Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33352e302f32342d3234203d3e2039333034.roa
File:                     37342e3131342e33352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          Tgj2OkNYAVVjTpYr6ozbJLoSzYKxRaUPNA+4DW+lmrI=
Subject key identifier:   64:97:59:C1:CF:E8:80:AB:42:38:EC:8F:4A:60:B0:36:75:92:1E:C9
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       2251922AB5071DD07B7B6F50267919435FA7914B
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33352e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 17 Aug 2025 16:26:58 +0000
ROA not before:           Sun 17 Aug 2025 16:21:58 +0000
ROA not after:            Sun 16 Aug 2026 16:26:58 +0000
asID:                     9304
IP address blocks:        74.114.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:51:92:2a:b5:07:1d:d0:7b:7b:6f:50:26:79:19:43:5f:a7:91:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Aug 17 16:21:58 2025 GMT
            Not After : Aug 16 16:26:58 2026 GMT
        Subject: CN=649759C1CFE880AB4238EC8F4A60B03675921EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:00:eb:a3:69:e3:b2:78:3c:e3:e4:3b:19:
                    c8:8f:f6:62:08:06:ab:ae:68:c4:10:b2:08:72:06:
                    7a:31:4d:78:a5:b9:4d:e9:2b:66:26:f4:f5:ad:5a:
                    1c:15:e9:ec:07:c4:33:bb:7f:d1:03:96:00:23:27:
                    6b:36:cb:0f:c3:da:81:a5:0e:b2:81:10:c1:4b:12:
                    67:71:68:b7:c7:32:6f:46:ee:b6:aa:a1:02:fa:ce:
                    57:8d:eb:6c:71:83:91:d5:1a:61:4c:fb:72:6d:80:
                    35:be:2b:1c:aa:a6:74:5b:9a:17:75:2a:25:a6:36:
                    28:d8:81:59:ad:8b:fe:e4:25:43:29:3d:af:78:16:
                    1a:a7:d6:d0:b0:9e:e7:58:34:21:05:6b:91:91:24:
                    cb:68:45:f3:e3:6c:d6:4d:39:da:f0:8a:67:1c:42:
                    02:b7:91:a0:12:a6:11:64:1f:ab:96:0b:a4:d0:76:
                    eb:3f:c0:27:0b:cf:1d:7a:39:b7:38:19:33:83:0e:
                    73:18:0f:ea:cb:a9:f9:d7:98:df:61:9f:6f:44:23:
                    34:d6:51:0b:9f:37:d5:cf:ad:61:f9:19:3c:90:54:
                    4c:ee:b7:91:95:1b:45:9d:b5:38:66:7d:7d:49:0c:
                    78:94:76:b9:3c:2f:07:44:8a:9d:2b:8f:a8:6c:ad:
                    21:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:59:C1:CF:E8:80:AB:42:38:EC:8F:4A:60:B0:36:75:92:1E:C9
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3131342e33352e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:f4:e2:02:95:5c:3a:e5:17:b4:dd:e0:1d:e1:7c:29:38:
         d0:ef:05:e7:c0:10:34:76:8e:1e:ab:df:0b:0d:b8:aa:b3:b5:
         22:a5:2e:52:67:83:af:f6:d6:c8:4e:2e:df:3f:ac:b1:6e:f6:
         36:f5:e1:a4:64:d7:53:81:64:f5:13:c1:1c:d7:91:04:00:9a:
         3e:7c:a9:09:4d:80:cc:90:f6:d4:c6:97:db:e3:43:6e:8b:fe:
         c3:1a:40:cf:ad:19:5a:91:ee:16:0d:0e:4b:f1:52:68:a3:74:
         36:b6:ba:f2:ec:28:a6:a2:6e:1f:fe:95:b1:06:6d:5d:5e:89:
         b5:72:3f:00:03:2b:ca:f6:54:cf:a9:de:68:91:b9:2b:b7:1e:
         b7:0b:4f:d2:0a:df:92:2f:76:28:1f:af:bc:8e:cc:ab:5d:8c:
         b1:f0:b9:6d:94:64:9d:8f:9f:1c:95:fe:ad:d3:2a:b1:51:4b:
         8b:ea:86:6e:d5:37:65:eb:6d:2c:87:6b:65:1f:44:57:86:bd:
         2a:35:1b:b9:e6:2e:ce:35:79:04:1d:22:a4:02:e8:02:a6:53:
         02:5c:6b:18:3a:09:d6:3f:8a:98:28:a0:65:6d:f5:c7:ed:3e:
         12:c2:04:fd:9b:37:36:07:e9:c6:db:32:7b:d8:a7:e8:01:03:
         41:7e:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:56:26 2025 by rpki-client