Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63018.roa
File:                     AS63018.roa (raw, json)
Hash identifier:          JGJUOSDjT2OpmQdvc48lwe36g8gHeJ3X+lR3sfZnrLM=
Subject key identifier:   9E:1D:C0:19:EA:8E:91:44:88:93:BC:08:37:4C:64:30:08:5A:36:A9
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       08F4E2DC08E5C9B1F2D6AB8909DE7A7E57C13BF0
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63018.roa
Signing time:             Mon 17 Mar 2025 00:50:18 +0000
ROA not before:           Mon 17 Mar 2025 00:45:18 +0000
ROA not after:            Mon 16 Mar 2026 00:50:18 +0000
asID:                     63018
IP address blocks:        157.254.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f4:e2:dc:08:e5:c9:b1:f2:d6:ab:89:09:de:7a:7e:57:c1:3b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 17 00:45:18 2025 GMT
            Not After : Mar 16 00:50:18 2026 GMT
        Subject: CN=9E1DC019EA8E91448893BC08374C6430085A36A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:1f:5a:e0:7a:1e:13:f9:fb:f6:c7:3c:b9:
                    f6:1f:17:b6:fd:45:0f:32:aa:5f:3d:e5:b2:e4:78:
                    56:32:fa:e1:42:95:b0:8a:eb:b2:bf:65:5c:70:ab:
                    b4:f9:66:df:47:da:6f:4a:09:17:34:cc:a0:04:09:
                    09:6d:3f:28:b7:92:2f:9c:9a:55:4d:9a:2a:f3:b9:
                    33:61:c6:52:58:1a:fd:93:e8:0b:91:5b:90:8a:2c:
                    e4:ae:f6:54:7f:d0:88:71:56:bd:16:ae:88:ee:6f:
                    55:b5:66:fd:ba:df:94:d8:56:9e:47:54:47:90:e9:
                    ac:20:bc:c0:51:4c:db:9f:9d:fc:8e:c1:aa:ca:dc:
                    91:9b:fd:8f:b8:0c:2b:e6:62:90:12:75:97:d1:2d:
                    89:a9:7e:f3:0d:3c:b2:34:34:eb:43:60:96:7d:02:
                    ee:f0:52:5c:54:42:05:25:ff:6e:ec:f8:30:bc:4b:
                    f8:cc:f3:46:bf:ec:8f:b9:27:92:fe:b5:a0:c7:e7:
                    71:54:02:b8:d0:a1:ba:8f:a3:01:61:e4:0c:35:91:
                    1d:25:e6:3f:b2:d4:95:5f:ea:0f:69:9d:b2:1e:9b:
                    90:9b:d3:78:23:a9:fe:fe:70:51:af:8f:dc:0a:5f:
                    28:ea:6c:5c:0e:6c:81:3d:53:84:71:75:d0:c9:09:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1D:C0:19:EA:8E:91:44:88:93:BC:08:37:4C:64:30:08:5A:36:A9
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS63018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:53:ca:53:46:fb:de:f9:18:48:9a:28:b2:5d:38:71:d9:cb:
         7f:58:63:3f:c3:c4:25:97:d6:b6:1d:6e:4d:3e:09:63:fa:fc:
         98:2c:dd:9a:0f:31:b9:fd:cc:6a:cc:b1:60:0f:6b:7f:82:41:
         4c:4f:80:3d:6c:b3:6e:90:be:11:d7:34:92:95:81:95:98:cd:
         ea:c6:6c:9a:6d:03:eb:82:e0:7d:1a:45:43:4b:6a:8c:20:f3:
         58:58:dd:91:b0:b3:14:5f:89:ed:23:49:3c:67:48:ab:d8:f4:
         4d:19:86:53:e1:dc:b0:c2:7d:05:78:8f:c8:de:cb:ae:b2:41:
         cf:22:aa:4a:ea:ca:ab:15:be:95:52:57:29:e1:d2:98:e3:26:
         be:79:c0:6c:2e:4d:2b:7d:f5:e6:87:6f:64:a6:4d:53:e9:eb:
         3b:47:09:08:35:71:81:f1:fe:91:7f:84:73:f6:0e:a7:90:64:
         ca:ff:3a:37:7d:36:cb:9d:86:f4:2c:83:1c:ec:25:29:9a:e9:
         45:6d:bb:2d:95:00:e4:82:f6:71:e6:4d:98:c8:ba:c6:a0:4a:
         44:01:51:05:fd:c5:37:00:1d:e5:ce:52:d4:11:09:20:3e:e0:
         bb:10:e6:03:86:b6:5c:d7:b7:64:1f:15:5f:f4:5a:a8:5a:90:
         dd:66:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:50 2025 by rpki-client