Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/19830566-4a1b-33c1-bc11-2ce5b5f5fed6.roa
File:                     19830566-4a1b-33c1-bc11-2ce5b5f5fed6.roa (raw, json)
Hash identifier:          tkGQNs8VmYSq7ALaI3UBgO4YDyhC902k2SogKQzkSc0=
Subject key identifier:   18:71:97:14:84:98:DD:54:96:33:E2:AC:54:C6:88:B6:33:B9:56:5C
Certificate issuer:       /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
Certificate serial:       010D0C9F4328584B0F18606573BB000A89608B80
Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/19830566-4a1b-33c1-bc11-2ce5b5f5fed6.roa
Signing time:             Tue 02 Sep 2025 08:13:16 +0000
ROA not before:           Tue 02 Sep 2025 08:13:16 +0000
ROA not after:            Mon 01 Dec 2025 09:13:16 +0000
asID:                     140951
IP address blocks:        98.158.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:18:60:65:73:bb:00:0a:89:60:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
        Validity
            Not Before: Sep  2 08:13:16 2025 GMT
            Not After : Dec  1 09:13:16 2025 GMT
        Subject: CN=8d103fe1-4e34-4f99-91c8-785d92e63c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:3f:b8:23:05:83:59:85:f8:82:75:91:54:
                    69:7f:38:62:2c:2e:a1:c0:96:10:11:e9:e6:7e:e9:
                    bf:e9:70:74:bf:00:c3:7c:6c:1e:db:ce:3c:df:33:
                    9e:f9:32:5a:b0:5a:b9:c4:3e:35:f7:87:bb:20:f0:
                    1c:77:89:5d:04:8f:91:a8:8c:56:05:7f:3c:e5:13:
                    0c:b1:bb:1c:70:e3:5f:c1:65:c1:1e:23:39:92:3a:
                    01:0d:2a:f7:98:ce:c4:b6:e8:ad:ae:3d:2e:21:d5:
                    72:97:5c:d2:57:71:5e:e5:f6:b0:37:e3:81:b7:66:
                    33:bc:d2:57:47:11:2f:84:e4:bc:c3:fe:ac:32:df:
                    af:9f:c8:dd:94:71:aa:05:6a:15:dd:1d:19:71:7a:
                    33:85:ad:67:97:c5:44:27:7f:ab:26:c6:4a:58:0b:
                    07:cf:b0:a1:85:90:03:ff:8e:43:35:16:b9:aa:65:
                    61:72:0f:fc:4b:c1:db:c8:6d:8a:94:81:3d:f2:81:
                    fc:a4:70:41:cb:c3:95:01:82:28:72:ca:26:e6:1b:
                    ad:78:5e:a9:00:5a:16:8c:32:13:67:a3:64:a7:7a:
                    56:c2:05:29:90:96:85:d0:d0:90:c1:73:99:bf:d6:
                    62:92:45:68:5a:90:56:aa:5a:0b:3d:18:4a:92:c5:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:71:97:14:84:98:DD:54:96:33:E2:AC:54:C6:88:B6:33:B9:56:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/19830566-4a1b-33c1-bc11-2ce5b5f5fed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl

            X509v3 Authority Key Identifier:
                keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:92:71:fc:0b:4c:eb:0d:bb:71:3f:04:c2:f6:ed:50:63:
         f7:d6:c4:f6:9b:03:9b:e5:02:e2:e5:68:6c:85:6f:e4:b1:e6:
         1a:c9:bb:d7:29:52:a1:56:4e:e0:54:55:9c:f4:4f:41:e8:8c:
         f9:ff:e2:24:f8:8c:68:f2:75:b7:e1:94:76:14:16:53:6e:0e:
         b0:69:d1:80:17:16:e4:a5:92:81:4f:26:c7:48:91:ed:75:a4:
         cc:f6:2a:ab:b4:8f:80:d2:5e:6a:ed:ca:e5:45:5c:29:89:47:
         bf:f2:7f:0a:5d:9a:4f:ca:c7:76:1d:8a:0e:1a:ed:9f:94:4f:
         c3:d4:37:68:1e:1a:10:b5:f4:bb:a1:bf:00:6d:2a:fc:7c:9d:
         f7:e0:a6:2f:d0:c7:c8:db:23:7a:94:18:3f:0a:52:97:11:3a:
         0f:b3:25:36:cf:1c:0e:a1:ab:e5:3b:1a:c8:15:2c:49:a7:8c:
         db:6a:b8:80:ab:36:73:f4:ec:29:ec:9b:de:0c:41:ce:23:65:
         1c:20:82:3a:dc:7b:54:2b:4d:c1:24:13:de:3d:5b:9f:4d:a2:
         b5:84:0e:90:e5:94:61:90:6f:3d:27:4c:77:12:e7:50:b6:a4:
         34:5b:bf:54:1a:01:10:59:41:dc:9c:9e:29:8e:53:74:7c:e0:
         b8:ba:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:44 2025 by rpki-client