Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e20343031383537.roa
File:                     37342e3132302e31362e302f32342d3234203d3e20343031383537.roa (raw, json)
Hash identifier:          v+Y2zizJVbz+e568rQ82gJ5iUiuyEGZIXjC2MCmgB6I=
Subject key identifier:   06:0B:BD:FD:A3:EF:E1:25:F0:36:C6:9D:8B:1A:97:26:5C:71:71:C1
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       3096DD0DF78921DD32C7139D322892D529FCCF57
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e20343031383537.roa
Signing time:             Thu 26 Feb 2026 09:40:07 +0000
ROA not before:           Thu 26 Feb 2026 09:35:07 +0000
ROA not after:            Thu 25 Feb 2027 09:40:07 +0000
asID:                     401857
IP address blocks:        74.120.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 10:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:96:dd:0d:f7:89:21:dd:32:c7:13:9d:32:28:92:d5:29:fc:cf:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Feb 26 09:35:07 2026 GMT
            Not After : Feb 25 09:40:07 2027 GMT
        Subject: CN=060BBDFDA3EFE125F036C69D8B1A97265C7171C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:ec:49:6a:50:19:6a:8a:f9:39:0d:06:8a:
                    1f:f7:4d:fa:b6:cb:90:b7:21:cd:fa:ce:b9:5b:af:
                    f8:86:70:21:83:87:62:a1:52:d5:5d:76:9a:16:25:
                    f4:07:6f:13:ab:27:df:88:81:38:98:63:16:4f:e2:
                    eb:6c:98:e5:f1:23:16:a7:5b:3f:ea:a0:e0:fe:16:
                    10:9a:d2:3a:46:40:f0:25:19:95:5e:2e:b7:64:19:
                    51:30:9f:06:c6:1a:da:2e:6f:92:af:94:27:eb:56:
                    c0:47:c5:c5:46:a0:6c:fd:81:63:a6:cf:c9:06:02:
                    41:b5:03:bc:85:26:4c:b4:75:b2:66:a7:d1:1e:ac:
                    cc:5e:ad:bd:c3:94:d0:69:11:2c:2a:ff:02:2f:88:
                    ab:af:78:74:d1:8f:4e:0c:c9:fb:8c:dd:9c:30:51:
                    68:fd:4d:d5:0f:38:86:47:ec:d9:4b:b6:c9:41:24:
                    73:88:cf:c0:55:81:08:cb:8e:f6:df:19:d8:05:b8:
                    70:a6:29:9f:c2:6e:21:3f:af:5d:ca:fd:50:d8:bc:
                    9d:fa:0e:d6:06:fe:22:a3:71:01:89:bf:f4:18:89:
                    e3:a3:c0:b4:c0:e0:cd:57:26:f3:99:2a:38:45:43:
                    e5:1b:06:3b:37:70:0f:72:3d:11:f2:cf:21:48:a9:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0B:BD:FD:A3:EF:E1:25:F0:36:C6:9D:8B:1A:97:26:5C:71:71:C1
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31362e302f32342d3234203d3e20343031383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:9d:3a:71:13:16:25:a1:35:11:2d:0f:54:de:93:af:b2:ed:
         b6:4c:81:5d:3f:cf:66:3e:8d:7f:b0:af:8a:d9:81:1a:14:9c:
