Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          l8h2/viT70NHYVgnQ4ATwrIQa7nFETWy/l5IMKwUXZ4=
Subject key identifier:   11:CA:C1:D5:3B:70:DB:57:F7:DB:47:8E:10:91:E3:BE:97:A3:F1:6B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       162896A3216FDDCDEB1C4001F59654093978706D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14315.roa
Signing time:             Wed 06 Mar 2024 18:15:56 +0000
ROA not before:           Wed 06 Mar 2024 18:10:56 +0000
ROA not after:            Wed 05 Mar 2025 18:15:56 +0000
asID:                     14315
IP address blocks:        74.50.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 02:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:28:96:a3:21:6f:dd:cd:eb:1c:40:01:f5:96:54:09:39:78:70:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar  6 18:10:56 2024 GMT
            Not After : Mar  5 18:15:56 2025 GMT
        Subject: CN=11CAC1D53B70DB57F7DB478E1091E3BE97A3F16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:dd:e6:ee:e6:9a:1d:7e:bd:34:34:ec:04:
                    06:53:9f:36:cc:98:80:1f:05:c4:7f:43:f0:6d:0e:
                    46:e2:69:55:05:61:c2:f9:af:cf:7e:9e:6a:be:42:
                    49:4c:53:3e:db:b4:91:8c:06:33:ee:48:6c:b4:b8:
                    b7:b4:09:07:41:0d:10:c6:52:f5:ad:cb:92:b2:91:
                    f1:ef:ff:4a:97:f2:00:e6:fa:90:f5:16:0a:ba:05:
                    d6:3b:03:ee:02:61:43:50:3c:85:da:09:e8:66:06:
                    12:3e:a4:12:74:0e:02:b1:8b:81:2d:38:46:12:d9:
                    02:43:61:66:d4:a0:4e:e9:cc:f0:64:85:ac:cd:16:
                    fc:59:0f:89:cd:3e:18:30:72:fc:c9:11:0d:b8:59:
                    63:1c:5b:3b:98:d8:e0:19:c5:0b:7c:d8:6a:6f:ad:
                    4f:11:7b:93:1b:5d:06:43:83:ba:72:20:b7:27:75:
                    08:9a:69:db:c3:a7:1d:0e:9a:40:08:73:ff:06:90:
                    9d:5a:fe:80:c8:6e:8a:66:be:54:17:99:34:5e:78:
                    15:56:45:6b:00:6e:e5:29:1f:e3:8a:bb:76:80:ba:
                    a2:64:f1:2a:94:88:46:41:06:e4:76:cc:d4:7c:7a:
                    97:38:2e:74:67:1b:77:cb:e1:73:a5:36:c3:19:7c:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CA:C1:D5:3B:70:DB:57:F7:DB:47:8E:10:91:E3:BE:97:A3:F1:6B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:c0:33:05:8a:2d:a0:3c:bc:a0:b8:f9:f5:b5:76:08:8e:
         6e:9f:d8:e5:46:eb:85:48:b4:c8:a1:61:c9:be:2e:d5:87:da:
         b4:f6:83:05:51:7e:e5:9b:bf:65:76:01:51:35:32:2c:e8:da:
         07:35:d8:e2:78:66:72:05:c3:a9:d9:b1:b2:23:d9:d1:9d:2f:
         6d:c0:1f:26:db:42:de:d5:b2:b9:83:11:04:3c:8d:a8:fd:df:
         7f:6f:28:7a:07:54:eb:dd:95:03:73:ec:5d:c1:93:73:22:78:
         80:74:3d:79:f4:a3:99:cd:f6:13:d7:99:16:c7:81:76:19:ba:
         8d:78:c4:1b:46:49:43:67:d5:c4:30:ca:f5:18:ec:0b:7f:9a:
         41:44:50:1b:e1:9b:7e:76:ed:fe:78:55:e1:83:26:ce:04:cf:
         83:37:3e:1b:14:79:3a:e5:40:2d:e6:ba:16:04:32:3d:86:3a:
         b7:76:09:9c:57:f8:ce:60:c7:d4:4c:4e:87:db:d7:a0:4d:22:
         21:77:f5:22:32:e6:fb:74:79:fd:da:cc:01:08:94:97:99:56:
         04:e5:aa:a4:68:3a:c5:66:79:16:ac:d6:6f:1c:bf:ab:95:fa:
         07:c9:fb:62:63:8e:12:06:ed:22:e5:14:ea:14:f4:51:5e:69:
         6e:21:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:35:08 2024 by rpki-client on console-ams.rpki-client.org