Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa
File:                     aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa (raw, json)
Hash identifier:          0CbrFLAbMcGBOH0QEYoV3nTToyf+1DyX/RuTwxSyG28=
Subject key identifier:   D6:6E:0A:EB:9A:66:8E:E9:F9:7F:3A:70:2F:0F:4F:70:DE:1E:7C:5F
Certificate issuer:       /CN=73980674-4684-4801-b116-e9e08b4ff9f4
Certificate serial:       010D0C9F43285848D7A6534257014A91A263F4E0
Authority key identifier: 14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        152.37.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:53:42:57:01:4a:91:a2:63:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73980674-4684-4801-b116-e9e08b4ff9f4
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=79b73a49-ea85-4d93-998b-22e49848eb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:0b:6b:ce:ba:7b:48:d4:f8:27:80:32:43:
                    f9:f9:01:ec:4a:d6:64:9e:8a:24:9f:5f:5d:ea:08:
                    ed:5e:58:83:a2:3b:d6:42:97:f3:3e:b4:0e:9b:96:
                    d5:bf:62:ae:a5:72:ef:7b:32:52:b2:4e:05:52:42:
                    b9:6e:1d:32:71:81:a1:d9:d1:eb:d8:7f:32:4b:3a:
                    6a:17:86:ed:6b:a8:3c:98:8e:aa:dc:99:7a:ba:9d:
                    50:a0:46:79:2e:9e:a7:67:7e:38:0e:56:7e:c1:f9:
                    96:e1:3f:3b:70:3b:2d:fd:42:7f:28:43:59:33:ca:
                    19:40:dd:fc:56:fa:d5:1b:14:2f:5d:d2:06:33:cf:
                    b9:59:e7:e9:1d:21:e0:ad:b5:30:6d:9c:2b:79:9f:
                    5d:71:47:0f:ea:aa:a0:c9:5a:d3:ce:ee:84:2d:87:
                    e2:f7:6f:a4:ff:d9:5e:21:5a:ca:11:fd:9d:ec:b2:
                    9c:78:c5:ec:00:e2:98:01:bf:7a:f1:a8:64:4a:f5:
                    94:4f:65:88:34:1f:79:32:87:16:84:ca:b0:9c:23:
                    c7:5c:47:d7:9c:62:3c:12:00:44:5f:33:d8:30:cc:
                    12:c2:7c:09:80:52:6e:87:c3:da:df:9c:f6:f4:8a:
                    18:ef:4b:2b:58:9d:79:7d:cf:84:00:be:53:f6:77:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6E:0A:EB:9A:66:8E:E9:F9:7F:3A:70:2F:0F:4F:70:DE:1E:7C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl

            X509v3 Authority Key Identifier:
                keyid:14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.37.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:a6:39:9a:39:dd:51:9b:2e:32:1d:90:af:ca:2d:fa:5f:
         14:e5:bb:c5:ae:90:5e:fd:cf:d2:29:aa:f8:e7:34:08:8e:82:
         b8:37:28:53:5d:3d:09:a8:a8:04:f5:32:39:23:2c:54:84:79:
         9f:8e:3e:6b:cd:e1:36:3d:33:43:a9:f1:82:f0:a9:24:11:ed:
         80:f6:62:62:94:78:76:1d:79:4e:af:ec:b7:ce:7d:8d:d6:4d:
         00:20:67:ad:47:79:12:d0:a8:16:81:bf:7f:99:24:79:de:89:
         ba:cd:40:ad:2a:f2:91:8b:fb:43:13:85:a0:6f:fc:cc:a0:f8:
         6e:be:7c:1e:c0:c2:4b:d5:39:f7:01:64:7f:dc:5b:f6:6c:87:
         b4:c2:85:23:9d:45:0b:f1:ef:1c:a5:1c:a1:05:64:4f:dc:a3:
         75:cb:33:f8:a6:f6:4e:14:6f:fe:1f:f4:cc:81:a6:5e:21:c9:
         45:b4:b6:5d:25:94:b4:81:33:0c:df:41:ae:57:a8:e7:c6:d2:
         35:4e:55:9a:0f:7b:52:51:21:26:f7:b6:ee:3a:8c:49:00:00:
         3b:89:0d:65:53:b1:11:de:4b:5e:bf:1a:1e:e7:17:f7:fc:29:
         dd:50:67:d2:0c:6f:b2:a5:78:40:d7:50:a7:6a:7d:04:8d:2d:
         bb:75:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:21 2025 by rpki-client