Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          my4h3gmWz84WfxYu50Z+fWhLwb2R64rDcZEsNv64G2k=
Subject key identifier:   50:F2:56:9F:96:29:F2:C1:D8:7E:8F:7B:2E:F0:51:5E:93:48:7A:DD
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       32A6126C6E6133775267EA31276B058EE711C15F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa
Signing time:             Tue 08 Jul 2025 00:29:44 +0000
ROA not before:           Tue 08 Jul 2025 00:24:44 +0000
ROA not after:            Tue 07 Jul 2026 00:29:44 +0000
asID:                     14618
IP address blocks:        140.99.12.0/24 maxlen: 24
                          140.99.50.0/24 maxlen: 24
                          140.99.51.0/24 maxlen: 24
                          140.99.52.0/24 maxlen: 24
                          140.99.53.0/24 maxlen: 24
                          140.99.54.0/24 maxlen: 24
                          140.99.55.0/24 maxlen: 24
                          140.99.56.0/24 maxlen: 24
                          140.99.57.0/24 maxlen: 24
                          140.99.61.0/24 maxlen: 24
                          140.99.63.0/24 maxlen: 24
                          140.99.64.0/24 maxlen: 24
                          140.99.65.0/24 maxlen: 24
                          140.99.66.0/24 maxlen: 24
                          140.99.67.0/24 maxlen: 24
                          140.99.70.0/24 maxlen: 24
                          140.99.71.0/24 maxlen: 24
                          140.99.72.0/24 maxlen: 24
                          140.99.73.0/24 maxlen: 24
                          140.99.74.0/24 maxlen: 24
                          140.99.75.0/24 maxlen: 24
                          140.99.76.0/24 maxlen: 24
                          140.99.221.0/24 maxlen: 24
                          140.99.232.0/24 maxlen: 24
                          140.99.234.0/24 maxlen: 24
                          140.99.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 06:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a6:12:6c:6e:61:33:77:52:67:ea:31:27:6b:05:8e:e7:11:c1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul  8 00:24:44 2025 GMT
            Not After : Jul  7 00:29:44 2026 GMT
        Subject: CN=50F2569F9629F2C1D87E8F7B2EF0515E93487ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:05:61:65:66:0d:1e:b0:7a:22:e3:f1:93:
                    b4:d8:44:41:07:df:e2:b1:de:0f:f7:20:66:fe:a8:
                    dd:20:2e:8d:f4:c6:0d:d3:85:1b:90:df:08:29:b4:
                    a4:ec:28:b8:fb:ea:18:90:b2:b7:12:8b:30:69:55:
                    7f:38:0b:9d:ab:b9:f8:a8:0c:1d:80:7d:fc:0e:d9:
                    65:d4:0f:ec:5e:9f:d1:52:2d:28:83:6d:a1:2d:1c:
                    08:34:6a:c7:4c:1a:f3:20:d0:e6:e1:7a:1d:5b:3c:
                    39:e4:59:8a:96:73:11:d0:66:69:19:72:0c:6f:01:
                    27:75:62:90:7a:88:ae:c4:d5:2c:19:66:34:bd:89:
                    b9:5e:06:66:6a:d1:6e:a0:cb:8f:67:f2:7c:07:d7:
                    2e:14:7f:98:1d:b5:be:1c:3f:11:12:5a:46:2d:92:
                    0f:d6:b1:f4:80:80:a1:21:f0:85:1c:2e:6e:c6:cc:
                    8f:17:40:12:ad:40:ec:b3:92:b5:f7:89:ba:2b:83:
                    b4:a2:98:f4:70:2e:3e:61:38:a2:1d:f9:02:70:77:
                    7b:c8:34:1b:d4:f7:74:cc:26:2b:d5:ab:6a:e1:6d:
                    50:72:0e:ae:4f:68:33:89:10:2f:c9:61:d3:53:b8:
                    31:f2:01:f3:75:6c:e1:f0:01:20:b7:cf:b4:46:69:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F2:56:9F:96:29:F2:C1:D8:7E:8F:7B:2E:F0:51:5E:93:48:7A:DD
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.12.0/24
                  140.99.50.0-140.99.57.255
                  140.99.61.0/24
                  140.99.63.0-140.99.67.255
                  140.99.70.0-140.99.76.255
                  140.99.221.0/24
                  140.99.232.0/24
                  140.99.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:8f:96:d2:03:8c:5b:79:6f:01:6b:96:e7:5c:f3:a0:6a:c9:
         9d:eb:a4:0c:31:a1:d9:7e:3c:5b:dd:16:c8:4d:b4:2b:44:3e:
         ec:bf:a7:13:ff:5d:10:e3:09:c8:14:d5:32:88:1b:ac:26:e7:
         ac:e0:15:cd:42:41:ce:1d:b6:9e:1a:0d:e0:1f:9b:3d:fa:18:
         64:47:a5:48:78:a4:61:b4:16:3a:ac:06:bb:7b:b5:88:90:43:
         cd:3d:7b:c9:61:3b:57:59:63:87:da:d4:21:25:1d:d7:ab:09:
         bf:ac:c7:84:5e:14:cc:c6:64:9d:f0:33:9c:79:7f:91:d3:8f:
         33:de:80:a4:f8:a0:93:47:4a:9c:98:62:af:c1:1a:bd:4f:29:
         f1:11:1f:fc:d7:62:24:e8:3b:6d:e2:9f:d9:24:55:e9:62:d3:
         13:96:c8:33:87:cb:df:80:b8:c7:84:7a:46:44:fa:b8:e8:9a:
         4d:aa:70:27:96:23:8c:5f:76:50:19:5b:ae:18:d3:28:96:0d:
         45:bb:ec:ef:5c:29:fd:39:f1:d6:b4:f2:c6:2e:ca:24:7d:cb:
         24:e4:ae:a8:d7:b1:3c:ab:42:e3:81:98:56:ad:2a:0b:37:0f:
         53:6d:d2:3d:7a:47:28:87:af:c3:f8:48:d8:42:84:2c:e7:42:
         0c:3a:06:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:34 2025 by rpki-client