Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
File:                     37342e3132302e3132302e302f32342d3234203d3e2039333132.roa (raw, json)
Hash identifier:          Pp8qqKzEJrkD5HVyQYq4RA8IwqPhZi5Rlb4pIoSBI3w=
Subject key identifier:   33:CE:CF:96:98:30:C2:CF:F3:ED:97:46:78:EA:95:AC:B3:C9:89:67
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       4DEC23C266066D46460D6F7E552B6042DBE434
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
Signing time:             Fri 22 Nov 2024 20:49:22 +0000
ROA not before:           Fri 22 Nov 2024 20:44:22 +0000
ROA not after:            Fri 21 Nov 2025 20:49:22 +0000
asID:                     9312
IP address blocks:        74.120.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ec:23:c2:66:06:6d:46:46:0d:6f:7e:55:2b:60:42:db:e4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Nov 22 20:44:22 2024 GMT
            Not After : Nov 21 20:49:22 2025 GMT
        Subject: CN=33CECF969830C2CFF3ED974678EA95ACB3C98967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:24:67:a1:a2:19:35:ef:97:4b:8d:2b:6f:
                    df:cb:9e:d9:f3:27:73:ac:72:84:44:95:71:80:f7:
                    a9:e8:9a:2c:71:2c:0f:c3:c7:c1:e7:64:48:92:e8:
                    f8:be:fa:b2:61:a6:03:e8:45:fe:fb:a1:91:bb:5d:
                    b7:d8:3f:5e:b7:f2:f3:03:d3:d4:f0:75:35:dd:3c:
                    63:d0:34:2f:f5:ac:11:8b:19:9d:74:a5:1b:85:1c:
                    8a:6b:88:9e:d6:1d:06:97:68:cf:d5:0c:a1:6b:3e:
                    ec:8c:41:61:9d:8b:c0:78:15:7a:9b:1f:81:63:19:
                    7c:bb:5e:be:08:f2:95:39:c9:bd:f5:f4:b9:65:53:
                    2c:71:ca:70:9f:30:e1:c0:ab:90:e5:ce:ed:6d:1d:
                    21:6b:ab:66:37:1a:e8:c4:9a:66:80:c0:05:2a:72:
                    56:34:15:f1:86:fd:3a:a0:0b:37:cd:90:7d:91:c3:
                    c6:60:ad:f9:06:45:00:0b:e1:af:a9:76:b6:c6:ae:
                    18:35:85:fa:b9:9a:36:d4:11:9b:35:57:48:1c:41:
                    a6:38:fa:0f:97:f5:91:fa:2e:ec:06:ed:64:b3:da:
                    2c:3c:f7:51:5e:27:3c:55:0f:3c:1a:2f:40:59:a6:
                    72:8a:8a:29:16:d3:bd:d7:55:fe:99:5a:f0:cb:82:
                    24:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CE:CF:96:98:30:C2:CF:F3:ED:97:46:78:EA:95:AC:B3:C9:89:67
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ec:52:7c:2b:8e:50:e6:e3:38:e3:82:e7:08:7f:42:12:ed:
         6f:66:d6:a0:37:90:ed:7c:ea:70:73:9c:e8:32:4e:81:9c:14:
         5d:c7:c4:9a:3c:25:cb:a8:a0:71:be:3d:23:24:37:8b:48:0f:
