Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS14790.roa
File:                     AS14790.roa (raw, json)
Hash identifier:          NnMgewguMsREUShnpXghnf2RaLn3nxh9dH2r1YHrkr0=
Subject key identifier:   28:E8:D0:70:BF:F5:A9:7F:85:CB:3F:4F:82:BB:2B:DE:15:A7:C3:FF
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       362F07A8E6158F68635DE09CC23AE273BA72C6C8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS14790.roa
Signing time:             Tue 30 Jan 2024 05:28:21 +0000
ROA not before:           Tue 30 Jan 2024 05:23:21 +0000
ROA not after:            Tue 28 Jan 2025 05:28:21 +0000
asID:                     14790
IP address blocks:        104.169.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2f:07:a8:e6:15:8f:68:63:5d:e0:9c:c2:3a:e2:73:ba:72:c6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 30 05:23:21 2024 GMT
            Not After : Jan 28 05:28:21 2025 GMT
        Subject: CN=28E8D070BFF5A97F85CB3F4F82BB2BDE15A7C3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ed:68:e9:07:ca:d4:26:fd:6b:da:79:e7:c6:
                    f4:f9:1c:a5:14:d2:c4:5e:c9:b8:a9:27:a0:b0:d9:
                    80:79:b6:35:08:b5:21:8a:a2:2e:6b:d9:2c:ac:c2:
                    06:78:97:50:d5:73:d6:5e:4b:ae:3e:92:49:5a:35:
                    56:f9:72:6c:ba:66:bc:5c:1f:66:82:b1:0e:17:99:
                    b6:11:d6:75:61:50:79:48:26:f2:76:4a:60:5c:df:
                    d7:9f:bb:a0:07:90:fa:55:bd:38:39:c5:27:13:ad:
                    b5:c8:b6:a2:c4:64:96:ac:aa:0a:c3:74:83:ee:0e:
                    b6:ca:07:ac:0a:d8:1e:0a:2f:26:b4:17:a9:fd:d2:
                    f1:8c:0f:c6:e2:8a:47:92:6b:d3:86:12:a0:6a:99:
                    3c:8f:a5:69:1f:96:08:59:fa:24:73:ea:b1:5e:0c:
                    2a:77:20:06:32:6a:a5:02:dc:f6:2b:75:de:1f:e0:
                    bc:5e:9b:0a:4f:9e:07:0e:77:76:e1:ac:54:9c:a7:
                    97:f5:7d:d0:b1:d9:fa:e3:7d:67:18:d9:9e:8a:4d:
                    fc:46:72:82:e2:2c:8e:12:e9:27:e3:ba:64:30:42:
                    b8:cc:9a:62:10:82:8f:5c:3e:c0:b2:68:ed:e3:42:
                    67:c8:51:75:5b:84:c0:2c:ad:87:70:f1:5f:f2:90:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:D0:70:BF:F5:A9:7F:85:CB:3F:4F:82:BB:2B:DE:15:A7:C3:FF
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS14790.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.169.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:af:58:26:0b:2c:1d:ce:ae:20:a1:ca:45:9b:b4:53:93:64:
         3e:91:94:32:1c:e2:fc:ca:d6:4d:76:74:11:56:db:d5:df:aa:
         1e:27:0e:82:a8:62:e7:e5:40:86:8a:f5:45:d7:89:bd:b4:0d:
         f4:f0:40:b8:f5:80:98:29:39:df:cf:13:ca:94:67:e4:8b:d1:
         02:b8:b3:68:a7:a0:0c:90:4b:01:6d:59:40:c8:2d:88:19:eb:
         7e:1a:58:58:7c:cf:66:9e:53:db:ae:80:9b:db:1f:92:69:aa:
         8f:ff:32:d5:f0:94:76:0b:96:f4:c8:46:1b:c2:60:8f:e0:bc:
         c5:f6:e3:5f:40:4e:5e:35:5d:ff:8f:5a:6e:86:c8:73:b3:f4:
         33:a5:23:b2:ce:3a:87:9e:27:02:48:5e:f5:a9:93:5b:c5:c5:
         32:90:e8:dc:8d:57:91:5a:6f:ab:94:d5:e6:45:c5:d1:49:b7:
         39:da:ff:6a:96:af:1f:67:9c:b3:b7:0c:bd:6f:9c:a2:b1:d8:
         dd:90:e7:d1:01:58:0d:05:b0:0b:f3:6d:09:94:39:9d:9a:64:
         18:e7:2d:4d:12:c3:1d:e0:29:c9:61:fd:02:da:06:63:5d:4f:
         37:fa:5f:62:23:4a:cc:c2:49:01:94:86:7b:20:d9:5e:1c:ed:
         16:a0:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org