Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e20323138383837.roa
File:                     37342e3131342e33332e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier:          efAnCpawjpCAFEtAMyzHGd4lIRezJVtVm7JJ3wCt+5g=
Subject key identifier:   0D:52:44:06:9B:58:78:D3:78:53:86:6B:F8:41:97:00:74:22:AA:0D
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       317E9302BC0064818ABC13BE6C9A7049E81875A9
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e20323138383837.roa
Signing time:             Mon 07 Sep 2026 09:32:41 +0000
ROA not before:           Mon 07 Sep 2026 09:27:41 +0000
ROA not after:            Mon 06 Sep 2027 09:32:41 +0000
asID:                     218887
IP address blocks:        74.114.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 04:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7e:93:02:bc:00:64:81:8a:bc:13:be:6c:9a:70:49:e8:18:75:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Sep  7 09:27:41 2026 GMT
            Not After : Sep  6 09:32:41 2027 GMT
        Subject: CN=0D5244069B5878D37853866BF84197007422AA0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:70:e9:aa:66:79:d4:9c:17:e1:2a:70:0b:
                    d7:4e:db:85:8e:94:91:e1:86:59:e3:a8:78:49:f7:
                    ba:d8:5a:a1:94:18:b1:87:0c:29:58:d0:b8:e9:45:
                    2d:4a:a6:ff:2b:03:07:57:d5:ab:f4:d6:27:b5:d3:
                    d5:ba:0d:df:cb:e3:6c:a0:18:f7:fe:b2:6e:3f:62:
                    ef:43:20:4a:26:7b:3b:85:2a:69:46:fb:c5:88:67:
                    57:9a:11:06:7a:74:85:71:0f:9d:54:55:14:8c:65:
                    8c:c1:ad:3a:a6:01:22:06:73:ab:49:5a:99:de:6a:
                    52:c3:37:e7:43:ae:db:0a:fd:70:8b:83:65:46:96:
                    1d:59:93:bc:9d:9d:e7:01:25:dc:49:49:8f:64:4c:
                    e3:d2:b5:88:23:07:60:f9:fd:9c:11:6f:e1:b4:4d:
                    a8:3a:c7:45:1e:b0:81:da:50:be:0d:7d:41:bc:a6:
                    44:9e:c4:f5:c1:f1:eb:a0:3f:3c:b0:4b:ad:32:17:
                    43:68:cc:66:e2:83:13:fb:e2:77:c2:3a:da:f8:e5:
                    21:5e:56:50:cc:b2:8d:e1:34:d1:36:84:19:5e:eb:
                    3a:14:71:95:ba:bd:2b:e7:59:71:9c:78:37:00:24:
                    4a:53:38:33:07:9c:14:f3:ad:f2:b0:1a:1d:ae:ff:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:44:06:9B:58:78:D3:78:53:86:6B:F8:41:97:00:74:22:AA:0D
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33332e302f32342d3234203d3e20323138383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:53:05:82:d9:92:a0:7d:30:28:11:e9:ee:84:ac:f2:a7:16:
         d2:fe:f0:da:b0:18:fd:56:36:60:cf:7b:41:1a:42:b3:6e:f3:
         ab:cf:66:59:4b:9e:4c:8d:d1:f7:2a:14:49:b6:b8:55:40:7c:
         f5:c0:1c:c5:fb:b4:37:c1:74:42:2b:cf:f6:da:29:30:6e:7d:
         cf:e5:09:68:3e:a1:c3:da:ac:bf:d3:d8:dc:97:8e:a9:af:83:
         31:d0:ed:42:c8:fc:43:03:2e:13:8c:51:d3:26:1b:3f:b7:ff:
         0d:c3:67:01:58:b2:13:b7:1b:74:72:2a:bf:8a:07:ad:ff:c6:
         46:b9:da:f8:e6:ad:fa:16:d6:95:d6:4c:18:f6:83:17:84:0e:
         16:60:4f:cd:48:45:ba:98:c9:9c:f0:16:39:cd:b0:cd:33:39:
         85:2d:91:8c:43:0a:3e:2d:59:86:46:31:c7:5d:2d:b8:87:36:
         49:b6:1f:0b:dc:d0:08:1e:f4:c2:f7:15:be:de:17:a8:2d:37:
         46:f8:39:a6:20:94:c0:06:c0:95:a6:74:f1:ae:a6:13:73:99:
         6e:ff:aa:41:4b:68:22:12:65:32:cf:8e:35:d2:b8:c2:9e:4a:
         6a:b3:f4:a4:77:07:f8:d0:70:14:98:c0:ee:18:6d:4c:1f:75:
         56:8d:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:31:58 2026 by rpki-client