         f5:84:5c:7f:e3:44:57:27:a1:c5:09:66:31:c3:b0:4c:03:d1:
         44:04:d6:ac:63:65:3c:77:c3:92:fe:a1:cb:cc:0b:12:88:fe:
         01:95:64:f9:84:65:0c:b6:d5:44:e2:29:c9:84:d8:b9:f5:6f:
         c3:e3:12:0a:e4:79:e6:0b:36:61:47:56:69:ce:66:df:fa:37:
         47:46:98:48:c6:54:23:a5:3c:8e:ec:57:cd:89:34:11:90:bd:
         48:c2:9a:37:cf:65:b1:63:da:11:67:a6:2d:2b:29:48:8f:9c:
         0f:ae:87:7f:50:3a:a3:6e:5e:a7:df:42:c7:24:1e:16:61:25:
         10:85:8c:21:48:e3:fb:cc:0f:24:8d:bf:d9:f7:fe:50:bb:1e:
         48:ef:84:41:5c:4d:96:cb:6d:a9:09:4e:f8:09:f8:3e:8d:29:
         5a:54:54:9f:8e:e9:ef:c6:47:19:1e:66:24:ad:02:92:5c:e1:
         d8:1e:a0:e0:80:46:7c:a9:4d:65:a9:f3:af:27:6b:af:42:79:
         fa:a0:33:cc
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgITTewjwmYGbUZGDW9+VStgQtvkNDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI5OTk1YmEwNWU5MGFhMzk1MWQ5YWIzOWQ5MzU1YjZiNjgz
ZTMyZTZhMTlhZGYxNTNmMjAeFw0yNDExMjIyMDQ0MjJaFw0yNTExMjEyMDQ5MjJa
MDMxMTAvBgNVBAMTKDMzQ0VDRjk2OTgzMEMyQ0ZGM0VEOTc0Njc4RUE5NUFDQjND
OTg5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+CRnoaIZNe+X
S40rb9/LntnzJ3OscoRElXGA96nomixxLA/Dx8HnZEiS6Pi++rJhpgPoRf77oZG7
XbfYP1638vMD09TwdTXdPGPQNC/1rBGLGZ10pRuFHIpriJ7WHQaXaM/VDKFrPuyM
QWGdi8B4FXqbH4FjGXy7Xr4I8pU5yb319LllUyxxynCfMOHAq5Dlzu1tHSFrq2Y3
GujEmmaAwAUqclY0FfGG/TqgCzfNkH2Rw8ZgrfkGRQAL4a+pdrbGrhg1hfq5mjbU
EZs1V0gcQaY4+g+X9ZH6LuwG7WSz2iw891FeJzxVDzwaL0BZpnKKiikW073XVf6Z
WvDLgiRvAgMBAAGjggKwMIICrDAdBgNVHQ4EFgQUM87Plpgwws/z7ZdGeOqVrLPJ
iWcwHwYDVR0jBBgwFoAUNRTu0O5cVTQjol8dfVb8JhMRoeswDgYDVR0PAQH/BAQD
AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTg4MDI5ZTAxODVkMDdjNWY2MDQ0ZWIvMC8z
NTE0RUVEMEVFNUM1NTM0MjNBMjVGMUQ3RDU2RkMyNjEzMTFBMUVCLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvOTA3ZTAxMDUtMzUxNi00N2EwLWE5YzItNWYwYjc3NjYxY2IxLzk5OTVi
YTA1ZTkwYWEzOTUxZDlhYjM5ZDkzNTViNmI2ODNlMzJlNmExOWFkZjE1M2YyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1ZDA3
YzVmNjA0NGViLzAvMzczNDJlMzEzMjMwMmUzMTMyMzAyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzOTMzMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEp4eDANBgkqhkiG9w0BAQsFAAOC
AQEAAOxSfCuOUObjOOOC5wh/QhLtb2bWoDeQ7XzqcHOc6DJOgZwUXcfEmjwly6ig
cb49IyQ3i0gP9YRcf+NEVyehxQlmMcOwTAPRRATWrGNlPHfDkv6hy8wLEoj+AZVk
+YRlDLbVROIpyYTYufVvw+MSCuR55gs2YUdWac5m3/o3R0aYSMZUI6U8juxXzYk0
EZC9SMKaN89lsWPaEWemLSspSI+cD66Hf1A6o25ep99CxyQeFmElEIWMIUjj+8wP
JI2/2ff+ULseSO+EQVxNlsttqQlO+An4Po0pWlRUn47p78ZHGR5mJK0Cklzh2B6g
4IBGfKlNZanzrydrr0J5+qAzzA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:03 2025 by rpki-client