Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/37342e3131322e31332e302f32342d3234203d3e20313734.roa
File:                     37342e3131322e31332e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          DC5AJOjxRnqjj9pWpCDvhnSs8wfcyMSma0pyKotZxmE=
Subject key identifier:   92:AA:7A:2C:6F:F3:A1:6B:F2:BE:06:E7:28:87:C0:CA:9E:D2:6E:D0
Certificate issuer:       /CN=988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b
Certificate serial:       61A044588F3C4D3B1CDF348A787103DCEB675F0E
Authority key identifier: A5:0A:E3:6B:0D:CE:F0:AB:91:A2:90:FE:C4:B0:EA:4A:BF:89:27:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/37342e3131322e31332e302f32342d3234203d3e20313734.roa
Signing time:             Mon 18 May 2026 10:36:56 +0000
ROA not before:           Mon 18 May 2026 10:31:56 +0000
ROA not after:            Mon 17 May 2027 10:36:56 +0000
asID:                     174
IP address blocks:        74.112.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/A50AE36B0DCEF0AB91A290FEC4B0EA4ABF8927DA.crl
                          rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/A50AE36B0DCEF0AB91A290FEC4B0EA4ABF8927DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 10:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a0:44:58:8f:3c:4d:3b:1c:df:34:8a:78:71:03:dc:eb:67:5f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b
        Validity
            Not Before: May 18 10:31:56 2026 GMT
            Not After : May 17 10:36:56 2027 GMT
        Subject: CN=92AA7A2C6FF3A16BF2BE06E72887C0CA9ED26ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:25:9c:c2:b4:2e:ea:29:a7:fb:9b:fa:d7:
                    c5:48:23:25:dc:20:eb:a0:db:e6:9c:4a:b7:cd:f9:
                    ac:8c:a2:ae:d0:cb:da:6c:16:4e:94:de:b7:78:25:
                    20:1b:1d:eb:51:16:8e:ec:4b:ee:ed:6b:99:3d:6f:
                    aa:7b:b7:24:3e:4a:7d:7c:b3:00:d4:fe:9c:31:3c:
                    9b:16:dc:25:e0:68:6a:8d:4c:2b:3f:50:e9:46:85:
                    88:61:f2:3f:a4:31:54:49:ce:15:ba:89:6b:4b:ca:
                    e5:6b:a7:9f:95:2c:ca:62:09:13:ef:e7:ae:f1:39:
                    f0:ab:0c:28:e1:a3:55:e5:4e:f5:be:d5:da:67:a0:
                    90:4c:92:5a:51:05:1f:3c:43:8a:fa:7a:25:7c:cc:
                    85:28:6a:28:c0:98:aa:9c:39:32:ea:06:c7:d4:ef:
                    1c:c0:cd:73:07:b9:bc:78:c1:49:d2:dc:07:19:5a:
                    e6:49:49:d1:03:01:06:20:ee:44:05:d0:81:bd:3d:
                    a0:c1:b3:76:34:a7:a3:99:14:c9:24:f5:7a:90:ff:
                    16:45:68:23:64:47:7d:c9:92:62:f0:37:30:27:a0:
                    40:60:4d:c6:2e:aa:a5:35:59:62:94:50:48:13:0b:
                    f4:84:ec:f0:79:9b:c4:88:5f:1b:65:5c:9e:52:1d:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AA:7A:2C:6F:F3:A1:6B:F2:BE:06:E7:28:87:C0:CA:9E:D2:6E:D0
            X509v3 Authority Key Identifier:
                keyid:A5:0A:E3:6B:0D:CE:F0:AB:91:A2:90:FE:C4:B0:EA:4A:BF:89:27:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/A50AE36B0DCEF0AB91A290FEC4B0EA4ABF8927DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/80ef3651-cfb9-4a74-98e5-eb6e9d9afc4a/988acbbba276ee07ef203cf4a8a2dc315248cbd9d7a17eb93b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/236acb016dc947219c82120fb95921a0/0/37342e3131322e31332e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c6:8d:e7:eb:f1:50:98:32:c9:fe:66:f5:b2:da:2f:41:62:
         fe:6a:c8:3b:ac:7a:5d:69:3b:33:75:f0:65:5e:54:a9:4a:c4:
         72:26:bc:1d:da:11:f0:63:12:12:9b:9b:e3:2b:42:d1:6b:e7:
         b2:ba:2c:f1:a7:92:90:65:fb:23:75:02:c2:e7:2e:9b:a5:1a:
         1f:43:86:24:15:8a:c9:98:fb:5d:9a:fa:57:32:34:8f:a5:4d:
         2a:90:13:ad:11:2a:fa:40:e9:d3:a0:7d:41:e1:a1:97:37:45:
         32:0a:a5:1e:91:6f:15:b7:db:f5:30:dd:72:62:3d:49:1e:15:
         92:89:4e:9c:8f:0c:05:ef:52:3e:df:67:89:da:60:47:ef:e5:
         c1:b6:e0:5f:07:44:e2:0d:1b:ee:75:fc:b4:90:45:94:42:f8:
         a4:77:b2:a1:7e:08:6e:3f:23:f9:45:f0:5c:66:e8:8f:53:c9:
         e5:34:90:f0:58:4c:92:29:63:c4:e8:a9:f6:e4:b3:aa:bc:ef:
         97:84:aa:8b:42:32:95:5e:32:fa:37:62:5d:23:59:43:44:21:
         34:4f:16:65:d0:5a:2c:10:ad:39:84:77:c3:39:17:1c:0b:8c:
         b1:45:1e:c2:50:c7:68:de:29:85:40:33:21:ef:9f:f6:32:ec:
         23:85:dc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:07 2026 by rpki-client