Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa
File:                     115b66b8-327b-3150-a712-f352fb1d0e2a.roa (raw, json)
Hash identifier:          NFWRCJrFPcO0ckX9SeZ+ZQmf0UxlCBq8+o0hAH2QjvQ=
Subject key identifier:   F7:80:11:19:9D:9A:E7:6E:25:24:2D:CF:D0:EC:B0:12:E7:0B:3E:44
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584A7FE094C1FBA4167C9BB74580
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     2734
IP address blocks:        98.158.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:94:c1:fb:a4:16:7c:9b:b7:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=1d192af8-9564-4ba6-a23b-04938f501f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:02:53:8f:ec:10:7a:cf:88:e6:b3:67:cb:
                    d0:31:f6:5a:ac:a5:7e:96:cd:07:01:c7:e1:e9:49:
                    a5:05:f0:2f:d1:23:c5:9e:0d:24:c2:ef:a4:c3:0c:
                    72:91:56:4f:10:79:1c:3a:33:ff:ff:17:06:d9:18:
                    a4:23:03:3d:b5:9e:08:88:3a:5b:9d:ca:22:dd:29:
                    1e:af:65:d8:74:d1:2a:9a:ba:69:a8:d3:7f:41:cf:
                    30:3f:82:4b:73:de:97:78:0d:1b:5b:ba:bc:da:6e:
                    fd:8d:c2:27:80:3b:13:80:e0:65:d2:28:c4:59:62:
                    c5:77:9f:af:d5:5f:43:43:9b:57:d9:29:ce:96:de:
                    24:c6:53:aa:c5:a6:f9:11:91:be:da:c1:35:19:45:
                    33:04:f7:a4:e0:be:95:70:88:8f:f5:84:ff:40:99:
                    d4:6b:23:6e:32:ec:34:95:20:80:00:b8:75:a5:75:
                    38:fa:8b:c7:3f:f2:30:9d:f7:10:f9:71:98:a6:b4:
                    03:e9:c2:f0:ce:bc:05:fd:39:ff:f9:13:c5:c0:5d:
                    20:58:37:b3:b0:e1:02:c0:60:38:1a:d8:a5:91:e0:
                    b7:f5:c9:4b:09:8f:f7:6d:fc:e9:86:bd:cd:b8:fa:
                    dc:42:39:9e:aa:55:26:a5:d3:f5:be:c6:21:52:1c:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:11:19:9D:9A:E7:6E:25:24:2D:CF:D0:EC:B0:12:E7:0B:3E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:86:61:a2:03:40:90:79:3b:72:42:a1:9b:5d:46:ba:aa:3f:
         3c:08:08:55:91:5d:58:91:17:10:5a:3e:61:be:11:9b:bf:52:
         42:27:d6:4e:d4:98:26:a7:9a:61:aa:57:df:39:49:2c:e2:7e:
         b4:5b:81:0e:1f:97:ff:81:60:11:3a:2e:1b:3a:1f:de:fb:42:
         ef:53:0e:3f:89:d0:5d:94:b4:23:a6:14:33:68:bf:44:2a:f5:
         07:b6:6c:63:e9:e0:69:3c:a4:0f:7f:8a:59:3e:a5:36:78:95:
         2b:b4:b1:df:93:bf:3f:48:d1:2d:ba:79:ce:30:b8:cc:14:39:
         a0:fe:e7:d3:db:2c:25:74:96:48:88:6f:02:ef:58:de:7b:c5:
         ea:09:72:64:fb:c5:bb:5b:29:78:2c:56:4b:e4:51:34:26:c4:
         04:bb:22:95:cb:a6:df:dd:c1:67:9a:99:a7:cc:62:3d:57:05:
         c4:6a:41:b1:07:0c:33:9a:e1:78:96:95:b9:ba:95:88:3e:b0:
         9c:e0:17:4b:4b:6d:94:40:b3:ec:9b:ec:a4:b8:02:75:73:cc:
         28:e6:73:4a:0e:97:48:bc:5d:d2:79:04:0b:ff:76:38:99:8b:
         2d:e0:8d:3a:27:2d:b6:95:02:8a:5c:e0:9e:d7:b9:c7:ac:92:
         d5:c0:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:44 2025 by rpki-client