Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/c8471768-4c5c-39fd-a405-3ccc4bc38fd8.roa
File:                     c8471768-4c5c-39fd-a405-3ccc4bc38fd8.roa (raw, json)
Hash identifier:          4PEDN6iV1lvy1kOjC/yFK3aImXPAWg/xRU6LUmIND7E=
Subject key identifier:   0E:77:30:7D:DA:EA:0A:D1:55:2F:37:F8:A2:CF:CA:1B:48:A2:BB:B6
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F43285849C904F3409B98F984F16DDA80
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/c8471768-4c5c-39fd-a405-3ccc4bc38fd8.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     2734
IP address blocks:        98.158.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f3:40:9b:98:f9:84:f1:6d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=1593b5ed-2e0e-4d08-a2a8-fc8a153a2c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:84:dc:a2:70:90:78:9e:e8:4d:9e:87:b3:
                    84:bb:ef:32:5f:08:2f:6d:02:32:39:26:31:74:ed:
                    fb:55:25:46:52:28:d0:de:b2:95:13:b0:a7:79:38:
                    c6:50:45:65:03:7c:0a:26:ee:f0:97:ed:37:05:f3:
                    c6:0b:98:77:13:18:9c:46:67:70:0d:9c:d5:6a:60:
                    a8:9f:a1:44:24:d5:11:fa:f0:7a:50:eb:a6:48:05:
                    78:fe:55:26:8f:48:62:f2:cc:6a:91:4d:33:d1:67:
                    f2:4e:de:ee:85:a2:ce:f1:06:4c:5c:be:2f:32:3c:
                    c0:b3:bb:ae:83:85:d8:f7:43:b7:18:23:62:c2:eb:
                    d1:03:ad:5b:8d:54:a4:b0:62:c3:3d:f1:27:2d:45:
                    5b:8d:f8:2f:e0:d4:6a:93:36:04:21:2d:37:9c:81:
                    6e:50:cf:87:51:7e:7c:68:52:f1:4a:0d:21:d7:5a:
                    70:ba:c4:27:dd:b0:1b:fb:43:ea:6d:8a:e8:64:d6:
                    ce:53:a5:ce:ab:92:64:bb:2b:c8:81:70:5a:bc:ad:
                    a6:04:ed:fe:5d:d7:4b:4e:1c:92:b3:2e:a0:74:32:
                    b3:61:a0:e6:ab:b6:9c:4d:c3:78:16:32:4b:56:cb:
                    10:39:06:a5:6a:9b:9f:c6:f3:d5:dd:18:8a:54:ba:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:77:30:7D:DA:EA:0A:D1:55:2F:37:F8:A2:CF:CA:1B:48:A2:BB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/c8471768-4c5c-39fd-a405-3ccc4bc38fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:d4:64:ac:f1:73:e1:e9:56:d0:56:15:4d:88:41:1b:5d:
         04:b6:5d:36:b6:81:1e:4e:29:8e:72:00:47:a9:a6:08:9b:55:
         b1:a1:35:6f:23:be:34:8d:f6:08:b8:51:30:fb:50:dc:1a:0f:
         12:21:fd:76:f2:a5:43:ea:9a:07:43:1e:a8:bb:91:76:7f:c2:
         34:97:fb:91:57:05:20:33:15:7e:b5:ea:55:e9:7e:4b:b0:5a:
         3c:c2:1b:99:57:9b:8c:79:0f:5e:0a:1d:44:e9:17:2c:72:30:
         18:9f:4a:a4:83:13:f7:92:82:e2:cc:2b:07:3a:b0:35:cb:69:
         53:fe:05:20:bf:4a:2c:87:2e:43:36:bd:94:f0:2a:1d:7a:92:
         7d:0a:39:85:e3:a2:84:24:9f:59:ac:cf:08:86:26:47:68:ae:
         fa:d2:9d:6c:bb:00:53:e0:7d:d3:f2:47:49:5d:d5:64:42:bd:
         03:e3:46:0d:77:50:2a:91:44:01:e2:c8:be:e0:44:f9:6d:cc:
         b7:c3:1c:40:fe:3b:97:c5:82:7a:f5:02:9f:e0:ad:a0:c9:5b:
         35:14:76:d0:6c:f8:9f:c7:70:7a:a0:57:68:22:75:2b:a4:57:
         76:34:b6:05:d7:4c:04:65:95:dc:85:a3:ae:b2:5d:1f:96:fa:
         7c:98:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:22:47 2025 by rpki-client