Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7018.roa
File:                     AS7018.roa (raw, json)
Hash identifier:          Fg0oT+iy/VgknzI6ancdxx/JqCd5acYSOzq1G3S7FQQ=
Subject key identifier:   75:EF:64:6F:AE:0D:2A:C6:5C:B0:7D:3A:4B:4E:B8:D2:AC:78:26:EA
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       29ADEC7D774004018B2371CFA91FE703C8329902
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7018.roa
Signing time:             Wed 10 Sep 2025 00:05:39 +0000
ROA not before:           Wed 10 Sep 2025 00:00:39 +0000
ROA not after:            Wed 09 Sep 2026 00:05:39 +0000
asID:                     7018
IP address blocks:        66.225.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ad:ec:7d:77:40:04:01:8b:23:71:cf:a9:1f:e7:03:c8:32:99:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 10 00:00:39 2025 GMT
            Not After : Sep  9 00:05:39 2026 GMT
        Subject: CN=75EF646FAE0D2AC65CB07D3A4B4EB8D2AC7826EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:bc:4d:70:47:20:07:e3:77:d9:d6:27:20:
                    4f:92:d8:94:83:43:bd:c1:1e:9d:ce:86:03:07:62:
                    4e:6c:5a:4d:50:d0:6b:5e:57:43:1e:30:41:8e:60:
                    5e:03:1d:b1:cf:16:f4:fc:a6:ba:3f:c7:42:f0:a9:
                    22:c1:2e:93:ef:70:12:5c:c2:ca:35:82:69:04:17:
                    2d:68:b1:3d:3f:82:5b:6a:9a:a0:fe:2b:6b:48:8e:
                    95:ed:3f:21:a3:22:da:17:99:da:b5:f4:eb:9a:32:
                    34:b3:08:b9:9a:5e:0a:7a:df:9c:b4:d1:26:f1:c9:
                    5c:b1:9d:31:58:c5:9d:91:96:87:fa:fa:f2:08:30:
                    75:dd:a3:ba:4d:a4:9e:25:5b:67:6c:ba:96:57:d2:
                    6d:92:9c:f6:40:ef:4b:34:b1:a6:84:a7:f7:a0:51:
                    e5:1a:c4:fa:a6:c0:d1:e7:ca:c9:45:57:ab:88:50:
                    bf:15:7c:68:82:7e:05:c7:d5:53:8f:db:e0:47:db:
                    32:30:a5:92:d4:00:f3:a0:ff:29:df:33:1f:7a:d7:
                    20:88:87:05:c1:58:10:0e:8d:69:34:d7:0b:2c:41:
                    7b:fe:5a:79:4e:bb:4a:df:aa:8b:62:b1:9e:dd:54:
                    50:41:e4:5f:2b:83:93:17:32:a6:e0:14:ac:81:5b:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EF:64:6F:AE:0D:2A:C6:5C:B0:7D:3A:4B:4E:B8:D2:AC:78:26:EA
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:ba:30:d3:98:74:e2:17:43:f1:28:51:88:28:6e:0d:86:
         92:66:a9:bb:11:32:f1:c1:15:ce:49:f1:c1:f2:7a:57:b7:ba:
         8d:9f:e8:1f:a8:ad:8c:fb:4a:50:ac:ed:54:03:48:0c:bb:48:
         7c:af:7f:78:ba:c4:aa:a4:3e:58:f6:a1:a1:dc:94:2e:a3:ed:
         27:3b:5d:b2:58:1b:26:86:7c:46:c9:c4:62:06:e7:11:2d:a3:
         75:97:3d:86:f7:0d:b6:d7:2d:e3:0e:c1:56:bb:a7:2d:7b:1b:
         14:d0:48:cf:a9:5f:e3:f9:98:79:30:10:5e:69:5d:cb:e3:10:
         8f:76:e5:10:40:3f:69:7d:7a:a8:88:f2:c1:26:7c:7b:ee:0a:
         3a:d2:c2:0f:68:3f:63:a7:d9:fa:19:7d:b1:c6:b3:83:b3:58:
         15:34:28:c7:fc:50:68:4c:de:9f:3c:80:d5:6a:84:f0:c3:1c:
         49:19:1c:d6:95:74:bc:9b:fb:21:2c:48:ac:f4:d6:8a:69:6f:
         79:d2:2e:b8:6c:59:d0:e7:c3:50:40:47:97:e4:05:52:76:d2:
         2c:61:ff:1f:66:39:a3:ae:fa:1f:39:59:5a:2a:03:44:91:2a:
         e1:ef:96:f5:79:9c:c7:04:11:80:2a:4d:be:48:15:3c:33:5c:
         e6:4c:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:11:47 2025 by rpki-client