Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7018.roa
File:                     AS7018.roa (raw, json)
Hash identifier:          HNl9bDBS47U89GIiMcLaYqu8kgboXINZM83KottRbHA=
Subject key identifier:   35:A7:4D:00:29:85:70:40:F8:35:51:A5:31:7C:2C:38:B9:BA:5F:3A
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       5FDD7E5728977AA05F516C6C3A3074B17EB86AE9
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7018.roa
Signing time:             Fri 22 Nov 2024 19:36:11 +0000
ROA not before:           Fri 22 Nov 2024 19:31:11 +0000
ROA not after:            Fri 21 Nov 2025 19:36:11 +0000
asID:                     7018
IP address blocks:        64.202.120.0/24 maxlen: 24
                          66.225.255.0/24 maxlen: 24
                          75.102.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dd:7e:57:28:97:7a:a0:5f:51:6c:6c:3a:30:74:b1:7e:b8:6a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 22 19:31:11 2024 GMT
            Not After : Nov 21 19:36:11 2025 GMT
        Subject: CN=35A74D0029857040F83551A5317C2C38B9BA5F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:00:2e:52:7f:9b:55:c9:db:de:0b:e2:9f:
                    aa:ed:a2:b0:64:b0:83:59:96:4c:2c:17:eb:7d:a6:
                    28:3f:dc:b6:98:87:87:db:0d:e5:c8:b5:35:a2:21:
                    bf:c9:71:13:6c:b2:65:47:b2:ce:37:b9:64:16:3e:
                    7c:30:c2:c2:09:87:57:ac:3c:97:e9:41:b7:7d:12:
                    c7:d4:62:25:20:c5:8f:1f:72:e2:75:aa:ac:31:27:
                    88:d8:27:e3:90:c0:5e:39:3c:30:4f:fa:c6:e1:11:
                    6e:1d:58:a9:d5:63:07:db:87:e1:4b:f1:4f:4b:db:
                    a0:30:ab:a5:bb:c7:49:20:a8:30:7f:4e:39:c6:c0:
                    3a:0d:9d:3b:8b:f2:87:c3:67:b1:22:18:2f:b9:69:
                    8a:9c:1c:ae:84:34:3f:9b:22:d6:ee:8a:2b:6b:5c:
                    8e:5a:93:14:d6:59:99:90:2f:de:f2:13:53:ce:b6:
                    fd:ef:1a:e9:d4:54:62:0e:21:55:23:a2:3c:17:6f:
                    79:e9:99:ac:52:b6:3f:06:15:2e:60:0f:ad:bc:70:
                    e4:3d:06:07:db:52:34:78:8a:db:49:8c:f2:37:85:
                    94:69:b3:34:c9:69:e7:82:6e:80:c9:6d:8a:f7:c2:
                    ab:ab:4d:ed:1e:75:16:60:e6:1f:4b:60:84:cc:4c:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A7:4D:00:29:85:70:40:F8:35:51:A5:31:7C:2C:38:B9:BA:5F:3A
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.120.0/24
                  66.225.255.0/24
                  75.102.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c0:9d:29:bc:5e:37:e1:13:b1:b7:c4:d6:7d:05:d9:91:2d:
         c0:d5:57:70:f8:65:b4:4a:6c:14:71:b0:53:1c:ec:16:30:70:
         e6:40:34:d7:c9:1e:da:1a:05:ba:c2:e3:03:6a:44:c8:5b:f2:
         6a:6b:6d:e7:0f:5f:e0:d3:35:f2:80:e4:dd:aa:a6:d2:b8:76:
         53:10:3a:da:1b:91:16:23:f0:72:2e:c8:d9:69:ff:ef:b3:3e:
         39:2a:1d:5c:cd:54:bc:42:17:07:f9:e9:51:bc:4a:26:64:1d:
         14:9b:80:16:08:21:2b:d6:bf:19:7a:a0:1d:02:de:3e:d1:cb:
         9c:5e:62:a3:f8:ff:2e:2d:7a:30:5a:eb:91:50:30:51:71:17:
         38:95:24:6b:e7:bd:76:83:22:fa:25:54:5f:61:ca:5e:c4:fc:
         ca:af:91:23:3c:e5:9f:9d:6e:b0:db:cf:c0:13:d6:b4:eb:06:
         55:26:fc:af:c5:29:5d:91:16:84:c9:87:8d:be:87:7b:e9:f4:
         ae:1c:76:51:58:74:af:5a:fb:c6:e1:1e:32:aa:85:0a:59:48:
         1a:18:66:13:e2:63:be:b8:9e:e9:b6:5d:de:4c:eb:34:b1:c5:
         ac:e8:e0:a2:59:12:19:eb:aa:71:f8:e8:83:c5:48:5d:c3:98:
         9c:11:44:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:13 2024 by rpki-client on console-fra.rpki-client.org