Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          rNTp1PydLTFAFAUENjXU634KhrzL9dCqnwOiuD0G6Xk=
Subject key identifier:   77:B2:19:84:3E:CC:91:83:0C:3D:F9:C7:E6:B3:2B:95:AB:CB:6A:4C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       093E05FBA8B777D3075913C4CE65494018E58E7A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14315.roa
Signing time:             Tue 01 Apr 2025 12:37:34 +0000
ROA not before:           Tue 01 Apr 2025 12:32:34 +0000
ROA not after:            Tue 31 Mar 2026 12:37:34 +0000
asID:                     14315
IP address blocks:        23.94.110.0/24 maxlen: 24
                          74.50.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3e:05:fb:a8:b7:77:d3:07:59:13:c4:ce:65:49:40:18:e5:8e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr  1 12:32:34 2025 GMT
            Not After : Mar 31 12:37:34 2026 GMT
        Subject: CN=77B219843ECC91830C3DF9C7E6B32B95ABCB6A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:b9:ac:76:15:69:d6:38:8a:fe:fe:70:4e:
                    2b:d9:d5:3c:60:4e:71:ae:43:b8:49:87:c3:c0:78:
                    3c:2d:af:b7:1d:12:74:da:8b:da:4f:70:a5:fb:d0:
                    c8:38:df:2d:38:d1:4d:74:7b:6f:be:65:17:82:e8:
                    42:c1:a8:29:35:34:46:21:4b:05:cb:d9:29:34:bf:
                    f4:de:cf:9d:5f:f9:cc:a9:69:55:2a:96:b9:10:46:
                    63:cc:c7:8a:21:e6:af:fe:bb:eb:a7:a4:d7:11:5d:
                    44:23:cc:00:f1:b5:20:23:15:45:d5:44:32:35:f5:
                    eb:b4:45:c2:48:fd:4e:77:38:5a:40:6a:45:3d:d7:
                    ec:3c:b3:13:02:1e:37:d5:fb:5f:95:94:09:80:7b:
                    55:20:35:67:54:b1:c7:8a:b7:c2:5b:da:68:d7:6e:
                    19:af:76:0b:95:b8:d4:8a:cd:16:b6:a6:8a:45:7c:
                    89:0b:05:47:ed:86:2f:73:21:d0:ec:0c:ec:3d:5c:
                    63:a7:73:86:02:05:70:b1:49:5d:9b:78:ae:8b:f7:
                    fe:dc:91:20:5b:54:11:a5:fd:3d:05:a1:00:99:48:
                    6d:89:5f:8a:3f:66:57:bf:ab:ad:d7:80:5d:18:52:
                    07:7c:12:ad:2f:dc:dc:9e:10:57:f4:a7:d4:a2:b3:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:19:84:3E:CC:91:83:0C:3D:F9:C7:E6:B3:2B:95:AB:CB:6A:4C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.110.0/24
                  74.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:98:1f:2c:f0:66:38:2c:cb:49:18:c7:95:f0:b1:da:64:a8:
         84:70:98:e5:a4:e0:75:f1:ac:cf:14:ab:80:08:53:62:0e:41:
         22:9f:78:4f:aa:44:8f:af:f6:4a:c8:31:b6:63:a6:de:a6:f0:
         35:98:d6:0f:ad:d7:30:52:87:3a:5d:1b:fb:5b:4c:89:4d:5e:
         78:a5:6b:f0:b1:a4:5b:fc:84:8c:e7:8e:eb:1b:c0:d0:ad:ab:
         3c:08:62:80:60:ec:a6:84:ea:05:db:9c:2c:41:14:06:4c:41:
         33:94:c4:2d:98:a6:31:24:f1:41:b8:d2:01:58:04:2c:40:fd:
         01:93:16:9b:87:84:e6:7a:45:f4:66:51:d0:5b:67:f6:34:cd:
         26:ed:25:e6:e1:75:df:9d:48:56:e2:83:ed:c6:30:02:81:57:
         c2:a8:7c:42:36:35:1b:05:a1:05:65:95:a4:48:d8:3c:bb:20:
         54:07:34:2a:3b:24:cb:3d:c3:2d:11:f7:33:4c:8f:07:cb:a9:
         ff:be:f8:69:15:6e:df:5c:07:e9:c6:b3:07:1e:15:39:ad:09:
         2c:8b:5f:dc:7e:02:6e:14:8e:81:e1:b3:c2:15:3f:91:6f:37:
         1d:e5:2c:2f:9b:34:84:ae:b8:6a:7a:8f:ea:22:46:94:a6:c1:
         e5:1e:32:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUCT4F+6i3d9MHWRPEzmVJQBjljnowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDAxMTIzMjM0WhcNMjYwMzMxMTIzNzM0
WjAzMTEwLwYDVQQDEyg3N0IyMTk4NDNFQ0M5MTgzMEMzREY5QzdFNkIzMkI5NUFC
Q0I2QTRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueK5rHYVadY4
iv7+cE4r2dU8YE5xrkO4SYfDwHg8La+3HRJ02ovaT3Cl+9DION8tONFNdHtvvmUX
guhCwagpNTRGIUsFy9kpNL/03s+dX/nMqWlVKpa5EEZjzMeKIeav/rvrp6TXEV1E
I8wA8bUgIxVF1UQyNfXrtEXCSP1OdzhaQGpFPdfsPLMTAh431ftflZQJgHtVIDVn
VLHHirfCW9po124Zr3YLlbjUis0WtqaKRXyJCwVH7YYvcyHQ7AzsPVxjp3OGAgVw
sUldm3iui/f+3JEgW1QRpf09BaEAmUhtiV+KP2ZXv6ut14BdGFIHfBKtL9zcnhBX
9KfUorPCmwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFHeyGYQ+zJGDDD35x+azK5Wr
y2pMMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE0MzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF15uAwQASjIAMA0GCSqGSIb3DQEB
CwUAA4IBAQARmB8s8GY4LMtJGMeV8LHaZKiEcJjlpOB18azPFKuACFNiDkEin3hP
qkSPr/ZKyDG2Y6bepvA1mNYPrdcwUoc6XRv7W0yJTV54pWvwsaRb/ISM547rG8DQ
ras8CGKAYOymhOoF25wsQRQGTEEzlMQtmKYxJPFBuNIBWAQsQP0Bkxabh4TmekX0
ZlHQW2f2NM0m7SXm4XXfnUhW4oPtxjACgVfCqHxCNjUbBaEFZZWkSNg8uyBUBzQq
OyTLPcMtEfczTI8Hy6n/vvhpFW7fXAfpxrMHHhU5rQksi1/cfgJuFI6B4bPCFT+R
bzcd5SwvmzSErrhqeo/qIkaUpsHlHjKg
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:24 2025 by rpki-client