Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32342d3234203d3e20323138383632.roa
File:                     37342e3132302e31382e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier:          GAGZGWAEs31L4Z7333LiqGiOVxivxhpvWTJIrtqkbfI=
Subject key identifier:   48:C9:8E:31:0E:61:61:1D:FE:4D:1D:9E:FF:51:B4:99:AF:99:DA:02
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       097065188151DF01DAFF3FD3D342AE4DF2639E50
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32342d3234203d3e20323138383632.roa
Signing time:             Mon 07 Sep 2026 06:21:36 +0000
ROA not before:           Mon 07 Sep 2026 06:16:36 +0000
ROA not after:            Mon 06 Sep 2027 06:21:36 +0000
asID:                     218862
IP address blocks:        74.120.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl
                          rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:70:65:18:81:51:df:01:da:ff:3f:d3:d3:42:ae:4d:f2:63:9e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Sep  7 06:16:36 2026 GMT
            Not After : Sep  6 06:21:36 2027 GMT
        Subject: CN=48C98E310E61611DFE4D1D9EFF51B499AF99DA02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:8d:4c:ac:d8:1b:c2:32:c8:e8:0b:a6:3d:
                    74:5b:67:41:a5:fe:26:53:1b:a7:1c:51:0e:08:79:
                    49:fd:34:aa:8b:37:08:2e:41:e5:78:f7:76:60:c5:
                    be:d6:fd:ec:36:68:49:ec:57:60:47:6f:a1:11:88:
                    00:69:6e:81:1e:57:c1:3e:38:0c:c5:4c:0c:00:2f:
                    c7:9a:e9:6a:97:8d:12:91:d4:21:15:31:82:d3:35:
                    59:ec:dd:dc:55:0b:14:71:ea:e2:46:8b:da:6f:33:
                    d6:b8:11:95:52:e5:82:b0:25:28:37:df:7e:ac:61:
                    cf:c2:a4:29:1b:98:15:8d:92:34:31:12:bf:48:fe:
                    5d:15:f0:7f:65:0e:65:07:f2:8a:cf:f5:63:0b:9a:
                    62:64:7c:98:25:de:61:f6:5c:cf:a9:cb:6c:c8:fe:
                    0b:33:2e:6a:95:d9:9f:c3:e6:88:18:e1:bb:1a:a7:
                    7d:f7:91:f2:36:16:3b:4d:b8:e1:7e:d4:f4:b6:38:
                    98:ba:41:3c:e8:3a:cb:9c:2e:f9:7e:bb:bd:02:de:
                    88:f5:b1:71:07:1b:08:1b:db:5f:e2:4d:40:f5:3a:
                    36:f3:32:04:dd:5b:ac:e1:15:44:b0:61:de:44:e5:
                    79:41:b7:20:af:c5:48:8b:2e:d1:78:6f:68:8c:4a:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:8E:31:0E:61:61:1D:FE:4D:1D:9E:FF:51:B4:99:AF:99:DA:02
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31382e302f32342d3234203d3e20323138383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:46:e5:03:7e:fb:6c:51:68:61:ac:23:86:f5:e3:18:9d:
         b5:09:f4:9e:17:e9:6a:a0:16:1d:4b:44:0c:32:12:5f:65:fa:
         4b:b7:16:0d:11:0a:e6:ee:90:84:1c:46:47:57:16:46:b8:06:
         bd:a7:37:86:92:46:b2:a3:b5:76:b5:14:8d:8a:ad:19:30:5a:
         5f:5b:18:d3:67:8a:71:ea:b0:70:49:2d:df:0e:c9:c3:fe:ae:
         39:33:02:40:a7:e2:58:59:0a:86:90:e3:d8:8f:59:46:9b:66:
         34:61:8e:f0:03:06:6f:7b:67:ea:8a:67:86:d4:9c:fb:31:31:
         fc:ac:85:44:02:88:c1:cf:9c:b7:a6:83:8c:d2:c9:b9:b7:22:
         f3:32:c9:a0:c5:ec:22:55:96:0f:1f:a1:dd:da:d0:e3:20:49:
         c0:31:a8:28:b9:f3:cc:86:8d:b6:5c:c9:4c:7a:dd:06:1a:13:
         ab:30:10:02:45:54:99:d3:46:4a:e3:d4:b7:74:99:41:53:ec:
         9b:e8:9f:51:ec:78:66:db:6e:aa:bf:25:b5:59:4c:af:aa:6d:
         56:3e:c6:0c:93:d0:c5:b1:f3:f0:9b:06:f8:c4:64:40:ff:75:
         9d:e6:58:b3:4e:e7:c8:c3:5d:b5:95:73:f1:76:fd:e9:f1:43:
         74:3c:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:09 2026 by rpki-client