Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e3132332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          kCFT/6LQQwMhzSeAdKmmTFWlSjyDofm7YLEG/EHQsOk=
Subject key identifier:   A6:50:B5:32:0A:BF:9C:8C:8C:09:EC:DD:04:8E:AE:D3:F5:1C:05:23
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       13365C667661CF47F95AE4274E5D67B8F25423DB
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 06 Mar 2025 00:02:33 +0000
ROA not before:           Wed 05 Mar 2025 23:57:33 +0000
ROA not after:            Thu 05 Mar 2026 00:02:33 +0000
asID:                     834
IP address blocks:        74.120.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 05:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:36:5c:66:76:61:cf:47:f9:5a:e4:27:4e:5d:67:b8:f2:54:23:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Mar  5 23:57:33 2025 GMT
            Not After : Mar  5 00:02:33 2026 GMT
        Subject: CN=A650B5320ABF9C8C8C09ECDD048EAED3F51C0523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:4d:06:1b:b9:24:50:b2:b2:98:c3:76:b7:
                    ce:bd:ec:0d:87:61:e7:f6:4a:48:c1:10:4a:f6:13:
                    a8:41:99:99:f0:9e:88:00:2a:d0:5f:78:9b:e4:7f:
                    c9:7b:cb:3a:e6:99:e0:f5:29:69:81:35:c1:c3:70:
                    ec:b5:1c:89:b3:c6:93:8f:74:68:9e:0d:4f:f0:a7:
                    b3:91:46:ca:09:2b:4a:76:2c:cd:05:f8:be:00:48:
                    66:24:75:75:72:6c:b5:a2:66:6f:0d:df:8e:fd:c0:
                    8a:1e:6c:17:1a:cf:42:29:50:f2:9e:03:eb:2a:f3:
                    94:cf:04:ac:c4:58:95:0d:28:16:07:5c:0c:37:34:
                    87:21:7d:0e:88:ce:00:b7:59:20:9c:1b:e0:86:bf:
                    2c:40:46:5f:ca:ef:db:e2:e2:45:6b:69:7a:9d:15:
                    4c:f0:2b:08:c8:44:55:a3:77:28:c8:23:d4:1e:c4:
                    54:f4:fa:05:d9:46:18:02:1b:15:be:ba:38:74:5c:
                    f7:bf:e8:5f:c1:a7:4f:61:d0:ec:22:f8:30:c5:3a:
                    35:2b:db:e0:82:de:a9:f4:68:5a:49:b6:8b:7e:f9:
                    d7:db:2e:1a:c5:c7:ab:06:6f:96:92:f5:17:3b:48:
                    d6:2e:65:81:e7:27:3d:70:54:47:fa:44:0e:ad:21:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:50:B5:32:0A:BF:9C:8C:8C:09:EC:DD:04:8E:AE:D3:F5:1C:05:23
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:17:44:74:7e:48:75:2a:43:de:c6:58:15:dc:0b:87:4c:92:
         8b:07:ca:ba:44:4b:0a:ff:e0:10:38:bd:e9:4f:59:00:8f:0f:
         94:ae:af:aa:3d:84:bf:4e:d1:2a:03:fc:5b:1c:7a:3c:22:62:
         ed:7e:81:6c:db:c5:d1:17:71:7b:24:06:a8:d4:41:c7:98:8a:
         e0:49:d7:5b:f5:1e:31:f4:59:fe:a6:1b:df:3f:61:f4:76:db:
         de:7a:75:28:99:0b:59:50:47:fc:ca:c5:4a:e0:d8:81:14:2c:
         6c:1b:c4:63:85:77:8c:6f:ec:39:31:39:c8:5b:b1:2d:78:38:
         56:e6:0f:ee:b9:67:fc:00:bf:fd:a9:b7:d0:9e:c8:b1:cc:f1:
         0f:56:6a:a5:32:2b:13:e9:03:58:4f:d6:e3:95:11:40:2f:1a:
         4d:da:77:4d:d6:c2:01:5a:1d:27:ff:02:79:29:87:a0:0f:32:
         99:a6:2a:14:36:02:42:bc:20:4c:15:74:de:5a:41:8d:63:85:
         b6:91:89:7a:3e:4f:c8:cd:03:49:da:4e:e5:2f:62:e6:8a:07:
         12:7c:9f:09:59:11:d1:ac:20:b7:81:ac:9f:26:98:c7:e9:88:
         a6:3d:a7:29:e0:d7:dd:f4:a4:95:96:12:47:1c:65:6f:e6:ff:
         f0:20:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:48:03 2025 by rpki-client