Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          bx+Fxqo3R+4czDFYrOOUz4yVmn5Rlkhw5c54bAxtUhg=
Subject key identifier:   B2:B8:2F:1F:8F:F0:29:78:70:73:A3:D8:7E:DC:B8:AE:7C:54:CC:B3
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       454040173840449E01F433CDE49046C469BC2ED3
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa
Signing time:             Fri 01 Dec 2023 08:55:44 +0000
ROA not before:           Fri 01 Dec 2023 08:50:44 +0000
ROA not after:            Fri 29 Nov 2024 08:55:44 +0000
asID:                     14315
IP address blocks:        157.254.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:40:40:17:38:40:44:9e:01:f4:33:cd:e4:90:46:c4:69:bc:2e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec  1 08:50:44 2023 GMT
            Not After : Nov 29 08:55:44 2024 GMT
        Subject: CN=B2B82F1F8FF029787073A3D87EDCB8AE7C54CCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:8e:15:ff:91:95:48:71:27:4d:3a:8b:5c:
                    68:6b:9c:20:ff:5c:d7:97:a8:d9:46:b0:35:77:cf:
                    28:4f:85:35:96:ab:73:80:af:cf:8b:42:77:7c:0d:
                    54:00:24:c4:3f:4d:71:6d:51:5d:2d:da:a5:e8:04:
                    a8:0d:d8:c2:3b:0b:43:53:c3:d6:84:64:0f:0e:f5:
                    12:e4:79:b0:73:3e:d4:8f:88:f6:f9:58:01:96:19:
                    c4:33:ff:ee:d5:69:4c:c7:23:c9:b9:c0:ad:c2:3a:
                    9a:6c:7f:7e:21:89:06:a8:88:b0:b8:0a:f8:e0:9c:
                    70:88:1e:3b:c1:93:70:68:a5:24:2d:9c:e0:36:dc:
                    f2:31:97:9c:4a:4b:b8:34:8a:83:c2:68:1b:0e:57:
                    f7:c8:c6:bf:0f:80:98:0c:6c:37:63:34:28:16:42:
                    d6:1e:28:8f:d1:6a:e4:f3:e3:8a:72:08:1a:07:35:
                    d8:e3:fa:df:76:45:9e:88:71:2c:76:ef:04:9e:f5:
                    9b:c7:17:12:c8:7b:b8:8f:17:df:50:41:5d:8b:c2:
                    80:d0:0b:d9:38:01:f5:f5:b7:0b:26:55:7d:6f:eb:
                    49:11:d2:66:e3:af:2a:12:45:68:e2:75:42:05:b4:
                    ec:5b:1b:3e:e8:00:46:68:ff:95:44:4b:c5:3a:a6:
                    5e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B8:2F:1F:8F:F0:29:78:70:73:A3:D8:7E:DC:B8:AE:7C:54:CC:B3
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:64:07:3e:17:4f:9a:2c:1f:5a:9f:6d:71:f8:f5:48:f2:
         7b:15:b2:34:87:1b:82:aa:19:32:8e:33:eb:db:d0:4f:60:f2:
         7b:78:57:e3:dc:ba:3b:19:f8:d2:e2:a2:8e:1b:ae:15:d9:46:
         22:6b:58:f7:6e:85:1e:69:13:fc:10:26:8c:fb:4b:23:3c:62:
         65:ce:eb:f6:03:9c:44:9a:77:14:01:cf:63:3a:5a:d6:b1:8a:
         67:11:f3:f3:8b:cf:0d:5a:a2:27:aa:5b:9e:33:c5:9f:0a:7b:
         15:ed:60:df:44:e4:f2:1f:52:5c:02:56:4a:12:05:67:3b:6f:
         4a:f9:6b:7f:86:0d:4f:3e:10:01:82:65:b9:69:67:e0:02:21:
         e8:7d:d6:9f:14:8f:e5:48:b2:e2:66:1f:af:ea:1b:65:ac:4c:
         f6:ff:bd:b5:7a:6d:71:59:9c:2f:90:ec:f6:c4:b1:a9:0e:5c:
         26:81:41:7e:3b:41:c9:71:a5:1c:82:fc:32:b5:53:9d:79:19:
         b1:14:22:81:b5:99:27:af:c2:09:8b:81:42:60:d4:11:bc:29:
         a7:8e:1e:19:53:e8:64:66:36:03:50:95:bd:ee:5f:2a:e3:b1:
         42:4d:30:41:a6:5c:9b:02:a4:34:2c:d7:b1:b1:bf:c1:d8:72:
         33:66:63:87
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIURUBAFzhARJ4B9DPN5JBGxGm8LtMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMxMjAxMDg1MDQ0WhcNMjQxMTI5MDg1NTQ0
WjAzMTEwLwYDVQQDEyhCMkI4MkYxRjhGRjAyOTc4NzA3M0EzRDg3RURDQjhBRTdD
NTRDQ0IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd2OFf+RlUhx
J006i1xoa5wg/1zXl6jZRrA1d88oT4U1lqtzgK/Pi0J3fA1UACTEP01xbVFdLdql
6ASoDdjCOwtDU8PWhGQPDvUS5Hmwcz7Uj4j2+VgBlhnEM//u1WlMxyPJucCtwjqa
bH9+IYkGqIiwuAr44JxwiB47wZNwaKUkLZzgNtzyMZecSku4NIqDwmgbDlf3yMa/
D4CYDGw3YzQoFkLWHiiP0Wrk8+OKcggaBzXY4/rfdkWeiHEsdu8EnvWbxxcSyHu4
jxffUEFdi8KA0AvZOAH19bcLJlV9b+tJEdJm468qEkVo4nVCBbTsWxs+6ABGaP+V
REvFOqZeewIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLK4Lx+P8Cl4cHOj2H7cuK58
VMyzMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE0MzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7dMA0GCSqGSIb3DQEBCwUAA4IB
AQARsmQHPhdPmiwfWp9tcfj1SPJ7FbI0hxuCqhkyjjPr29BPYPJ7eFfj3Lo7GfjS
4qKOG64V2UYia1j3boUeaRP8ECaM+0sjPGJlzuv2A5xEmncUAc9jOlrWsYpnEfPz
i88NWqInqlueM8WfCnsV7WDfROTyH1JcAlZKEgVnO29K+Wt/hg1PPhABgmW5aWfg
AiHofdafFI/lSLLiZh+v6htlrEz2/721em1xWZwvkOz2xLGpDlwmgUF+O0HJcaUc
gvwytVOdeRmxFCKBtZknr8IJi4FCYNQRvCmnjh4ZU+hkZjYDUJW97l8q47FCTTBB
plybAqQ0LNexsb/B2HIzZmOH
-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org