Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e6c0e5b-1223-3af8-9e1e-2d36a54bbfd9.roa
File:                     7e6c0e5b-1223-3af8-9e1e-2d36a54bbfd9.roa (raw, json)
Hash identifier:          6yeBJocnN8V42LSlWPqw77Q4sT7iyOYYHD0r1h/XhXA=
Subject key identifier:   1A:77:39:67:F3:1B:9B:E1:34:18:A2:86:6C:54:34:E3:9F:02:24:43
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A268AB05FC82EE30BE5816700
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e6c0e5b-1223-3af8-9e1e-2d36a54bbfd9.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     31898
IP address blocks:        158.120.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b0:5f:c8:2e:e3:0b:e5:81:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=86d93876-74a6-40ad-bf41-ee4ff8499b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:59:03:31:3f:f0:b9:22:d9:1c:12:19:64:
                    2e:d5:0e:05:1c:a2:ec:66:77:ac:0f:ba:84:a3:bb:
                    8f:c1:9e:49:d5:d8:21:42:4e:ff:cd:80:4d:6a:36:
                    a5:f1:3a:53:0b:4c:23:62:26:b0:95:cf:0b:ab:a2:
                    4d:aa:98:6f:88:a1:9b:22:75:31:71:fa:f6:e3:7a:
                    5b:ba:da:37:4a:86:46:f9:d9:da:8a:8a:cf:62:12:
                    38:b4:5f:80:28:14:38:0d:12:96:85:19:51:67:8d:
                    af:86:81:d3:6e:2c:3e:2e:6f:47:d4:bf:d5:e5:f0:
                    f9:fa:bd:01:d5:13:97:17:4c:8a:ff:4b:59:f4:bc:
                    d6:85:be:ed:4b:d6:95:5e:5b:d8:dc:2e:0b:fe:0d:
                    15:2e:c2:75:78:22:8e:49:49:94:68:de:ee:b1:01:
                    1a:66:4c:fc:7e:26:42:7a:5d:b9:4f:85:15:86:d0:
                    3f:6b:64:a6:e4:fc:eb:11:62:b2:dd:75:61:95:94:
                    ea:25:98:67:15:2b:9c:2f:1e:e1:2e:e8:63:27:f5:
                    5d:be:02:20:22:d7:90:36:f6:01:0b:dc:f2:19:e2:
                    be:b0:04:4a:cb:cf:f9:a9:89:99:80:6a:9c:3b:49:
                    e3:8c:70:a6:1f:61:5d:4b:ea:a4:3e:27:94:20:7d:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:39:67:F3:1B:9B:E1:34:18:A2:86:6C:54:34:E3:9F:02:24:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/7e6c0e5b-1223-3af8-9e1e-2d36a54bbfd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:8b:36:3c:d2:20:33:b3:2a:3e:93:d9:c0:6d:06:1a:e8:
         ee:23:ec:b8:f8:43:ad:49:2e:64:22:56:58:8a:c0:bd:88:a3:
         f1:99:fe:d6:15:a9:74:76:67:5d:4e:79:9e:d0:4a:a9:e0:c4:
         34:3a:2f:c3:cd:56:ab:35:de:10:d8:97:fd:a8:3d:14:52:e8:
         47:61:6f:4f:78:d7:66:0e:a8:ec:42:18:4a:fc:df:ba:a7:72:
         3d:b8:d4:e3:ba:32:98:6a:10:7e:6f:68:36:b6:eb:ef:02:a2:
         3e:70:92:e7:db:54:dd:8e:cf:e9:77:95:e6:a4:5e:fa:63:57:
         a5:b9:4b:84:a8:fb:b0:d1:82:8e:7f:27:82:e0:04:f7:c1:56:
         32:c6:86:a3:b0:d8:e2:d1:2e:10:84:60:1b:60:84:9e:69:60:
         b0:1f:b1:28:90:60:dd:53:0f:b4:c8:d2:3b:a4:ad:e7:74:16:
         02:07:38:e6:ef:61:73:c3:11:77:3c:9d:d1:7c:69:64:dc:d5:
         de:65:b3:97:d8:79:01:1a:df:35:9d:18:99:88:b4:a1:6d:0f:
         e2:ad:8c:c9:22:4b:09:df:8b:9a:aa:b8:35:a1:ac:ec:75:39:
         9d:03:38:09:87:05:e9:88:b5:07:cc:e6:29:01:d5:cc:84:03:
         22:d9:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:40:44 2025 by rpki-client