Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          OR+g+kClAigJiiOmWlLhc99h6++6AATluCzXeWrndSU=
Subject key identifier:   E6:FC:F1:EF:5F:40:51:59:48:40:FE:F9:41:BA:50:BA:55:98:5A:2E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       04839617C4C34AA80D46A71DD4C91007B8020BCD
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa
Signing time:             Fri 01 Nov 2024 09:49:02 +0000
ROA not before:           Fri 01 Nov 2024 09:44:02 +0000
ROA not after:            Fri 31 Oct 2025 09:49:02 +0000
asID:                     14315
IP address blocks:        157.254.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 06:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:83:96:17:c4:c3:4a:a8:0d:46:a7:1d:d4:c9:10:07:b8:02:0b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov  1 09:44:02 2024 GMT
            Not After : Oct 31 09:49:02 2025 GMT
        Subject: CN=E6FCF1EF5F4051594840FEF941BA50BA55985A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:ac:62:1d:62:4b:98:fb:ae:00:ce:f0:34:
                    43:8d:63:53:27:8c:01:f6:30:b2:cf:10:b0:66:dc:
                    e9:81:4c:a5:72:c1:2e:40:c2:41:6a:3e:28:94:b1:
                    1a:40:da:3d:14:d2:63:79:d5:97:99:ac:ba:82:20:
                    a9:16:67:3f:1a:bd:0c:af:9b:3a:18:1b:8d:b2:3b:
                    44:64:78:99:a3:cf:5e:72:86:f3:e4:e4:89:27:18:
                    b0:7a:04:30:0e:a3:da:39:ee:4a:07:25:be:24:d2:
                    49:2e:30:9d:08:2d:c9:66:78:b0:e9:5a:f4:85:2f:
                    cc:c3:3e:f7:40:83:3c:3e:3d:68:08:89:ed:84:8c:
                    ae:f3:29:02:c7:b3:5c:2a:2e:99:43:81:b1:ff:1a:
                    93:29:b5:24:2c:78:78:06:a6:f7:09:c7:58:e2:b0:
                    f2:6d:47:7b:3c:e8:86:9a:0d:86:d0:68:1e:2d:ea:
                    5b:20:ef:69:e2:1f:4b:92:3d:b2:0e:5f:f0:88:bd:
                    f1:4e:a0:f7:e0:f2:41:3f:11:eb:b9:cd:b6:a2:32:
                    88:7b:5c:65:5a:87:60:e1:87:75:32:8e:56:7b:56:
                    4c:d0:2c:ed:9f:fb:94:3d:ea:e4:96:04:00:a3:75:
                    aa:f5:77:5c:df:ce:05:87:79:98:3b:0e:b0:48:c5:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FC:F1:EF:5F:40:51:59:48:40:FE:F9:41:BA:50:BA:55:98:5A:2E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b9:49:6a:30:e7:49:5a:a2:14:a6:7b:b3:2a:80:5e:dd:47:
         ae:01:11:2a:97:25:04:cf:f4:58:b0:8a:98:25:5e:89:3c:86:
         35:c8:4a:55:0d:5d:e6:79:46:74:ed:d4:b3:02:3b:de:d4:a4:
         66:34:04:99:d7:75:d6:22:dc:7c:36:cd:54:2e:6a:09:ad:2e:
         b1:b9:93:dc:c6:dd:cc:9c:e8:9c:f3:39:29:0b:8a:b7:c4:7b:
         df:6a:5a:c2:5f:d0:61:95:f1:39:90:6b:f3:3b:92:3a:f2:05:
         a7:d7:a8:5e:fb:1b:ac:4c:ec:a1:6a:88:02:2f:2f:11:47:be:
         38:86:bc:ab:c9:82:8a:ea:26:81:9a:65:99:26:ea:6a:e4:83:
         25:95:d4:25:be:ce:ea:33:d4:a8:51:26:13:32:3b:9a:28:a0:
         ab:69:bd:43:2e:e9:49:0e:50:86:08:29:fa:25:9b:15:af:ab:
         ab:07:ff:ce:f2:a4:c6:0e:53:f9:af:47:4b:9a:d7:a9:09:4b:
         b0:12:6c:90:22:5f:fa:b5:a1:b5:09:ef:77:e5:87:f1:3f:2b:
         a5:f7:6c:2b:c9:4c:11:b9:e7:05:af:c2:81:3e:fb:74:55:c7:
         af:27:d1:57:cb:41:2b:04:10:fb:7a:92:fd:57:78:f0:0b:9d:
         eb:10:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:01 2024 by rpki-client on console-ams.rpki-client.org