Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          4JvESAtylRgSgGN3O0haRnNSS/gAbrGVQ03+fxyw1DI=
Subject key identifier:   EE:28:E1:FB:6B:82:D5:CE:AA:21:A4:36:C0:60:AC:93:83:A1:5B:73
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       75403711DE40AECCAC0BEC8F5D87AF0143C1C567
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
Signing time:             Sun 21 Jan 2024 20:01:12 +0000
ROA not before:           Sun 21 Jan 2024 19:56:12 +0000
ROA not after:            Sun 19 Jan 2025 20:01:12 +0000
asID:                     14618
IP address blocks:        209.200.231.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 02:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:40:37:11:de:40:ae:cc:ac:0b:ec:8f:5d:87:af:01:43:c1:c5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan 21 19:56:12 2024 GMT
            Not After : Jan 19 20:01:12 2025 GMT
        Subject: CN=EE28E1FB6B82D5CEAA21A436C060AC9383A15B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:48:15:57:04:23:f8:e5:94:df:62:be:50:18:
                    89:4d:3f:e1:27:1c:04:80:ae:d9:fe:83:88:f7:d8:
                    8f:0f:d4:6e:60:26:0f:9d:74:d1:42:db:af:87:cc:
                    c5:5d:f9:87:84:39:52:45:40:37:a5:2a:9e:da:e9:
                    c4:d4:96:4c:13:7c:e0:37:2b:ea:e5:88:e2:2a:15:
                    02:f3:a9:09:3c:8c:58:80:d8:21:98:6b:d5:34:98:
                    60:f6:6f:53:49:72:c0:a2:7d:d2:66:2c:de:d4:21:
                    09:32:ef:ae:9d:14:07:ef:fa:01:57:f9:2f:27:e3:
                    ab:b1:79:c6:53:cf:cf:09:80:02:00:d5:90:f6:2e:
                    aa:00:6c:90:e4:a2:9f:98:be:f6:d3:82:fc:4d:24:
                    f3:28:f0:99:91:d9:ae:83:43:71:67:8f:12:c1:84:
                    8b:a9:55:46:3f:a7:18:d7:75:8b:40:95:d6:fd:cd:
                    43:92:b8:53:6f:8d:90:2d:7b:19:31:9e:49:93:f3:
                    dd:cc:b8:0a:5e:4a:d9:c7:a2:1c:52:6a:50:71:6d:
                    71:5d:4d:84:a7:4e:af:94:04:3c:57:ab:b0:b9:ac:
                    8b:3d:07:82:8b:96:26:50:91:81:16:a0:06:73:5c:
                    96:9e:63:08:2b:13:8c:b4:ef:dd:30:91:2f:0e:02:
                    67:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:28:E1:FB:6B:82:D5:CE:AA:21:A4:36:C0:60:AC:93:83:A1:5B:73
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.231.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7d:46:15:7d:72:43:7b:d6:c0:65:62:8c:4e:e2:0e:a6:b7:
         9a:c4:9b:51:33:61:fb:16:50:ec:b4:1c:81:72:56:65:c2:68:
         a0:58:b4:c3:a9:22:b4:42:92:97:4c:a2:4d:b4:c1:c8:ca:9d:
         02:e5:cf:de:2d:8a:f9:26:27:79:66:47:92:9d:91:7f:c2:8e:
         dc:a8:0e:16:31:e9:d1:70:a8:84:d0:04:a8:be:e5:54:98:c6:
         e1:5c:1d:c7:40:e8:a7:ca:ee:0d:1d:49:8f:61:b8:2a:2f:1e:
         98:a3:bd:70:95:af:aa:21:4c:58:94:2f:76:7b:29:7d:15:4f:
         96:59:41:23:89:e8:8b:e5:09:26:20:8b:83:5f:b5:bc:26:71:
         4f:c0:cd:69:97:36:0d:00:7e:81:67:05:c3:ec:f6:ba:ea:f0:
         4b:5e:03:29:b0:58:f8:83:c9:62:a1:7d:d8:58:22:98:d6:e0:
         f5:a3:d9:84:3d:e2:00:67:29:d8:55:f1:19:96:2d:c5:df:c1:
         c3:f2:4d:b3:fa:20:e5:44:b0:46:3c:96:cb:ff:99:e9:94:f6:
         16:5f:7c:44:8b:f2:28:c5:73:89:90:38:bf:3f:9b:02:03:e7:
         db:c1:23:30:19:a6:84:3a:b5:52:c7:8b:6d:b2:97:6e:68:4e:
         7f:7b:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:02:41 2024 by rpki-client on console-fra.rpki-client.org