Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e31372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Tc2FTLUYCXYuJ9m1slm7uakKI+7QXNz/h6Sow4VEfu8=
Subject key identifier:   61:9E:F5:76:18:A9:D6:DE:15:F2:A3:F2:85:DE:58:79:82:1A:E5:3C
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       40136DB8F280EE3092CD09A54FA8EBC0CD7D2D67
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa
Signing time:             Fri 12 Sep 2025 10:18:26 +0000
ROA not before:           Fri 12 Sep 2025 10:13:26 +0000
ROA not after:            Fri 11 Sep 2026 10:18:26 +0000
asID:                     834
IP address blocks:        74.120.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 08:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:13:6d:b8:f2:80:ee:30:92:cd:09:a5:4f:a8:eb:c0:cd:7d:2d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Sep 12 10:13:26 2025 GMT
            Not After : Sep 11 10:18:26 2026 GMT
        Subject: CN=619EF57618A9D6DE15F2A3F285DE5879821AE53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:89:ed:a3:f0:70:08:ef:6c:c6:f6:82:40:
                    e2:0a:39:53:a0:aa:05:69:23:25:08:3e:30:d9:f1:
                    1d:73:af:17:94:31:12:6f:2e:90:dd:30:a6:47:ae:
                    59:22:46:86:1d:b1:4a:0e:68:e6:20:02:47:bb:3b:
                    21:3f:00:1b:b8:40:d2:a7:7c:59:eb:fe:f6:24:52:
                    08:be:27:7b:11:b1:0c:d5:a1:91:c5:cb:5f:ae:6a:
                    7f:0f:ba:80:f2:61:96:6a:b1:48:73:18:df:df:07:
                    ec:7d:46:85:d2:cd:87:d2:98:7c:fd:03:b6:2f:10:
                    bc:26:58:98:59:94:e3:80:41:a9:4b:45:24:91:dc:
                    a6:f9:d8:8c:79:4f:1e:df:31:57:07:10:e2:c7:c7:
                    2e:59:fb:b6:a2:b3:97:8b:e0:61:e0:a1:80:04:41:
                    af:c2:1b:9a:53:1a:e3:c2:ab:17:91:ac:4d:6a:85:
                    cd:2c:e0:64:28:a8:ee:16:a8:b2:d6:3a:0e:8e:44:
                    db:aa:60:53:f5:c8:d7:d7:73:8f:21:1e:62:1f:4b:
                    eb:7b:70:82:3a:03:21:e7:39:34:8e:5d:01:04:ca:
                    db:41:a9:77:54:4e:6c:f2:ee:f1:9b:9d:f1:d6:d0:
                    85:11:79:aa:c3:b1:b3:c7:df:18:a6:8a:54:6d:1a:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9E:F5:76:18:A9:D6:DE:15:F2:A3:F2:85:DE:58:79:82:1A:E5:3C
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:76:34:d3:39:d5:ca:46:34:a6:59:48:c9:5c:12:2b:46:2e:
         7d:a1:52:07:78:ae:e5:20:90:4a:2d:53:5b:55:0e:6c:b1:e0:
         68:2a:39:d5:ed:9b:bb:34:0a:ce:6b:7d:1b:5a:7f:ed:f9:54:
         d8:b4:64:a2:16:27:cd:64:71:c2:49:8f:91:1d:b6:94:49:de:
         e6:d9:cf:d6:24:2f:66:be:c3:b6:ac:ce:a6:65:6d:e2:c0:3a:
         bb:5c:3b:bf:78:b3:76:09:06:e5:46:bf:0a:2f:b4:bf:9a:a0:
         83:bb:fa:9c:09:67:3b:42:f8:ac:e8:8a:d0:53:f4:96:5a:46:
         7d:f9:ab:f1:99:5d:a0:03:88:bd:46:41:42:f4:f8:a2:32:e2:
         7b:a2:ac:dd:87:db:a5:28:e8:07:f2:e2:88:8f:ae:87:35:de:
         7e:ea:28:a6:93:44:9f:c3:1a:75:15:26:6c:6e:59:29:a2:bc:
         1d:8a:e9:fa:a3:59:ea:6d:34:2b:91:c3:0d:11:26:9c:1b:78:
         6b:cf:66:21:ac:cf:f9:5b:ba:8b:bc:ee:9a:ba:c4:cd:f6:ba:
         fe:d3:c8:19:5b:76:c5:26:5f:e9:c4:d6:56:b7:7f:09:85:ee:
         f1:65:03:fe:d3:fc:10:ce:ba:f9:4b:20:72:38:4c:02:64:9c:
         37:9b:6e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:37:31 2025 by rpki-client