Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20343031383537.roa
File:                     37342e3131342e33322e302f32342d3234203d3e20343031383537.roa (raw, json)
Hash identifier:          k6FjDloOm0UF1/j4leD7GgYrz1+9A4E1OG4J6EoWdPE=
Subject key identifier:   93:53:07:1A:68:37:33:39:EB:06:C5:E8:0F:3C:E6:32:12:F6:CC:58
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       5019F97DFE956FC4A26A2E78741485A0B018BD4D
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20343031383537.roa
Signing time:             Thu 26 Feb 2026 09:40:08 +0000
ROA not before:           Thu 26 Feb 2026 09:35:08 +0000
ROA not after:            Thu 25 Feb 2027 09:40:08 +0000
asID:                     401857
IP address blocks:        74.114.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 10:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:19:f9:7d:fe:95:6f:c4:a2:6a:2e:78:74:14:85:a0:b0:18:bd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Feb 26 09:35:08 2026 GMT
            Not After : Feb 25 09:40:08 2027 GMT
        Subject: CN=9353071A68373339EB06C5E80F3CE63212F6CC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:1c:e4:f2:c3:aa:e5:7c:7f:a7:4c:c8:13:
                    17:a0:d7:b2:0b:fe:3c:66:14:49:29:6c:79:04:8a:
                    21:02:55:31:fa:ad:0c:51:6c:29:6e:59:95:5b:5c:
                    5b:d5:36:31:8d:02:10:f3:0c:b4:56:55:1b:a7:2f:
                    88:f6:e7:b5:33:6d:2e:e9:33:a0:2f:ad:5b:47:f9:
                    1f:d8:7d:eb:7e:39:24:fa:a8:0a:02:de:a8:8b:3b:
                    31:3e:1d:1c:ef:63:ff:d4:08:10:78:36:c0:93:97:
                    80:85:77:c7:b2:14:6d:14:de:c2:02:b5:95:30:09:
                    0f:58:de:e4:77:79:9d:ff:39:30:db:72:99:2c:13:
                    63:c5:05:49:ed:31:d5:bd:3a:6e:5d:35:ea:3a:ec:
                    b3:d5:d8:80:55:d1:2c:19:c7:14:2f:2e:50:bc:29:
                    12:d1:01:18:77:85:c0:4b:8f:78:34:71:45:9a:3a:
                    e0:bf:9e:d3:ef:73:cd:ba:db:44:98:e4:3d:28:13:
                    7f:4a:27:30:d5:a4:c3:80:43:ae:a5:97:89:68:f4:
                    24:ca:48:cc:b2:82:8c:27:41:be:81:dc:73:a0:72:
                    ee:0f:93:ab:36:d1:f2:9b:ed:d1:c5:3f:59:eb:e7:
                    86:2f:1a:21:46:eb:1e:a7:2a:c1:f2:eb:56:be:1e:
                    b3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:07:1A:68:37:33:39:EB:06:C5:E8:0F:3C:E6:32:12:F6:CC:58
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33322e302f32342d3234203d3e20343031383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:11:37:e3:aa:7a:c7:57:aa:04:d6:d7:98:0a:cb:67:9e:84:
         55:0f:c5:ea:09:aa:9c:ec:49:5d:50:56:8d:16:bb:db:ff:17:
         26:c6:cd:20:74:3f:79:b3:08:c8:3a:a3:67:e1:5b:37:a1:6a:
         6b:f7:11:10:71:d9:b1:65:ce:06:a2:5d:dc:12:9f:9e:33:ed:
         bf:a2:60:5f:26:30:e2:8e:35:35:32:18:e2:f0:91:d4:73:6a:
         7b:3e:f4:a5:f7:81:a9:5a:fc:54:12:e0:4e:b9:12:05:ce:7c:
         04:d4:4c:66:03:f7:1c:e3:c3:87:d7:23:91:ec:33:2b:92:fd:
         6d:1e:5c:eb:16:b7:ff:ab:ab:79:86:16:4c:49:19:39:2d:c9:
         01:58:57:86:9a:27:e5:38:69:54:7d:a5:d7:ea:ce:59:47:91:
         50:47:af:79:5d:6c:44:9d:5f:47:17:30:c4:1f:33:d0:d8:ab:
         ae:15:cf:7b:c8:b6:85:21:3a:21:e3:60:5b:4c:b1:52:21:90:
         8a:03:c7:b9:01:ad:af:88:5b:68:a2:26:31:00:23:20:21:b8:
         77:3a:94:a3:45:86:c5:e2:b2:61:68:a8:29:f4:01:76:0a:09:
         14:40:8a:7b:09:1a:bf:94:c3:c1:05:e5:30:dc:81:cc:05:87:
         76:95:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:13:53 2026 by rpki-client