Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          sdENKS7st2jJSvU52QPY+rHiL1nQivtORHpzq3nAqLg=
Subject key identifier:   E7:BB:3A:35:6B:73:8F:6A:F8:51:E8:4C:3A:51:00:2F:E5:08:4E:8E
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6D9B288AFCE87456C3094C48990BCEDCDAEB9CBA
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14315.roa
Signing time:             Thu 03 Jul 2025 08:11:03 +0000
ROA not before:           Thu 03 Jul 2025 08:06:03 +0000
ROA not after:            Thu 02 Jul 2026 08:11:03 +0000
asID:                     14315
IP address blocks:        40.183.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 02:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9b:28:8a:fc:e8:74:56:c3:09:4c:48:99:0b:ce:dc:da:eb:9c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul  3 08:06:03 2025 GMT
            Not After : Jul  2 08:11:03 2026 GMT
        Subject: CN=E7BB3A356B738F6AF851E84C3A51002FE5084E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:b5:3a:f3:b8:7d:9e:f7:63:7c:16:6c:8c:
                    bf:bf:44:30:b0:52:ec:57:f7:6d:08:f0:59:18:9f:
                    fb:db:d4:b5:14:46:0a:72:fc:2c:fc:88:ac:4b:af:
                    39:90:64:b0:74:0c:f9:0f:f9:20:ac:95:dd:09:a9:
                    5b:0a:e5:9a:94:5d:b2:10:7c:f3:43:68:ed:ba:58:
                    e6:e5:c1:83:19:d8:22:03:fd:30:5b:f2:5c:81:61:
                    ea:b7:95:12:87:2a:db:ac:cc:b7:8d:89:27:fe:2e:
                    4b:2f:f1:08:3d:9b:d0:2e:92:53:b3:81:97:ef:d7:
                    43:ec:c1:0f:02:0b:73:dc:1b:56:72:32:9a:47:cc:
                    37:19:8f:b6:4b:14:22:48:24:bb:b7:3f:5f:7a:f0:
                    68:12:66:c5:0d:b3:b9:c3:55:5a:27:f7:d0:b0:3d:
                    c3:f7:92:e1:e0:e6:9c:ad:a8:82:13:49:3a:cb:3a:
                    b0:58:d2:00:c5:a6:a0:84:63:03:36:f6:97:6d:78:
                    32:27:46:74:4b:cd:2b:31:08:63:b1:02:0e:21:23:
                    b9:5a:3d:1f:8d:33:45:12:67:39:6a:14:2e:fc:f6:
                    a9:6f:09:3e:98:53:86:9d:77:52:27:41:f6:50:4e:
                    01:b0:7c:37:a2:fb:cf:38:39:84:21:3d:ed:26:83:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:3A:35:6B:73:8F:6A:F8:51:E8:4C:3A:51:00:2F:E5:08:4E:8E
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:38:fe:48:93:8b:6f:ca:d0:9c:af:ca:8f:00:74:42:09:
         22:11:59:07:60:24:98:f0:77:76:f0:28:e3:a8:b9:78:42:01:
         94:cc:1b:4a:de:0e:f1:62:56:d7:c7:c1:d6:53:72:8e:bb:18:
         8e:47:a0:7c:b2:00:a8:92:00:36:6d:f4:9d:91:d4:12:f6:61:
         32:7f:d5:51:b0:da:b1:ce:72:3d:89:07:e1:30:81:f7:da:bd:
         4c:04:bb:f2:99:cc:d4:21:c9:d0:34:1b:df:fa:fa:35:08:5f:
         5d:e7:cc:26:59:fe:ac:6e:fe:52:48:5f:e8:3c:d9:de:80:0a:
         ba:aa:3e:21:00:de:c4:77:8b:ad:cd:87:15:ab:7f:94:2f:93:
         26:1e:e9:09:f9:6d:f2:bb:74:ad:50:46:d1:43:24:af:9a:d1:
         06:b3:4f:5e:98:a2:37:ef:ce:1d:32:5c:1b:7e:02:45:a8:c2:
         df:9c:b0:51:11:f6:dd:a5:85:93:33:e7:09:5b:b5:55:e3:01:
         7f:d9:02:12:b8:d6:5c:97:9e:1b:a7:61:e8:ef:6b:60:a5:4b:
         59:44:17:fc:30:96:0b:a3:70:03:7b:f3:49:cb:f4:77:df:a0:
         6c:57:c3:88:e2:2e:91:24:53:95:34:08:83:4d:c4:16:67:06:
         6d:83:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:33 2025 by rpki-client