Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa
File:                     115b66b8-327b-3150-a712-f352fb1d0e2a.roa (raw, json)
Hash identifier:          QX2r+LZ36qKJ1qrKcOSLCOvqIAwsTt4krZqrzob8CcM=
Subject key identifier:   78:E0:FB:E7:ED:EC:C2:20:80:E4:27:06:39:43:23:75:34:28:A7:B6
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F43285848C150CE43BA09E068A1BBC480
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     2734
IP address blocks:        98.158.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:ce:43:ba:09:e0:68:a1:bb:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=b3d71056-879c-462b-9c84-f15af95262e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:ac:ce:fa:84:87:1f:cd:43:22:da:f9:3b:
                    07:3e:96:63:48:0b:ae:ff:2d:7e:6f:09:19:2c:ff:
                    0e:51:ce:7d:37:b6:89:6c:8b:56:d0:c5:f2:f1:7e:
                    01:f6:46:e2:42:97:22:9e:c0:48:e1:a9:88:7c:c1:
                    40:df:bb:e5:f3:ef:14:80:1d:62:c7:ad:a5:eb:77:
                    57:b5:8e:cc:13:c4:7d:ee:7a:1a:3f:61:4c:89:8f:
                    63:2b:88:cf:f4:1c:83:c6:65:af:5a:3a:ab:3d:e4:
                    f2:9d:b4:97:d0:1d:cf:3a:35:0e:c9:ff:6d:db:be:
                    99:e4:1d:41:a9:6c:f0:14:d9:6c:ea:29:eb:e1:e3:
                    45:94:a6:7d:db:86:af:20:08:c0:5e:17:40:a8:04:
                    ab:7d:db:33:2e:71:c7:d0:05:80:a3:d9:54:a7:8b:
                    48:41:44:bf:f8:08:9e:16:5e:7f:d0:12:aa:30:e9:
                    fb:c7:3f:d9:a8:91:34:2a:eb:46:a9:c3:b2:b5:ca:
                    43:60:c6:cd:a2:f4:74:97:9c:a8:cb:5b:d1:d2:9c:
                    7c:5f:53:4d:c6:fa:4c:5d:84:90:73:a4:04:86:1e:
                    d7:8d:8c:9a:cb:f4:a6:7b:06:64:9c:d9:bf:69:bf:
                    2f:1d:cf:90:d4:5d:d1:a1:fb:84:ae:41:fb:b7:f4:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E0:FB:E7:ED:EC:C2:20:80:E4:27:06:39:43:23:75:34:28:A7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:91:e2:e2:fc:d6:81:51:55:36:ab:53:7d:dd:db:0b:92:4a:
         70:af:cc:ed:a2:c3:26:ec:12:12:14:c2:9b:03:bc:79:8e:d7:
         fc:c4:ba:c3:22:10:92:f8:bf:50:ef:ac:9c:f5:80:94:b2:08:
         23:20:b5:b2:b9:17:5f:83:95:81:a4:a7:d2:a1:f9:28:89:e8:
         66:e9:91:4b:52:e2:85:cf:32:5d:2d:3c:13:85:a4:6c:03:e0:
         4e:4a:4a:a2:a8:6f:eb:13:9a:ad:d5:17:2b:d2:76:e9:07:45:
         1f:57:24:b7:43:7f:a4:d5:7a:e3:55:13:10:c1:ae:94:c4:74:
         11:55:90:45:02:25:09:aa:62:fa:12:d7:50:a9:9f:36:da:7a:
         19:d8:d8:ce:c2:29:38:62:82:f2:69:d4:be:73:b7:a0:53:a0:
         a7:6a:86:9e:77:a2:ea:11:50:2a:76:e9:fd:8b:ea:e4:e4:90:
         e6:b1:b5:61:8a:91:06:b4:20:3a:a9:d0:b4:77:63:23:98:b5:
         8e:39:b9:71:ba:86:38:d2:11:0d:a8:c8:37:af:26:76:a1:4a:
         f0:0b:03:86:c4:37:dc:46:7d:40:10:8b:fb:bd:6b:e1:53:d6:
         87:52:b8:7b:ed:cf:b7:f2:e8:8e:e8:a8:60:76:e7:e1:d2:80:
         59:fd:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:46 2025 by rpki-client