Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e203136323736.roa
File:                     37342e3132302e31372e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          Am+oYfHH6g9siGLKTgse6vyAinC3ufAlk3YBGX+JJ0g=
Subject key identifier:   A8:EA:0C:80:F0:1C:29:17:42:FD:5C:21:F9:72:EA:68:26:FE:2B:EB
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       598E15ACD13E2E49518E02D808DC40D68EE57EC4
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e203136323736.roa
Signing time:             Wed 06 Aug 2025 11:13:30 +0000
ROA not before:           Wed 06 Aug 2025 11:08:30 +0000
ROA not after:            Wed 05 Aug 2026 11:13:30 +0000
asID:                     16276
IP address blocks:        74.120.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8e:15:ac:d1:3e:2e:49:51:8e:02:d8:08:dc:40:d6:8e:e5:7e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Aug  6 11:08:30 2025 GMT
            Not After : Aug  5 11:13:30 2026 GMT
        Subject: CN=A8EA0C80F01C291742FD5C21F972EA6826FE2BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:c8:66:34:04:e0:8d:44:88:21:5b:7f:46:
                    a2:b9:a5:29:79:0b:ff:3c:5e:3b:08:0b:3d:bc:53:
                    1f:ac:3f:cc:79:f2:0a:47:ce:57:d6:a0:b5:dd:6a:
                    08:02:94:c0:55:52:48:2d:bc:c6:68:8a:49:5f:72:
                    68:34:79:98:0e:c2:25:54:49:7e:8e:2f:d9:a0:29:
                    0e:26:86:d0:b8:ef:bc:91:d6:67:5b:1d:4e:f9:ab:
                    00:aa:db:e0:2e:06:14:7a:6a:46:3c:92:90:78:68:
                    58:ab:17:5a:21:76:45:69:36:b7:dc:6c:bc:69:88:
                    33:ad:56:10:e5:be:f5:db:fe:dd:b3:06:9a:d4:cf:
                    d1:2c:c5:de:34:1c:eb:c5:3d:e1:ef:c0:15:87:d5:
                    96:9c:f8:ac:28:fe:68:c3:8a:f1:c6:1e:68:74:16:
                    e8:a7:ef:8f:6a:0c:37:90:8b:fd:34:0c:12:07:ba:
                    d8:a9:37:29:df:d3:91:f2:c4:f4:ba:71:95:d7:40:
                    fe:14:5f:36:40:bc:88:f9:c6:8f:76:c5:74:6b:04:
                    d8:4d:ed:3b:93:6a:a4:5f:fb:09:9a:bb:87:aa:e2:
                    98:d6:de:ce:36:9a:4f:ae:8e:44:fc:97:77:37:0a:
                    b6:fa:b9:77:f6:84:5b:08:38:53:4f:03:c9:60:50:
                    ab:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EA:0C:80:F0:1C:29:17:42:FD:5C:21:F9:72:EA:68:26:FE:2B:EB
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:72:b0:c2:fa:7f:75:52:99:2d:ce:c9:be:a5:48:ba:02:
         a6:19:2c:ef:18:ce:8f:d0:a8:c4:95:63:d5:ed:ff:dd:1c:fa:
         d1:a4:9d:52:15:70:18:46:4d:fb:e6:a6:0e:0a:bc:53:5f:a4:
         f9:16:9c:4b:e6:6e:58:60:fb:c3:c0:cd:df:62:d9:c4:72:1d:
         f5:08:98:09:ce:b3:12:93:06:f6:8a:c5:c9:37:af:35:53:79:
         8f:3e:06:7b:e9:5f:59:fc:1d:b5:fa:7e:fd:2f:5c:8c:82:9c:
         c4:88:22:d7:ef:e5:3c:96:5e:70:06:12:53:c0:d5:f9:0f:e8:
         6a:37:78:32:f8:ef:3f:bc:16:b8:a7:4d:a1:44:79:ae:ab:b7:
         92:03:ba:3e:fe:e6:4f:c6:71:d8:de:25:9e:06:d1:8c:11:0b:
         2d:4a:ce:56:a5:75:21:8a:8d:17:39:28:f5:5d:9c:f5:06:01:
         e2:30:d9:14:d7:45:0a:a7:a9:f2:d5:9e:7a:00:13:8e:b2:8a:
         dd:6b:ec:cf:a4:b7:a1:ec:8b:47:13:81:10:f8:4d:fb:13:0e:
         1c:54:09:74:f1:96:bb:cc:44:a5:c1:43:ab:33:55:96:e9:80:
         0f:33:2b:1c:62:f9:15:4d:c3:60:34:c9:a9:8e:bf:da:e2:3d:
         be:2e:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:58:05 2025 by rpki-client