Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          p+s27dax+Pnd+fkvzNI7TP9ERmwmoUEoX2Xi342gRAw=
Subject key identifier:   28:D1:9A:0E:4B:87:9C:2B:A5:4F:5B:67:AC:96:A6:76:31:C9:70:D3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       45A79F443E714C5CA1EE252FDD92FE8EDD3AB37A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14315.roa
Signing time:             Wed 16 Apr 2025 03:02:50 +0000
ROA not before:           Wed 16 Apr 2025 02:57:50 +0000
ROA not after:            Wed 15 Apr 2026 03:02:50 +0000
asID:                     14315
IP address blocks:        104.234.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a7:9f:44:3e:71:4c:5c:a1:ee:25:2f:dd:92:fe:8e:dd:3a:b3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 16 02:57:50 2025 GMT
            Not After : Apr 15 03:02:50 2026 GMT
        Subject: CN=28D19A0E4B879C2BA54F5B67AC96A67631C970D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2d:36:7f:94:5b:4d:61:7c:e2:06:c0:21:67:
                    7e:ef:a2:81:8e:ef:66:a2:3d:c4:da:b4:fd:2c:9f:
                    4c:4c:b3:61:79:ed:8d:e7:c1:94:72:ec:f5:18:bb:
                    c9:de:76:5b:ac:85:9a:6f:e5:43:a2:76:6c:83:23:
                    92:f1:ef:12:25:64:c8:05:f4:49:7c:26:42:f0:00:
                    5f:e6:30:e7:b3:07:85:85:ef:2e:4b:84:37:7f:3a:
                    48:3a:b5:7d:8a:e9:2b:c4:c9:07:38:30:27:62:c8:
                    f7:e9:08:e6:78:21:31:9a:09:d7:14:83:09:36:df:
                    8e:fb:36:a8:6a:34:1a:e4:20:34:1c:bd:36:86:ca:
                    e9:d1:0f:3f:db:7d:6a:f7:3d:53:44:c6:c4:63:c8:
                    30:9b:87:6a:93:35:b5:57:3c:60:23:6c:e3:df:70:
                    31:7f:be:99:e0:f7:67:33:47:63:13:00:07:17:88:
                    84:dd:9f:6a:35:ad:02:de:ce:06:f5:12:53:75:12:
                    e7:57:28:30:d5:92:07:3d:b0:e9:de:3b:b7:bf:01:
                    1d:9b:04:9c:b7:1f:62:14:e2:cd:f3:07:28:41:95:
                    1f:4b:2a:2d:1b:d0:78:60:4c:e4:ef:97:46:60:5a:
                    b3:a1:90:00:ab:7e:8f:6f:0a:5f:2f:12:a5:57:63:
                    f0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D1:9A:0E:4B:87:9C:2B:A5:4F:5B:67:AC:96:A6:76:31:C9:70:D3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:5f:f3:a1:58:0c:38:7e:4b:c8:7b:9f:d4:19:60:30:66:
         9a:d6:6f:6f:9a:85:c6:da:a6:d4:ca:2b:a5:b8:3c:f8:f0:b8:
         fb:5f:66:09:99:5c:49:f5:e9:98:16:e4:47:17:70:c8:56:84:
         91:ac:63:8d:94:3d:0c:cf:38:63:44:17:d1:84:88:e8:49:12:
         31:77:23:ad:8d:ed:59:92:3b:23:0d:f7:10:44:b4:a5:ae:09:
         fd:4f:76:60:48:af:ea:96:a0:d6:c8:09:58:f6:7d:16:b7:1d:
         b8:2e:6c:4e:bf:39:04:dc:06:52:66:a9:77:de:b5:0b:18:c1:
         cb:e7:12:56:b9:6a:f1:cc:c9:25:e1:9b:99:bf:d0:aa:58:a4:
         84:af:00:3f:e2:7f:23:32:72:6a:10:c5:d4:cc:26:f7:0a:5d:
         b7:df:7b:f4:0e:71:fa:fb:07:10:d4:23:5d:b8:17:3e:b5:49:
         ef:4b:87:bb:76:52:0a:2b:b0:09:ca:d4:98:22:b4:5d:41:c7:
         3f:63:3a:c3:df:04:a2:3e:17:04:fe:59:33:6f:65:8b:c4:54:
         58:b8:38:36:53:89:1f:42:a3:e8:23:95:ad:ed:c9:cc:41:11:
         3b:aa:c2:4f:98:1e:02:ea:95:d3:98:d3:da:e1:c3:5f:af:71:
         b7:45:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:53 2025 by rpki-client