Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          G4PMXi5vBdDCnfUY02znBA4/TDMV8l2k5iLdjRTdUcE=
Subject key identifier:   59:B7:12:56:FB:94:5A:34:49:19:D2:E4:BB:8E:5D:45:90:08:3F:26
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       0CFB8593C5B1D3E28C03939DBC937C70497F5FFC
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS14618.roa
Signing time:             Tue 27 Feb 2024 09:07:38 +0000
ROA not before:           Tue 27 Feb 2024 09:02:38 +0000
ROA not after:            Tue 25 Feb 2025 09:07:38 +0000
asID:                     14618
IP address blocks:        205.234.204.0/24 maxlen: 24
                          216.246.3.0/24 maxlen: 24
                          216.246.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fb:85:93:c5:b1:d3:e2:8c:03:93:9d:bc:93:7c:70:49:7f:5f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Feb 27 09:02:38 2024 GMT
            Not After : Feb 25 09:07:38 2025 GMT
        Subject: CN=59B71256FB945A344919D2E4BB8E5D4590083F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:6e:ef:e8:a6:0e:3d:e8:c4:cf:92:80:49:
                    97:68:62:a7:af:9b:29:35:48:45:bf:78:4f:5b:ee:
                    d3:a6:f0:4b:4c:6e:11:5e:7c:77:5f:8e:79:33:aa:
                    5c:82:21:f3:a0:f2:72:a3:8a:cd:1e:53:db:7b:c2:
                    7b:af:fb:76:c3:d0:a9:3a:fa:5d:ce:88:7d:57:1f:
                    31:3a:52:9f:81:3e:11:f4:02:47:d8:64:38:51:f6:
                    43:37:21:3e:ee:b9:f0:d7:d5:dc:d4:24:9b:21:cb:
                    23:6f:68:61:67:4e:24:35:98:c7:15:bd:4f:82:e5:
                    61:ca:b0:b8:f7:ed:e6:5e:24:1e:ae:36:ff:fd:2b:
                    cf:7c:ed:5f:a0:42:d0:c8:f4:c3:a9:f1:c5:f3:81:
                    ac:8e:11:13:cd:05:d3:bc:f3:6c:91:57:79:4f:25:
                    52:7c:fd:4c:11:58:0b:ea:e4:2f:7f:aa:9c:b6:0b:
                    2c:72:09:8f:7d:48:65:f4:8f:80:24:9b:46:9b:b1:
                    c3:f8:64:21:8c:a6:15:ee:bc:de:77:57:5f:b9:f5:
                    4a:29:bc:1c:21:46:ac:29:f6:cb:de:90:ad:bf:8f:
                    ec:8f:53:1d:99:68:89:0e:e0:a4:25:d7:ab:e4:6a:
                    83:fc:16:cd:87:db:3f:74:16:08:fa:0c:8c:d4:39:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B7:12:56:FB:94:5A:34:49:19:D2:E4:BB:8E:5D:45:90:08:3F:26
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.204.0/24
                  216.246.3.0/24
                  216.246.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:9f:5a:f5:b9:06:a5:e7:e8:ab:2d:5d:8e:10:61:ed:43:
         33:ad:f0:fc:60:9c:65:80:dc:d9:91:27:ad:f7:79:c6:5e:f1:
         8b:d5:06:b9:0d:96:1a:38:c7:a4:bd:30:9f:ea:56:a4:bd:64:
         38:56:4b:34:ca:c2:ba:3b:31:0c:89:3d:3a:f4:d0:d4:90:c3:
         a1:67:fd:39:5d:64:17:1b:22:39:ba:ae:ad:73:04:6b:df:d4:
         8c:49:24:91:7d:85:f7:0e:44:1a:01:59:a1:b6:20:e1:93:0d:
         9d:87:0c:be:dc:89:ca:dc:36:d3:13:6c:36:3c:3c:ae:69:bb:
         1e:d8:a0:d6:0a:ba:42:72:e5:d4:79:b7:ab:b3:6c:34:fd:85:
         05:42:11:0c:b8:fb:24:a8:96:6a:16:c2:ea:61:85:55:ff:4e:
         c5:13:18:48:4e:e2:74:7d:a4:dc:56:ac:57:a6:a7:18:1a:cf:
         4d:29:c9:bf:33:60:bf:6c:7e:22:07:e3:e6:4f:46:90:a2:2b:
         83:e2:3f:db:03:6c:d3:4e:9a:a9:e7:08:70:d5:db:e4:67:61:
         45:f0:ce:64:3b:2d:26:28:4b:e7:6b:89:20:ed:d2:df:20:5b:
         47:52:07:45:cf:05:2b:0a:fa:b9:8e:73:51:b4:42:b2:73:f1:
         26:71:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:05:20 2024 by rpki-client on console-fra.rpki-client.org