Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          os8PgGUBk+m+ZNdeWcPnun/GFwDV87BDL7KmmJYOYtM=
Subject key identifier:   01:56:7F:45:6D:81:13:E1:23:D8:08:8C:14:F6:31:02:90:2C:10:A5
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6DC4822A83188FF36FD054270CCB27F502389943
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
Signing time:             Wed 05 Nov 2025 04:23:14 +0000
ROA not before:           Wed 05 Nov 2025 04:18:14 +0000
ROA not after:            Wed 04 Nov 2026 04:23:14 +0000
asID:                     14618
IP address blocks:        40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
                          40.183.100.0/24 maxlen: 24
                          40.183.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:82:2a:83:18:8f:f3:6f:d0:54:27:0c:cb:27:f5:02:38:99:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov  5 04:18:14 2025 GMT
            Not After : Nov  4 04:23:14 2026 GMT
        Subject: CN=01567F456D8113E123D8088C14F63102902C10A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:72:4f:02:cf:b6:f5:8d:54:e0:bf:d0:e9:
                    11:de:e5:2f:13:0e:16:fa:89:ae:65:ac:dd:87:13:
                    20:fe:dc:19:37:2a:79:e3:12:83:ae:9e:5f:54:47:
                    fb:50:47:14:71:be:83:1d:3a:e3:98:90:6a:c4:0e:
                    54:ac:b8:bf:41:99:0d:0a:8c:6f:01:e1:1e:b1:c2:
                    85:aa:95:cf:29:1e:b4:a9:fd:9b:d2:cd:2a:a9:01:
                    50:ea:bf:31:63:30:c8:70:cd:5c:d2:cc:8a:66:28:
                    51:00:94:c0:27:86:4d:7b:bf:f3:dc:6f:98:b3:e0:
                    39:0f:23:a7:04:5d:26:59:18:61:36:69:08:91:57:
                    68:66:bd:a0:31:2f:d2:e0:29:58:10:37:01:7c:e1:
                    e7:ca:a2:8e:8c:af:3e:0e:63:e7:2d:ad:41:1c:b7:
                    cc:74:fa:3e:ee:da:c5:ac:c5:c6:a3:4e:15:32:df:
                    13:aa:c6:37:44:b8:0a:aa:ea:ad:ad:0a:04:c3:ef:
                    fd:7d:82:29:9b:ac:99:62:a5:9a:e7:f7:5c:c3:69:
                    ae:b9:77:22:ea:41:e2:74:f3:37:b7:7f:31:7e:da:
                    8b:eb:48:f6:1f:ef:a1:21:0b:65:83:48:18:c9:86:
                    27:e1:5d:e1:df:e0:37:84:09:13:5c:10:e6:9b:1f:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:56:7F:45:6D:81:13:E1:23:D8:08:8C:14:F6:31:02:90:2C:10:A5
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18
                  40.183.80.0/22
                  40.183.100.0/24
                  40.183.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:d2:b1:ca:e0:a5:d1:c7:99:37:f1:16:30:33:a6:0f:26:
         21:5f:fb:0a:93:d1:ac:57:fa:5e:21:2d:e7:fb:dd:9d:8c:9e:
         1a:66:32:c5:5a:76:22:4f:30:a2:5e:eb:d4:6c:02:15:56:8d:
         da:57:fc:fa:fd:36:c6:aa:e4:17:a2:21:50:3b:55:ad:89:be:
         25:17:51:ef:6d:12:b5:1f:17:24:1f:73:c4:48:d1:31:65:13:
         ff:27:e9:f7:1d:0b:73:75:6d:03:03:bc:54:e2:c2:7f:db:10:
         27:a9:71:4c:6b:2f:0c:ce:70:ab:11:78:5b:52:06:8b:4c:ef:
         d6:e5:08:52:6b:88:23:5f:5a:4f:29:9d:0c:f3:ef:0c:b8:3b:
         5c:03:97:dc:2e:78:84:12:82:b5:57:56:31:89:1e:b0:28:11:
         c3:08:1f:e0:d2:67:e2:18:34:01:a5:1f:fa:0d:ac:90:e7:c6:
         b3:ec:f8:c5:bf:a3:3b:d7:fe:ef:fe:da:8e:a3:a5:01:d0:a7:
         f3:da:41:b5:52:b7:0d:d9:71:b5:60:c2:b7:e4:7f:46:c9:0a:
         9d:3a:ba:89:be:c8:ca:68:d3:c9:20:8b:5e:34:7b:1f:b4:c7:
         c1:4e:b7:09:78:32:9c:e9:72:77:9c:c3:53:ac:26:11:5f:ed:
         5c:35:7d:4d
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUbcSCKoMYj/Nv0FQnDMsn9QI4mUMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMTA1MDQxODE0WhcNMjYxMTA0MDQyMzE0
WjAzMTEwLwYDVQQDEygwMTU2N0Y0NTZEODExM0UxMjNEODA4OEMxNEY2MzEwMjkw
MkMxMEE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQZyTwLPtvWN
VOC/0OkR3uUvEw4W+omuZazdhxMg/twZNyp54xKDrp5fVEf7UEcUcb6DHTrjmJBq
xA5UrLi/QZkNCoxvAeEescKFqpXPKR60qf2b0s0qqQFQ6r8xYzDIcM1c0syKZihR
AJTAJ4ZNe7/z3G+Ys+A5DyOnBF0mWRhhNmkIkVdoZr2gMS/S4ClYEDcBfOHnyqKO
jK8+DmPnLa1BHLfMdPo+7trFrMXGo04VMt8TqsY3RLgKquqtrQoEw+/9fYIpm6yZ
YqWa5/dcw2muuXci6kHidPM3t38xftqL60j2H++hIQtlg0gYyYYn4V3h3+A3hAkT
XBDmmx9F/QIDAQABo4ICkDCCAowwHQYDVR0OBBYEFAFWf0VtgRPhI9gIjBT2MQKQ
LBClMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQGKLcAAwQCKLdQAwQAKLdkAwQAKLd8
MA0GCSqGSIb3DQEBCwUAA4IBAQA1ytKxyuCl0ceZN/EWMDOmDyYhX/sKk9GsV/pe
IS3n+92djJ4aZjLFWnYiTzCiXuvUbAIVVo3aV/z6/TbGquQXoiFQO1Wtib4lF1Hv
bRK1HxckH3PESNExZRP/J+n3HQtzdW0DA7xU4sJ/2xAnqXFMay8MznCrEXhbUgaL
TO/W5QhSa4gjX1pPKZ0M8+8MuDtcA5fcLniEEoK1V1YxiR6wKBHDCB/g0mfiGDQB
pR/6DayQ58az7PjFv6M71/7v/tqOo6UB0Kfz2kG1UrcN2XG1YMK35H9GyQqdOrqJ
vsjKaNPJIIteNHsftMfBTrcJeDKc6XJ3nMNTrCYRX+1cNX1N
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:38 2025 by rpki-client