Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa
File:                     a8a238f7-752f-3b08-9a4a-8c095f31d878.roa (raw, json)
Hash identifier:          oql3iK0LR/weWLCu2miJgYFeuHlwPDyTRCg3tB/Mbeo=
Subject key identifier:   7D:89:7C:1E:82:B9:81:CD:14:80:DC:39:6A:B4:31:C2:8F:EC:7E:CE
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F432858497279B256208FF2EF1921A840
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     36374
IP address blocks:        72.18.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b2:56:20:8f:f2:ef:19:21:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=19f733ed-13a5-4a41-a37e-f0f3bc423547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:e8:54:ca:4f:d8:5f:d7:e5:e5:02:97:2d:
                    0d:1f:f9:5e:e1:30:0c:2f:8e:3f:c2:bb:51:cd:5b:
                    64:e5:2e:67:e5:2f:3b:bf:bd:2e:25:01:97:bc:08:
                    74:38:b5:98:03:f9:ea:5c:66:b2:54:4f:c7:17:5f:
                    bf:ca:5f:69:f4:cf:4e:1e:13:00:ad:4c:e4:4d:51:
                    5a:10:79:96:36:d3:dc:ea:81:f2:b9:14:3e:a6:1d:
                    44:37:ac:31:7a:13:bc:01:71:86:ae:62:24:45:db:
                    48:9d:84:35:a4:e5:7b:00:3e:55:8f:05:e7:af:dd:
                    93:9f:44:52:ce:97:d0:1e:1e:54:54:7d:7f:e6:81:
                    fc:d2:0c:77:42:d7:5f:fd:cc:6b:57:1d:97:02:30:
                    40:aa:27:37:88:ba:55:1a:42:b2:11:c0:c2:1c:d5:
                    b4:0b:69:cf:0c:a7:1d:9e:26:55:80:47:48:4b:47:
                    ce:89:81:31:22:97:fd:13:c0:ae:fb:e8:f8:ae:4b:
                    3c:66:c7:5f:37:43:b8:0f:8a:e8:23:83:9e:4f:f0:
                    58:cf:6a:5a:22:14:b7:19:d1:fc:c9:b5:52:5e:3e:
                    dc:5d:10:b3:74:a4:23:08:a5:91:6e:a0:78:f2:97:
                    19:4a:f8:df:7e:f8:ef:b7:7a:e0:82:e1:aa:18:c3:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:89:7C:1E:82:B9:81:CD:14:80:DC:39:6A:B4:31:C2:8F:EC:7E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/a8a238f7-752f-3b08-9a4a-8c095f31d878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c1:e7:d9:3f:2e:62:85:0a:46:6c:8b:16:32:80:fc:50:6d:
         61:3b:e3:a4:43:89:24:f5:c4:5f:be:91:77:e5:3f:94:b7:6f:
         0b:a1:90:26:68:c4:bb:51:5f:2e:2d:dc:26:fd:5e:d1:a3:97:
         25:7d:1f:32:00:06:f6:75:73:1c:b2:70:ab:61:43:39:4c:35:
         60:ca:11:b2:a4:ce:ef:12:0b:07:82:50:6a:c8:df:d6:29:60:
         78:85:f7:46:c4:21:c9:c2:cd:ab:a9:56:73:23:e8:ad:8f:c7:
         21:9c:fb:e0:de:6d:0f:c0:37:8b:63:91:43:a8:dc:16:38:f7:
         46:41:dd:01:b8:0c:d8:ed:4f:30:aa:51:67:37:b4:8e:29:ed:
         33:30:c8:9a:94:68:0c:55:11:19:46:43:8b:68:8e:17:a7:84:
         6c:99:53:8c:33:58:b9:5b:73:28:e7:ba:85:d5:2d:b8:c5:dd:
         ad:af:1c:68:eb:91:f4:24:92:af:2b:98:a3:34:94:0d:68:7f:
         29:cb:79:47:93:49:ed:81:7a:98:ce:3e:f1:6e:9a:d9:30:85:
         ff:90:63:3e:a4:1b:c5:4c:80:5c:85:92:92:4c:15:5a:69:8c:
         74:d5:f8:52:01:9c:73:cb:ae:8e:ab:c4:ea:28:ed:3e:45:28:
         43:d8:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:37 2025 by rpki-client