Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e18632ab-c034-30d4-80e7-82df4fac4fad.roa
File:                     e18632ab-c034-30d4-80e7-82df4fac4fad.roa (raw, json)
Hash identifier:          CZCoHCSQVmNaIgOh1WRIw4NvaLad4ftS7GaggZMD+XE=
Subject key identifier:   49:87:FC:60:CE:05:88:0F:8B:44:F3:ED:77:56:BA:9B:AE:0C:43:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848EF614C60D5B66DF75C007000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e18632ab-c034-30d4-80e7-82df4fac4fad.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     36183
IP address blocks:        172.226.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:4c:60:d5:b6:6d:f7:5c:00:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=e7d13e36-1e26-405d-9be2-91a0a4b8edd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:41:31:fa:0d:e9:8c:d8:19:3e:55:e3:fb:1d:
                    c8:b3:d0:00:18:0d:73:12:c7:b2:cc:76:4c:ca:37:
                    a5:7f:51:63:10:a1:45:e4:32:97:36:9d:ce:83:6c:
                    bc:e9:23:9a:be:34:ab:3d:7d:90:aa:66:c2:a4:ba:
                    c2:67:74:c5:bd:89:e5:02:c1:47:3c:0c:2b:a6:8a:
                    f5:f0:78:f5:fd:08:00:8a:e6:fa:72:a0:a8:77:1e:
                    49:1f:86:c3:c1:e6:76:35:3b:4e:5a:88:ec:f5:6b:
                    68:a2:0f:a8:ec:53:b6:86:f2:09:3d:da:f7:1c:5a:
                    52:42:0b:81:2c:63:63:89:94:e1:19:50:2e:1b:5d:
                    68:01:21:5a:fe:4c:c0:d0:19:86:cd:2f:6d:c1:c1:
                    9d:d6:a5:e8:23:80:84:10:21:58:7e:79:38:ab:ea:
                    bd:cb:5d:9e:79:44:35:46:16:cf:8e:84:96:12:73:
                    34:20:19:6e:7f:7e:fc:9c:a7:93:66:72:8a:8a:c4:
                    42:2f:ce:b4:68:7b:d5:9c:ed:5c:f8:12:db:b8:6b:
                    5c:53:58:a1:8e:f8:35:8b:75:4f:f9:95:5b:e0:2c:
                    fd:b0:f9:16:5e:c3:9d:e6:da:f4:f1:1a:db:a7:d3:
                    f6:16:1e:c6:a6:6f:1e:ac:32:ae:09:a2:6b:aa:c3:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:87:FC:60:CE:05:88:0F:8B:44:F3:ED:77:56:BA:9B:AE:0C:43:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e18632ab-c034-30d4-80e7-82df4fac4fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d2:c5:9a:c5:21:b6:10:bf:4d:ca:a6:96:24:45:33:93:cd:
         62:10:a7:8c:3c:5f:31:c3:2d:ad:15:52:ce:63:65:99:ab:10:
         ae:99:16:af:3a:03:e0:7a:77:3c:4d:27:87:34:ce:c1:15:ff:
         b1:83:b2:72:c0:f5:7e:a3:68:0d:ad:cf:71:d9:7e:10:b0:3a:
         f7:5b:88:fb:02:9f:d9:ce:90:1a:08:b7:4f:2d:88:81:54:1d:
         74:11:10:97:cf:b8:91:a2:94:af:59:80:2d:3e:a2:a0:df:ab:
         61:e9:ba:95:14:88:42:de:2c:f3:18:79:68:00:72:93:cf:65:
         e7:ab:96:3a:9a:cb:5d:ea:ca:1a:ca:95:6d:64:2f:f1:ad:55:
         3c:7f:b2:23:f6:e1:30:d1:26:e1:95:38:5c:f7:aa:7c:6d:96:
         ab:6d:ea:8a:f0:b1:e3:27:35:63:95:48:ce:95:28:ae:35:8c:
         bd:5e:3f:4e:1e:cf:b3:dc:d5:01:5f:17:19:75:ed:82:75:03:
         97:70:9a:36:ee:df:9c:ae:0a:d2:6a:c7:aa:6b:65:d1:6b:12:
         3c:3e:0f:55:93:52:6d:fd:c1:d1:98:64:e2:24:34:d2:e1:65:
         4c:35:f4:74:96:1e:4e:49:e4:65:c8:ab:36:a1:74:e6:95:89:
         e3:eb:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:12 2025 by rpki-client