Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa
File:                     AS7018.roa (raw, json)
Hash identifier:          vJaRfn0SWS5R5yozKkRQpOH2bPxZXYSkHmHBdKy9IFE=
Subject key identifier:   F8:F7:09:91:0A:0B:72:84:C9:B7:96:47:0D:7C:26:2D:DA:F3:27:3F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1CD5E9BB6E17910B4A5716C6206A9A9A37A4F6D7
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa
Signing time:             Thu 21 Mar 2024 00:00:08 +0000
ROA not before:           Wed 20 Mar 2024 23:55:08 +0000
ROA not after:            Thu 20 Mar 2025 00:00:08 +0000
asID:                     7018
IP address blocks:        74.50.2.0/23 maxlen: 24
                          192.228.116.0/24 maxlen: 24
                          192.228.118.0/24 maxlen: 24
                          192.228.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 02:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d5:e9:bb:6e:17:91:0b:4a:57:16:c6:20:6a:9a:9a:37:a4:f6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 20 23:55:08 2024 GMT
            Not After : Mar 20 00:00:08 2025 GMT
        Subject: CN=F8F709910A0B7284C9B796470D7C262DDAF3273F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:01:0d:8e:63:2e:1d:a3:13:9e:9e:49:b4:
                    18:f8:1c:61:c5:7f:be:2b:1d:38:e1:d1:5e:c7:b0:
                    61:3b:51:91:e6:54:1c:ed:c8:4f:6d:8c:91:86:ba:
                    a3:35:4c:20:02:4f:ca:ee:55:08:cc:53:81:93:aa:
                    42:9e:ba:70:47:58:77:81:97:3d:f3:b7:be:90:53:
                    b3:b7:a0:3f:89:39:43:ba:90:4f:79:7c:f0:04:e3:
                    08:74:14:0e:f2:82:31:5d:18:fc:9b:ee:03:59:14:
                    66:c5:c6:c7:2c:96:41:2d:c7:da:c0:5a:18:91:dd:
                    fb:c1:c8:12:ee:8b:8d:8d:56:d9:ab:74:9b:f7:49:
                    9a:5f:4e:02:c0:fb:c6:2f:eb:f9:a5:3c:bd:61:8f:
                    82:5e:f9:70:c3:d2:8f:b6:5f:f0:68:af:a2:84:bc:
                    5f:5d:00:a8:6b:1c:9f:3b:a9:06:ec:fd:25:cc:54:
                    c6:1d:02:9e:a1:1e:3a:18:7d:60:1a:61:7e:3e:29:
                    ba:f3:a7:c9:6d:05:28:06:e1:34:f2:b5:40:99:53:
                    e4:54:22:d2:96:df:07:fc:ad:7b:d9:d1:5b:a1:aa:
                    6b:c4:54:b9:f3:95:b1:30:23:74:9a:32:8f:ec:34:
                    49:0d:2d:b3:d6:49:1c:1a:7b:e6:10:08:0c:fb:79:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F7:09:91:0A:0B:72:84:C9:B7:96:47:0D:7C:26:2D:DA:F3:27:3F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.2.0/23
                  192.228.116.0/24
                  192.228.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:90:6c:cc:53:d4:9a:1e:cc:0b:f8:f8:3f:e3:bf:6d:ee:
         f7:c7:78:9a:8b:eb:63:59:01:ef:2d:c0:53:89:58:c9:2d:25:
         13:fb:b5:07:78:e4:b4:f5:b2:2e:67:4f:a3:b2:93:8c:df:85:
         71:bc:d5:d5:a1:41:95:11:da:1e:35:70:e7:36:b1:27:e8:0d:
         e8:3e:7b:b5:10:b6:92:83:1e:f2:e5:08:98:c8:b7:34:3d:35:
         4c:d9:47:40:3f:19:81:22:5b:34:dd:fe:ef:ff:8b:04:c7:a2:
         95:a3:17:57:19:99:87:5a:ba:7d:bb:0c:92:86:e3:a0:34:15:
         a2:38:af:4d:4b:16:a1:12:e6:d0:a1:9c:16:dc:5f:f8:27:87:
         82:12:7f:d7:cb:5a:9d:fc:48:41:79:95:ed:a6:67:9a:14:10:
         70:fd:fd:80:26:b1:2b:41:72:dc:c9:45:5d:b4:e1:89:d9:21:
         24:bc:8a:f6:1c:b6:88:d1:ec:1e:8e:73:be:80:45:f3:14:e3:
         22:38:ba:0d:65:c7:c8:28:3f:4f:be:b9:ca:86:7c:86:d1:d4:
         15:3e:9d:29:91:22:cc:b8:d1:cd:97:00:65:98:b1:04:1f:21:
         e1:a0:56:64:ba:be:84:b8:a4:8d:18:13:6c:85:15:93:27:ed:
         41:14:d2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:02:41 2024 by rpki-client on console-fra.rpki-client.org