Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/31ccb345-1236-386a-9d74-7ef7f13b13d3.roa
File:                     31ccb345-1236-386a-9d74-7ef7f13b13d3.roa (raw, json)
Hash identifier:          j0gIrPrw8ZgJspVt/yomiaGCC3wEThSNqXMx6iZHCQQ=
Subject key identifier:   40:13:AD:9A:0F:FA:F0:EB:26:B8:A3:92:D1:F8:0B:D0:09:9A:71:8B
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A23C009DD95B1AC6A0462B400
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/31ccb345-1236-386a-9d74-7ef7f13b13d3.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        207.202.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:09:dd:95:b1:ac:6a:04:62:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=d59f9481-30f5-4a8e-8172-fc55ec6377a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:ef:da:6d:28:e5:01:f5:4d:cd:12:08:05:
                    ac:e2:3f:6a:fb:39:16:0a:8e:be:33:1f:75:68:b4:
                    94:ec:ca:73:fd:5f:7e:ee:8b:d3:2c:47:90:9b:30:
                    c2:52:9c:2e:88:7e:83:aa:77:58:6f:5d:28:57:88:
                    7e:65:db:63:c5:97:59:b4:79:94:88:70:f5:1c:ee:
                    e3:0c:f2:c3:c3:12:aa:b9:07:9a:5b:5c:65:ee:22:
                    47:5c:24:6e:ef:30:8b:fb:72:f6:2f:95:dc:a2:bf:
                    3f:9c:00:96:66:29:d7:f8:93:c4:5e:dc:53:55:a5:
                    aa:cb:0b:27:2b:10:d5:cc:6b:4a:e5:48:dc:21:24:
                    e9:f9:e9:ae:6b:8c:e2:b7:33:9f:df:57:e8:9b:b6:
                    32:dd:a6:cf:97:25:c8:9d:95:e5:88:b6:0c:6c:13:
                    3e:30:fe:3b:dd:e8:94:29:58:21:eb:f7:9e:95:5e:
                    43:83:58:ad:3b:de:16:7f:09:85:2a:f1:94:ab:e8:
                    a3:0e:a6:7d:28:3c:03:14:12:5f:a7:d7:39:f7:b3:
                    3a:a7:7b:66:a1:08:00:27:2c:80:eb:61:6c:e3:73:
                    2b:58:d8:18:de:83:c0:3b:f2:49:2f:d3:c3:39:f0:
                    e7:b0:53:71:dd:c4:bb:d6:5c:21:45:cb:a3:81:a0:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:13:AD:9A:0F:FA:F0:EB:26:B8:A3:92:D1:F8:0B:D0:09:9A:71:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/31ccb345-1236-386a-9d74-7ef7f13b13d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:1d:19:3d:4b:9c:57:80:5f:f8:0c:c9:e4:2a:8e:37:4a:
         40:a4:8d:17:06:1c:be:29:70:eb:0d:cc:c7:be:b9:90:31:05:
         3e:3f:35:3b:35:5a:6d:49:c7:d6:83:93:31:f8:d3:11:d8:cf:
         42:c6:14:b8:82:57:69:33:91:18:2b:27:8a:8e:d1:b0:04:03:
         3d:ad:2e:d1:dc:f8:9d:0f:60:6e:62:20:25:d4:d4:df:16:d7:
         93:de:bc:35:4d:39:f6:96:54:fa:ae:56:72:14:a6:de:c5:3d:
         52:ac:c6:a2:a7:03:a7:e5:f2:76:0b:5e:dd:7c:ae:08:cf:28:
         a8:bd:66:3d:63:8d:54:e1:04:89:30:cd:0c:e3:4e:85:8f:b8:
         d9:9c:3b:97:85:77:a3:de:e2:9e:90:99:1a:e3:bf:78:87:73:
         ee:09:e2:1e:3b:a8:ba:ff:18:73:da:25:24:4e:2b:61:53:1a:
         81:76:e7:db:9a:93:fa:f5:fb:74:16:cc:96:0a:ac:55:65:2f:
         8b:3c:d9:a7:a4:41:13:73:d9:48:3d:4c:a4:bb:52:2c:e3:49:
         15:79:40:f0:6a:8a:7d:9d:00:a5:e8:d7:53:da:01:1f:f5:b8:
         a9:47:25:98:eb:80:13:dc:44:59:94:b1:e6:6b:52:47:8d:57:
         57:9a:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:38:20 2025 by rpki-client