28:9d:
         0d:06:b3:c9:34:41:1a:a4:5f:4a:02:3e:56:f9:8e:0b:ff:f2:
         8f:29:21:df:3f:df:4b:f4:ad:6d:4d:d9:ae:98:06:db:d2:05:
         48:a0:71:79:d4:ed:e7:99:b0:fe:47:8d:9c:e5:55:0e:64:76:
         64:cb:2c:1e:20:66:e2:aa:67:ce:8b:db:eb:81:2a:bc:45:a9:
         a1:0b:4d:f5:6d:24:a0:9a:ec:81:1a:fa:1d:1a:4e:67:28:78:
         db:86:ca:21:80:07:b2:4c:d1:c4:89:a7:61:e6:ab:94:41:c6:
         d3:e8:54:51:c4:c9:b1:95:ca:9d:9e:aa:b3:93:10:e6:45:27:
         30:1b:09:8a:5d:87:5c:1d:e0:db:29:20:40:0a:eb:dd:ad:41:
         ca:eb:aa:3c:a9:a8:ba:a6:8f:86:62:bd:61:27:be:7a:2e:4c:
         6f:f4:82:c3:76:5e:89:2b:78:ca:02:4d:2a:e7:7d:19:41:fe:
         69:fa:0c:1a:55:5a:f1:04:83:45:26:dd:09:e3:47:4f:85:e7:
         40:99:50:40:2d:3d:ed:5c:2d:c1:52:3a:91:f6:f7:88:37:ad:
         00:0e:9f:ee:3a:19:9d:57:46:42:65:d9:88:9e:26:69:53:e4:
         63:c3:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:16 2025 by rpki-client