Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa
File:                     AS7018.roa (raw, json)
Hash identifier:          t9OM+Iew9HPHJJll0M9bL11EpWtb+vc0c1TxLj2bxC8=
Subject key identifier:   1A:EA:75:61:0C:BD:BF:84:3D:10:E2:12:BE:7C:D7:44:8F:49:56:E1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4887604364406840349AF191BF4376737626E396
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa
Signing time:             Mon 06 Jul 2026 18:13:38 +0000
ROA not before:           Mon 06 Jul 2026 18:08:38 +0000
ROA not after:            Mon 05 Jul 2027 18:13:38 +0000
asID:                     7018
IP address blocks:        157.254.176.0/23 maxlen: 24
                          157.254.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:87:60:43:64:40:68:40:34:9a:f1:91:bf:43:76:73:76:26:e3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  6 18:08:38 2026 GMT
            Not After : Jul  5 18:13:38 2027 GMT
        Subject: CN=1AEA75610CBDBF843D10E212BE7CD7448F4956E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:14:9d:79:62:40:ea:ba:f6:4e:af:00:1b:
                    93:87:44:17:7f:c6:35:83:f6:c0:77:54:29:36:8e:
                    56:f8:32:78:cd:19:93:23:3b:bb:1c:09:c3:45:da:
                    0d:2b:08:61:c2:78:09:fd:8b:6c:57:9f:5f:e0:f8:
                    5f:2d:86:34:ca:50:e1:11:08:95:6f:f5:52:d3:1b:
                    f1:f6:51:3a:d7:09:0a:a8:ae:51:cb:1a:4d:cc:f3:
                    19:a3:a4:6f:38:22:65:bf:5d:7a:da:43:46:16:64:
                    8f:1c:69:9f:68:a7:c2:97:bc:e5:93:92:68:1b:80:
                    8e:b1:e0:74:dd:1d:28:2d:88:30:fb:d9:60:2c:a4:
                    1f:fe:b0:ea:a8:ba:18:75:d6:49:48:92:be:35:9c:
                    09:24:7c:64:62:ad:a2:46:4e:7d:cd:40:27:8c:d0:
                    d3:91:46:35:9a:df:6e:5e:0c:1d:14:0e:aa:a9:8c:
                    80:ba:3d:a0:27:56:05:6b:89:44:34:2e:fe:ec:9a:
                    d1:9f:e5:8b:4a:52:c2:a5:d9:74:de:9c:a1:f7:3b:
                    bf:ea:8c:3a:f5:7d:6f:1b:a3:ec:de:8a:61:f0:87:
                    2f:0b:25:9e:5f:a1:80:0e:e6:2f:fc:03:6e:d3:4b:
                    bf:2c:84:ae:0c:8b:4f:3f:cc:9f:42:ff:b2:1a:fd:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:75:61:0C:BD:BF:84:3D:10:E2:12:BE:7C:D7:44:8F:49:56:E1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.176.0/23
                  157.254.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:0a:a3:6a:ea:d5:6b:65:a6:2c:8d:ba:80:ff:5d:be:1d:
         d6:ac:61:60:6e:34:70:13:86:88:f5:6e:a4:f3:93:34:6b:d9:
         72:6b:ea:66:02:4c:e7:a3:2f:91:14:ba:75:5c:30:37:7f:e0:
         84:cc:18:13:37:96:be:1f:95:dd:45:e5:31:dd:7c:3a:df:02:
         4e:b9:e8:f0:93:88:06:d2:f2:e7:e3:bc:c0:65:70:c1:93:c8:
         e1:eb:8a:92:8e:6f:e1:b4:39:1b:aa:f1:3b:e7:ae:b1:de:a7:
         a0:b8:f3:13:25:f6:58:f8:8d:6c:fa:22:b5:7c:6c:7b:ed:57:
         64:a0:b9:08:68:56:a0:9f:98:e7:6c:4d:74:78:33:1d:85:04:
         3d:61:05:62:95:15:1c:44:df:b7:37:b4:b5:df:48:68:21:58:
         10:a8:aa:11:39:32:43:5a:a7:b3:14:69:f7:fa:b5:08:65:ba:
         4f:ac:57:1e:79:cb:3c:10:45:07:fb:8e:c8:e6:c3:03:db:a0:
         58:c2:72:8f:3f:e6:7a:d8:1b:1a:20:df:b8:f8:a4:f4:30:cd:
         a1:7b:e9:1b:c9:02:a2:c7:19:dd:d5:20:2e:a1:38:eb:e0:70:
         6e:95:68:ac:49:8a:b5:c2:0c:77:cb:d3:f5:c1:c4:da:92:25:
         b7:f0:f4:41
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUSIdgQ2RAaEA0mvGRv0N2c3Ym45YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNzA2MTgwODM4WhcNMjcwNzA1MTgxMzM4
WjAzMTEwLwYDVQQDEygxQUVBNzU2MTBDQkRCRjg0M0QxMEUyMTJCRTdDRDc0NDhG
NDk1NkUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjMUnXliQOq6
9k6vABuTh0QXf8Y1g/bAd1QpNo5W+DJ4zRmTIzu7HAnDRdoNKwhhwngJ/YtsV59f
4PhfLYY0ylDhEQiVb/VS0xvx9lE61wkKqK5RyxpNzPMZo6RvOCJlv1162kNGFmSP
HGmfaKfCl7zlk5JoG4COseB03R0oLYgw+9lgLKQf/rDqqLoYddZJSJK+NZwJJHxk
Yq2iRk59zUAnjNDTkUY1mt9uXgwdFA6qqYyAuj2gJ1YFa4lENC7+7JrRn+WLSlLC
pdl03pyh9zu/6ow69X1vG6Ps3oph8IcvCyWeX6GADuYv/ANu00u/LISuDItPP8yf
Qv+yGv1Z1QIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFBrqdWEMvb+EPRDiEr5810SP
SVbhMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI
KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAGd/rADBAGd/v4wDQYJKoZIhvcNAQEL
BQADggEBAAXBCqNq6tVrZaYsjbqA/12+HdasYWBuNHAThoj1bqTzkzRr2XJr6mYC
TOejL5EUunVcMDd/4ITMGBM3lr4fld1F5THdfDrfAk656PCTiAbS8ufjvMBlcMGT
yOHripKOb+G0ORuq8TvnrrHep6C48xMl9lj4jWz6IrV8bHvtV2SguQhoVqCfmOds
TXR4Mx2FBD1hBWKVFRxE37c3tLXfSGghWBCoqhE5MkNap7MUaff6tQhluk+sVx55
yzwQRQf7jsjmwwPboFjCco8/5nrYGxog37j4pPQwzaF76RvJAqLHGd3VIC6hOOvg
cG6VaKxJirXCDHfL0/XBxNqSJbfw9EE=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:15:09 2026 by rpki-client