Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          jvw0vodOCopSwVgMbgf/b4PfwdL8tZsH/8y80/NZL1M=
Subject key identifier:   C2:07:3F:DE:EE:B2:10:ED:38:20:C8:1D:7A:04:B1:AF:36:4A:33:1E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2F8260D8506AEB25A71A3997F4E37320402F8EE2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa
Signing time:             Fri 29 Mar 2024 06:53:21 +0000
ROA not before:           Fri 29 Mar 2024 06:48:21 +0000
ROA not after:            Fri 28 Mar 2025 06:53:21 +0000
asID:                     14618
IP address blocks:        104.234.137.0/24 maxlen: 24
                          104.234.141.0/24 maxlen: 24
                          104.234.160.0/24 maxlen: 24
                          104.234.175.0/24 maxlen: 24
                          104.234.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 18:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:82:60:d8:50:6a:eb:25:a7:1a:39:97:f4:e3:73:20:40:2f:8e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 29 06:48:21 2024 GMT
            Not After : Mar 28 06:53:21 2025 GMT
        Subject: CN=C2073FDEEEB210ED3820C81D7A04B1AF364A331E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:aa:05:4c:4f:5c:61:12:36:14:96:ed:57:
                    18:2d:d7:33:ed:99:6e:33:96:58:be:99:70:99:85:
                    8d:02:00:7b:d0:2a:86:8c:3c:c5:02:1d:2f:04:54:
                    ec:54:08:87:56:5d:1c:fb:2e:d4:98:eb:4b:24:49:
                    0a:7f:24:a3:88:00:3a:f6:11:ae:2b:be:87:49:b8:
                    0b:13:f7:8e:32:3a:12:f8:b3:de:bf:d5:16:44:03:
                    ba:78:ca:f9:d9:1b:f0:c5:a2:c6:68:4c:15:2d:a0:
                    e9:12:80:f3:d1:8b:f2:5b:8c:e1:1d:24:fc:fd:69:
                    51:82:09:df:71:68:5a:54:9a:e9:cc:c4:45:18:d9:
                    0a:b3:1b:9c:e6:ee:bf:05:91:bd:d3:84:ba:ae:99:
                    35:f2:bc:04:e4:64:43:43:89:e4:eb:2d:f4:13:09:
                    ca:60:78:a8:b7:fd:0a:ce:e5:87:b0:9a:f5:ba:d3:
                    8a:36:30:c1:3e:fe:67:83:1a:78:f3:5c:69:24:a7:
                    22:2c:1a:7b:48:e8:ab:52:ef:58:91:9b:0e:7f:84:
                    39:73:dc:49:2f:f8:af:28:3c:3a:fe:5d:53:bc:9e:
                    d0:64:d8:ca:f6:75:14:2d:22:8d:6e:82:8f:ec:bf:
                    f8:ba:b1:15:55:91:c8:a7:41:48:d7:bf:1c:1b:a0:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:07:3F:DE:EE:B2:10:ED:38:20:C8:1D:7A:04:B1:AF:36:4A:33:1E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.137.0/24
                  104.234.141.0/24
                  104.234.160.0/24
                  104.234.175.0/24
                  104.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:55:e6:df:10:34:ba:f9:1a:ba:ae:7d:9d:a0:07:ff:9c:a0:
         30:22:56:1d:26:e1:87:c5:93:a0:da:b4:a2:b3:67:b5:91:fa:
         04:f1:a3:fa:2b:72:e0:d1:9f:ad:29:e9:3c:ce:9d:ec:2b:90:
         0d:d3:d9:97:99:70:23:88:ad:09:4a:6f:83:68:32:54:39:f9:
         71:0f:34:65:33:2e:79:9b:f4:f9:3a:6d:a0:8c:44:f0:42:61:
         80:4d:e1:75:d5:06:6b:2f:a7:62:a0:41:75:52:4b:d1:e4:a4:
         bf:b4:85:46:31:91:2c:47:46:6c:34:11:84:72:58:51:94:d5:
         5c:14:03:ef:c0:37:f4:71:64:e8:b3:d5:38:8e:e9:d9:65:ac:
         4d:9e:94:95:30:2f:b8:ad:06:0b:b6:a4:9f:cb:71:f2:ea:ef:
         1b:52:91:73:65:be:2b:2b:6b:9d:ad:8d:5f:71:3e:d0:58:7d:
         6e:64:8a:3d:f4:72:a3:89:6c:19:ef:a8:f2:bc:20:99:bc:c5:
         34:67:82:da:ca:a0:9d:1f:90:fb:a6:c1:60:8c:07:ce:81:62:
         25:a8:7b:12:10:88:86:39:51:ef:e0:9b:63:9c:48:e3:f8:6f:
         9f:e5:6a:92:c2:ef:51:e2:65:99:2b:00:8e:cc:5c:67:99:93:
         f5:65:54:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIUL4Jg2FBq6yWnGjmX9ONzIEAvjuIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMzI5MDY0ODIxWhcNMjUwMzI4MDY1MzIx
WjAzMTEwLwYDVQQDEyhDMjA3M0ZERUVFQjIxMEVEMzgyMEM4MUQ3QTA0QjFBRjM2
NEEzMzFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuGqBUxPXGES
NhSW7VcYLdcz7ZluM5ZYvplwmYWNAgB70CqGjDzFAh0vBFTsVAiHVl0c+y7UmOtL
JEkKfySjiAA69hGuK76HSbgLE/eOMjoS+LPev9UWRAO6eMr52RvwxaLGaEwVLaDp
EoDz0YvyW4zhHST8/WlRggnfcWhaVJrpzMRFGNkKsxuc5u6/BZG904S6rpk18rwE
5GRDQ4nk6y30EwnKYHiot/0KzuWHsJr1utOKNjDBPv5ngxp481xpJKciLBp7SOir
Uu9YkZsOf4Q5c9xJL/ivKDw6/l1TvJ7QZNjK9nUULSKNboKP7L/4urEVVZHIp0FI
178cG6B4UwIDAQABo4ICljCCApIwHQYDVR0OBBYEFMIHP97ushDtOCDIHXoEsa82
SjMeMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG
CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAaOqJAwQAaOqNAwQAaOqgAwQAaOqv
AwQAaOq7MA0GCSqGSIb3DQEBCwUAA4IBAQBFVebfEDS6+Rq6rn2doAf/nKAwIlYd
JuGHxZOg2rSis2e1kfoE8aP6K3Lg0Z+tKek8zp3sK5AN09mXmXAjiK0JSm+DaDJU
OflxDzRlMy55m/T5Om2gjETwQmGATeF11QZrL6dioEF1UkvR5KS/tIVGMZEsR0Zs
NBGEclhRlNVcFAPvwDf0cWTos9U4junZZaxNnpSVMC+4rQYLtqSfy3Hy6u8bUpFz
Zb4rK2udrY1fcT7QWH1uZIo99HKjiWwZ76jyvCCZvMU0Z4LayqCdH5D7psFgjAfO
gWIlqHsSEIiGOVHv4JtjnEjj+G+f5WqSwu9R4mWZKwCOzFxnmZP1ZVT/
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:32:13 2024 by rpki-client on console-fra.rpki-client.org