Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa
File:                     af72ac96-389c-3eb8-a84c-7f22db7a7533.roa (raw, json)
Hash identifier:          VW245MQIa3PSwpaUljrPVIz8C93LexSGXm/zdpz4t50=
Subject key identifier:   E6:2B:BC:6A:29:0D:F6:73:A5:8F:88:55:A3:23:0F:E8:3B:43:63:F7
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F432858480D3FC9E7EDD00D851813AD00
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa
Signing time:             Sat 30 Nov 2024 14:00:50 +0000
ROA not before:           Sat 30 Nov 2024 14:00:50 +0000
ROA not after:            Fri 28 Feb 2025 14:00:50 +0000
asID:                     2734
IP address blocks:        98.158.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0d:3f:c9:e7:ed:d0:0d:85:18:13:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Nov 30 14:00:50 2024 GMT
            Not After : Feb 28 14:00:50 2025 GMT
        Subject: CN=c92514fa-9f4f-49f7-ab59-ef84d117e7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:bb:68:07:e1:7a:10:d7:bb:0d:f6:e2:41:
                    f9:09:b7:ca:7c:5b:65:b9:9f:58:3a:a4:30:b9:a4:
                    1c:d8:3e:8f:9f:e7:96:e6:a2:04:04:88:c3:fc:65:
                    65:c9:d9:26:bf:fd:fc:53:e1:cb:a6:60:8f:e3:77:
                    52:ab:cf:f0:d0:f9:29:cf:d1:3f:f4:b8:46:3a:ab:
                    05:59:ec:bf:e8:0b:cd:28:43:41:3b:91:77:32:98:
                    0d:fb:74:50:4d:42:b3:81:69:1f:62:46:0a:d8:c8:
                    c2:b1:e7:e1:fe:bf:fa:51:de:a2:6b:32:6a:63:1c:
                    8c:05:df:18:ed:d6:5d:b6:29:57:13:dd:c4:22:40:
                    79:85:cc:17:ec:ae:5e:ae:c8:86:fc:08:4f:d4:91:
                    be:3d:08:13:31:d5:39:97:a1:51:c6:b5:65:64:ba:
                    8d:c1:ea:3a:b9:e6:c6:57:de:78:46:f7:1e:dd:13:
                    c5:9e:72:ea:7c:27:de:d3:78:a1:13:9e:15:c3:0e:
                    26:23:38:49:d0:1c:d9:8e:42:81:13:03:4c:c7:77:
                    99:d6:fc:c6:65:fd:d7:a9:b6:8b:db:85:a2:7f:5b:
                    c4:d5:bf:fa:e0:cb:51:ca:20:8a:48:83:d2:dc:0b:
                    c5:2d:3a:81:c8:e3:f1:5f:69:f3:f7:73:d2:1e:91:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:BC:6A:29:0D:F6:73:A5:8F:88:55:A3:23:0F:E8:3B:43:63:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:79:9c:02:5f:d2:45:36:28:48:56:b7:e6:37:77:e4:f5:
         1c:65:a8:04:22:b3:66:1a:e8:4b:9d:2a:3d:2f:e4:74:0b:7c:
         cd:9c:60:d2:8f:c8:02:4c:3d:96:df:0e:f0:8e:02:d1:88:ef:
         e5:f3:16:08:82:56:47:05:22:89:2d:a3:c0:32:63:a5:54:3a:
         5d:07:24:96:b3:d5:e6:fe:59:57:35:77:67:19:f1:fd:e0:ab:
         39:5d:70:ba:2a:a5:43:65:6b:a3:98:36:11:c3:94:a2:33:45:
         6b:82:d7:5d:bb:57:16:64:d3:66:36:89:42:c0:ba:3e:a3:6f:
         0d:41:72:35:b9:f5:06:1c:38:03:b7:66:07:27:6a:0a:49:69:
         8a:51:5d:cb:04:3a:15:42:45:89:74:be:b3:cb:51:97:4e:24:
         1e:67:7d:5b:a5:42:67:c9:41:a0:24:1d:24:83:78:25:4f:8b:
         66:d3:c2:5d:11:96:0f:91:10:2c:ce:f6:f7:e1:e6:53:b6:1f:
         70:3a:f7:4e:05:f7:36:00:bf:30:45:82:8d:07:5b:9b:f0:e7:
         c7:0a:9b:38:e9:7a:91:18:45:91:31:42:a0:3b:54:d1:f7:66:
         de:e5:c3:16:5e:c6:4e:7a:6c:6d:18:b6:5e:16:5d:7d:43:79:
         22:06:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:59 2025 by rpki-client