Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20313438393936.roa
File:                     37342e3132302e3132332e302f32342d3234203d3e20313438393936.roa (raw, json)
Hash identifier:          qyvuV9yneGQNXSR9VpYUJhSFRJ5MX7O6UZmDWHAvWXc=
Subject key identifier:   B7:48:55:AB:A8:77:F3:29:64:A4:CD:B5:44:D6:87:14:F4:54:3B:20
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       6AE3F2F3B121ACBEF58B4A4C827C5B538A8E1017
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20313438393936.roa
Signing time:             Fri 15 May 2026 22:50:37 +0000
ROA not before:           Fri 15 May 2026 22:45:37 +0000
ROA not after:            Fri 14 May 2027 22:50:37 +0000
asID:                     148996
IP address blocks:        74.120.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 18:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e3:f2:f3:b1:21:ac:be:f5:8b:4a:4c:82:7c:5b:53:8a:8e:10:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: May 15 22:45:37 2026 GMT
            Not After : May 14 22:50:37 2027 GMT
        Subject: CN=B74855ABA877F32964A4CDB544D68714F4543B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:e1:d7:14:b5:60:f8:cf:5f:a5:63:2d:fc:
                    a1:0c:6f:4c:67:d5:18:d0:28:fc:77:c6:13:71:81:
                    a9:1f:df:3d:9f:33:ab:82:cb:4a:d1:38:71:2b:e7:
                    99:56:bd:7f:a2:b4:b7:cc:69:59:07:9a:56:6b:9e:
                    6e:b9:dc:bb:c6:17:48:a1:ba:e6:15:38:42:33:74:
                    2e:71:19:8d:b5:bd:3b:29:da:e5:02:22:f7:c0:0e:
                    44:4e:db:6a:87:19:38:0d:ce:df:23:f7:35:1a:dc:
                    25:c8:e1:2b:41:c9:fa:28:c6:c7:48:27:be:37:fe:
                    0b:8c:97:33:c1:aa:b0:94:5c:c2:dc:a8:f3:36:99:
                    2c:3c:66:5f:3a:f5:26:1f:46:92:70:9d:ee:80:5e:
                    e0:32:15:f2:01:98:8e:0c:a0:22:63:27:4c:66:f9:
                    59:91:30:ca:52:c0:b3:f6:b2:af:62:3b:8d:21:d3:
                    eb:17:2d:15:4c:7d:9f:15:6f:da:76:c4:a2:a9:c6:
                    ee:81:2a:a0:f7:2e:4e:46:aa:c6:26:8a:f7:ba:af:
                    e6:d1:c9:ec:7a:f3:d7:e3:6d:d5:80:33:16:f5:aa:
                    82:02:8a:34:3c:67:0a:1f:f8:2d:c7:6a:b6:c9:3e:
                    25:d7:6e:74:36:88:19:66:f6:df:e8:bc:95:e4:96:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:55:AB:A8:77:F3:29:64:A4:CD:B5:44:D6:87:14:F4:54:3B:20
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20313438393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:29:0e:36:5a:de:d9:87:34:1e:97:0e:72:5e:6a:7b:37:86:
         30:42:74:ad:7a:d8:36:69:c5:a7:38:67:0d:51:86:3e:f4:59:
         0a:82:18:41:c1:9c:fe:ec:fd:bc:4c:dc:d2:e8:fe:fe:b9:f2:
         7c:df:f5:7d:50:80:bb:53:6d:60:1f:3e:ea:06:5d:c8:8c:d7:
         0b:1a:f4:dd:a6:4c:11:9a:26:82:5f:32:4b:a2:99:c3:97:54:
         24:d3:12:7f:2f:38:a4:f7:d9:b8:9b:b1:33:03:e8:ca:b6:22:
         b3:ea:59:4b:29:fc:7c:d1:1a:e6:9d:c4:a7:41:45:a7:4f:dc:
         52:0f:d7:d9:e4:f0:85:42:ce:cf:79:d3:7e:f3:28:f9:1d:44:
         19:ad:c2:0f:2f:ac:96:a4:a4:fe:6b:ad:41:72:4f:2b:81:eb:
         9d:96:af:ff:dd:c7:7a:74:d2:d5:85:b2:b9:f8:0c:d7:b9:e1:
         af:2e:f4:76:cb:e9:79:32:8a:2f:9b:e4:b6:db:88:f5:92:d8:
         99:a2:6b:fd:e1:4e:5c:0b:df:e8:76:8e:9b:bf:5c:6b:1a:e9:
         31:57:1a:1b:df:1a:7e:81:2b:3f:d6:bb:08:99:21:78:bc:a8:
         0d:4a:b9:93:0a:08:5b:c1:07:b1:ff:15:1f:ea:3f:b6:54:23:
         70:17:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:58:56 2026 by rpki-client