Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          j0yHc216l8/U2Yn9R7BwG5Lz9vu3hiRh7KYx4ge5DI4=
Subject key identifier:   77:CB:D6:F2:71:9D:C5:62:B3:C9:ED:BD:95:49:75:15:66:73:68:97
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1A93FEEC61ADD19DE6A6962C9EE6FD32F6BEF7D5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa
Signing time:             Fri 03 Oct 2025 10:30:38 +0000
ROA not before:           Fri 03 Oct 2025 10:25:38 +0000
ROA not after:            Fri 02 Oct 2026 10:30:38 +0000
asID:                     14315
IP address blocks:        157.254.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:93:fe:ec:61:ad:d1:9d:e6:a6:96:2c:9e:e6:fd:32:f6:be:f7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct  3 10:25:38 2025 GMT
            Not After : Oct  2 10:30:38 2026 GMT
        Subject: CN=77CBD6F2719DC562B3C9EDBD9549751566736897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:12:35:29:9a:72:79:c8:35:0b:59:68:ab:
                    a7:05:34:cb:54:d4:51:dd:f5:e4:5f:34:a5:d8:0f:
                    68:4f:f0:d2:70:5b:a0:68:19:27:84:12:45:e4:f4:
                    e6:5f:cb:a4:08:2e:48:e3:d4:36:97:64:47:29:59:
                    1c:64:35:cf:03:6e:4e:4a:ed:d9:be:99:82:0f:94:
                    89:07:14:d5:13:8b:0d:64:dd:16:26:2c:0b:bc:c7:
                    d0:2c:3a:2e:4a:b6:e1:91:36:3d:b4:44:af:99:74:
                    c9:b1:29:69:cc:ee:7e:ec:a1:7f:85:43:4c:35:ae:
                    79:ba:b0:4e:17:d4:30:e6:47:b1:b7:7f:a4:1e:37:
                    a8:bb:d7:c5:2a:7a:9f:65:05:44:86:a9:db:7a:1d:
                    d2:b7:da:19:6b:b3:0e:5d:2a:6c:8d:10:71:52:e2:
                    d0:81:32:fb:71:3a:8f:c0:49:a2:f9:4b:8b:4b:1e:
                    cb:8b:94:50:5f:04:52:a1:79:48:a8:f4:14:24:fe:
                    8b:f3:fc:59:02:3c:f0:25:d1:4b:43:88:09:9c:84:
                    33:21:ed:cc:c1:fe:54:96:08:e5:bb:30:80:34:18:
                    61:42:b2:cc:fb:9f:10:e9:37:b4:5d:58:41:5f:2d:
                    a5:56:50:3b:20:20:1f:88:1e:74:2e:24:4c:2a:b9:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CB:D6:F2:71:9D:C5:62:B3:C9:ED:BD:95:49:75:15:66:73:68:97
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:38:53:77:e0:5c:18:79:8d:34:7d:8f:a9:e3:83:6f:d3:d0:
         5b:c3:e4:65:e3:64:87:f7:34:5c:91:66:a9:e7:78:89:0a:91:
         27:a6:6a:0f:a7:04:06:20:59:0b:9f:06:c0:31:66:03:5f:01:
         ee:98:8e:61:2b:df:36:bd:a6:2e:f4:74:56:8c:88:d4:83:28:
         47:60:89:cb:fb:27:14:be:ab:58:26:9d:fa:a1:f6:59:d7:97:
         20:54:3a:0b:9d:f5:75:b9:f5:19:99:01:96:ca:48:f5:68:0e:
         9f:dd:06:14:6b:7f:4b:20:c5:d0:d3:2c:9f:9f:00:bf:85:29:
         e3:3b:b0:d7:8a:4f:1c:7b:f6:e3:37:df:31:c0:5b:d5:f8:39:
         6b:6a:9d:44:94:4b:e1:08:37:38:ba:cc:6e:b4:00:36:27:fb:
         87:0b:e6:ce:e3:81:7d:88:af:aa:92:12:4e:6e:25:7d:8c:ac:
         61:a6:00:3a:c7:8a:28:cc:2a:bf:a5:98:d9:c2:52:12:9d:ba:
         1d:b8:03:08:52:08:10:44:13:6a:61:5b:bc:06:f9:db:23:41:
         c7:aa:ea:01:4a:d2:94:4c:e3:c2:12:23:bb:2f:4b:48:73:b6:
         b9:30:1a:2e:70:96:74:18:a7:c3:52:f0:fe:12:32:a8:fb:5b:
         69:ae:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:41 2025 by rpki-client