         f7:47:8a:7f:22:26:a7:82:b3:4c:c5:b3:f1:b0:c2:bc:fc:32:
         66:42:e9:dc:67:5c:d3:fd:d3:36:a0:7e:65:66:7c:6e:3b:bf:
         2d:6f:31:79:d8:8d:f9:10:c5:60:d5:49:89:d3:70:ae:d4:41:
         cc:e1:00:77:8a:9a:3c:cc:1f:44:fe:a0:06:0f:06:a3:1a:bc:
         95:2f:c9:ca:70:1f:87:2f:96:bf:8c:13:d5:6d:c7:cd:d9:40:
         01:fe:11:23:37:a0:98:32:07:41:f6:d2:35:30:a7:0b:8a:29:
         ff:0b:de:51:a7:87:55:64:48:20:87:0d:ec:e6:b8:92:4d:01:
         70:9d:32:a2:28:69:0e:7f:9f:7a:1b:ef:10:0b:b9:6c:63:36:
         9c:ad:31:8a:b1:9a:06:ea:87:e1:f5:00:d0:eb:3d:da:66:d0:
         a0:eb:ff:bb:1b:2d:3a:65:0e:ea:68:df:d6:3d:9c:64:fc:48:
         32:a6:c7:2a:f3:59:df:15:7e:58:7f:cc:7f:1d:9f:7b:9a:aa:
         b2:30:09:64:c0:2d:7c:63:b7:2b:e1:30:52:c9:29:06:af:08:
         b4:29:b5:c6
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUMJbdDfeJId0yxxOdMiiS1Sn8z1cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDY2NzIwYzJjNTMwNTM3NDg2OTExZDFhNDJlYTg3YzI1
MmY2ZGJjN2Q3YmMyMTE4NTAwHhcNMjYwMjI2MDkzNTA3WhcNMjcwMjI1MDk0MDA3
WjAzMTEwLwYDVQQDEygwNjBCQkRGREEzRUZFMTI1RjAzNkM2OUQ4QjFBOTcyNjVD
NzE3MUMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/XsSWpQGWqK
+TkNBoof9036tsuQtyHN+s65W6/4hnAhg4dioVLVXXaaFiX0B28TqyffiIE4mGMW
T+LrbJjl8SMWp1s/6qDg/hYQmtI6RkDwJRmVXi63ZBlRMJ8GxhraLm+Sr5Qn61bA
R8XFRqBs/YFjps/JBgJBtQO8hSZMtHWyZqfRHqzMXq29w5TQaREsKv8CL4irr3h0
0Y9ODMn7jN2cMFFo/U3VDziGR+zZS7bJQSRziM/AVYEIy4723xnYBbhwpimfwm4h
P69dyv1Q2Lyd+g7WBv4io3EBib/0GInjo8C0wODNVybzmSo4RUPlGwY7N3APcj0R
8s8hSKk4CwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAYLvf2j7+El8DbGnYsalyZc
cXHBMB8GA1UdIwQYMBaAFH5siClRU4l+u8EZBxa+zoSl9+ixMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M2MzA4ZjE2NWJlYjRmMGU4ZWM3NWY4NGZhYTMxZjE3LzAv
N0U2Qzg4Mjk1MTUzODk3RUJCQzExOTA3MTZCRUNFODRBNUY3RThCMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2UzZjIxYmQ5LTI5MTMtNGQyMy1iOWQxLTIwZGViOWI0ZmM3Zi9kNjY3
MjBjMmM1MzA1Mzc0ODY5MTFkMWE0MmVhODdjMjUyZjZkYmM3ZDdiYzIxMTg1MC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNjMwOGYxNjViZWI0ZjBlOGVjNzVm
ODRmYWEzMWYxNy8wLzM3MzQyZTMxMzIzMDJlMzEzNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM0MzAzMTM4MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEp4EDANBgkqhkiG9w0BAQsF
AAOCAQEANZ06cRMWJaE1ES0PVN6Tr7LttkyBXT/PZj6Nf7CvitmBGhSc90eKfyIm
p4KzTMWz8bDCvPwyZkLp3Gdc0/3TNqB+ZWZ8bju/LW8xediN+RDFYNVJidNwrtRB
zOEAd4qaPMwfRP6gBg8Goxq8lS/JynAfhy+Wv4wT1W3HzdlAAf4RIzegmDIHQfbS
NTCnC4op/wveUaeHVWRIIIcN7Oa4kk0BcJ0yoihpDn+fehvvEAu5bGM2nK0xirGa
BuqH4fUA0Os92mbQoOv/uxstOmUO6mjf1j2cZPxIMqbHKvNZ3xV+WH/Mfx2fe5qq
sjAJZMAtfGO3K+EwUskpBq8ItCm1xg==
-----END CERTIFICATE-----
Generated at Thu Feb 26 15:13:53 2026 by rpki-client