Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa
File:                     AS141968.roa (raw, json)
Hash identifier:          VSFjy30uBy5O8mjSvHF+aH8admYSeZ240ZmLoE4mzcE=
Subject key identifier:   A3:B4:CD:4C:B3:8D:E8:55:43:C9:1C:13:20:1F:AA:F8:AF:35:24:27
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       74D704534CFDD1A00FA6C2AAB166416F21D02BD7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa
Signing time:             Mon 13 Jan 2025 10:28:23 +0000
ROA not before:           Mon 13 Jan 2025 10:23:23 +0000
ROA not after:            Mon 12 Jan 2026 10:28:23 +0000
asID:                     141968
IP address blocks:        98.142.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:04:53:4c:fd:d1:a0:0f:a6:c2:aa:b1:66:41:6f:21:d0:2b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 13 10:23:23 2025 GMT
            Not After : Jan 12 10:28:23 2026 GMT
        Subject: CN=A3B4CD4CB38DE85543C91C13201FAAF8AF352427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:9e:2d:0c:b2:76:e7:50:d6:61:a5:74:81:
                    a2:68:55:13:77:6d:75:8f:5d:c9:3e:3c:08:64:54:
                    53:95:73:0f:be:e1:cc:03:c8:a9:be:8f:8c:02:60:
                    3f:3c:77:89:b3:c9:6b:cb:24:80:8b:08:f8:a3:51:
                    a5:73:af:76:a8:21:b2:d2:33:fe:e4:54:f5:9f:35:
                    3b:51:5e:f4:c1:2c:62:7a:71:6e:2e:2a:14:b3:fb:
                    0e:01:18:13:b3:00:c3:f9:c7:53:5a:cf:e2:4a:b1:
                    80:71:d5:b4:28:0a:9f:2a:a4:cf:2b:9e:0d:cb:8a:
                    c8:f5:1b:bd:8c:3a:ad:87:5e:89:b6:0f:3a:90:67:
                    65:f4:2c:bc:ba:d0:8d:a6:77:6c:cd:d9:7f:74:6c:
                    49:ca:1e:d2:fc:ad:f8:eb:f2:91:a2:03:fe:e7:01:
                    be:a7:e0:1e:ff:16:4a:d0:77:85:88:86:46:7a:62:
                    22:71:7e:ef:25:45:e5:a4:89:5a:3f:14:26:f8:1d:
                    44:23:af:96:05:71:94:1f:8b:f5:01:0d:d7:eb:78:
                    6a:15:45:ae:c2:b7:09:0e:e2:55:ff:2c:ae:cd:e3:
                    16:85:05:16:2d:2a:40:35:7f:09:55:6f:46:94:33:
                    1c:38:45:be:a9:44:62:39:36:92:fa:4f:5e:9c:f5:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B4:CD:4C:B3:8D:E8:55:43:C9:1C:13:20:1F:AA:F8:AF:35:24:27
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:d5:a8:e4:9f:95:31:83:1a:90:f8:58:b1:d4:26:be:03:
         ff:3b:8f:5d:a3:14:ad:64:f8:e0:ed:48:d7:49:a7:bc:c9:5d:
         c3:16:34:8f:40:e8:37:c9:ba:8c:07:9c:c9:3a:9a:1e:62:80:
         66:50:72:19:28:fa:d6:34:0c:6e:9c:78:4a:77:8c:d1:cc:f5:
         d5:61:ca:1f:2c:ff:cc:bd:85:37:99:45:dc:46:70:31:f2:dd:
         40:f1:7e:94:fb:37:e1:33:66:e2:ee:3f:2f:53:67:32:09:8b:
         6d:c1:1a:70:ad:3a:b0:ec:67:ce:52:77:5d:b5:bd:87:ef:85:
         70:a7:fb:e8:cf:a4:5a:8a:da:15:0c:89:7a:38:ef:84:f7:82:
         ed:4e:4f:ac:96:bb:b8:93:2c:95:db:2d:10:7d:f8:5f:3d:91:
         34:ea:30:fd:d8:81:22:d0:55:bd:fe:7e:d2:7a:05:1a:55:0c:
         76:b0:60:58:39:db:8b:13:2f:60:b4:95:7b:e8:5c:99:9f:13:
         13:6d:bc:17:22:11:85:7b:7e:00:ff:f6:73:b7:c3:0e:08:16:
         9a:9c:c6:0f:a2:e1:e6:f7:da:f3:3f:52:21:e0:8b:20:11:1b:
         74:04:37:6c:dd:00:4e:39:14:78:01:15:5e:de:c2:49:71:82:
         89:6b:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:55 2025 by rpki-client