Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          C+XqpxCKKEZJWK+5wRJZcv8Dis3BfhW5kh86OwwReRE=
Subject key identifier:   B0:C8:E4:8D:5E:A1:DF:55:E0:F6:75:BF:9E:14:60:12:1C:F5:6F:C0
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       144FB2630F57981CBF8F4ADB5E39C782212C370C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
Signing time:             Tue 29 Jul 2025 22:41:08 +0000
ROA not before:           Tue 29 Jul 2025 22:36:08 +0000
ROA not after:            Tue 28 Jul 2026 22:41:08 +0000
asID:                     14618
IP address blocks:        40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 22:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4f:b2:63:0f:57:98:1c:bf:8f:4a:db:5e:39:c7:82:21:2c:37:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul 29 22:36:08 2025 GMT
            Not After : Jul 28 22:41:08 2026 GMT
        Subject: CN=B0C8E48D5EA1DF55E0F675BF9E1460121CF56FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:3c:a2:11:81:04:62:1d:6c:ac:e3:ed:d9:
                    26:7f:4d:ea:d7:61:63:9d:95:bc:05:3c:ed:8e:4a:
                    7c:77:9b:c5:d6:22:c7:d0:00:67:e7:d8:ef:6c:71:
                    6d:bd:e2:84:2b:84:e3:af:b6:39:8e:9c:00:ec:a2:
                    b9:b7:2f:ed:b1:91:bc:db:84:dd:75:7a:d5:b5:b8:
                    85:56:2c:41:28:21:d5:2d:0e:b8:11:f8:b6:67:fd:
                    e7:b8:75:1f:bd:35:d0:5c:b6:89:dc:fe:32:b4:a1:
                    27:44:c1:c0:4e:05:77:28:dd:f2:63:58:02:e7:e8:
                    86:6b:fb:53:a7:ad:ea:9b:b0:ab:e2:5e:0c:ea:fd:
                    d0:cb:bc:03:a7:63:2e:a1:32:9a:a3:7a:5b:ad:ea:
                    0f:96:7d:dc:96:e3:33:09:6d:67:d2:67:d7:14:dc:
                    50:7b:e8:a3:e1:96:a8:ef:e1:1a:d1:32:19:9c:3a:
                    d9:eb:cc:82:63:c8:e6:8b:0a:f5:92:57:44:93:3b:
                    f3:44:e5:94:92:55:01:97:42:9a:42:57:3e:ab:63:
                    3c:40:bc:29:50:39:03:81:1f:ec:39:29:76:ee:dd:
                    8c:22:ab:c1:6a:1d:a3:47:62:eb:9b:7b:cc:d9:f4:
                    44:15:47:41:90:b7:b5:88:37:52:16:bd:d9:16:01:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:E4:8D:5E:A1:DF:55:E0:F6:75:BF:9E:14:60:12:1C:F5:6F:C0
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:c6:2a:0d:5f:03:83:10:8e:b5:38:99:63:2c:e2:36:92:e1:
         53:e6:4f:51:20:9f:c9:7a:96:37:0d:71:c5:5e:29:66:d2:5b:
         1d:b7:e6:96:61:b4:6d:f6:9c:c4:84:1d:90:f0:6a:41:1a:bb:
         4c:85:b1:3d:53:3b:18:96:b8:8e:b7:bf:00:c8:54:78:30:49:
         1c:07:09:01:f2:c4:ef:cf:e0:cb:3e:bc:ed:c2:e2:b1:93:bd:
         26:8b:0a:61:57:34:fd:0f:db:e1:5d:64:f3:c9:4d:72:c5:bf:
         80:13:16:be:0c:25:bf:31:84:21:f5:4c:78:7d:d6:40:47:7e:
         1e:fd:11:fd:ca:74:13:ba:5f:b6:78:15:a2:78:82:64:7e:4c:
         47:18:1c:a2:68:92:c8:c0:a8:48:62:5a:8d:c1:14:dc:e8:a4:
         32:8c:c4:23:38:f0:ab:96:ae:11:bf:b5:5b:7a:8b:61:be:31:
         2f:56:6f:b8:42:6c:61:61:ce:05:d7:1d:b6:f1:03:36:41:d7:
         59:71:1e:cc:1d:3f:50:d2:29:e9:ef:2d:81:e1:9b:59:06:d0:
         f0:d5:be:0a:e9:1a:95:a0:c7:c7:44:4c:37:72:48:21:68:97:
         a5:37:f6:77:88:c7:e8:1e:34:5b:c0:2e:16:1a:88:d0:12:40:
         64:76:ab:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUFE+yYw9XmBy/j0rbXjnHgiEsNwwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNzI5MjIzNjA4WhcNMjYwNzI4MjI0MTA4
WjAzMTEwLwYDVQQDEyhCMEM4RTQ4RDVFQTFERjU1RTBGNjc1QkY5RTE0NjAxMjFD
RjU2RkMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG88ohGBBGId
bKzj7dkmf03q12FjnZW8BTztjkp8d5vF1iLH0ABn59jvbHFtveKEK4Tjr7Y5jpwA
7KK5ty/tsZG824TddXrVtbiFVixBKCHVLQ64Efi2Z/3nuHUfvTXQXLaJ3P4ytKEn
RMHATgV3KN3yY1gC5+iGa/tTp63qm7Cr4l4M6v3Qy7wDp2MuoTKao3pbreoPln3c
luMzCW1n0mfXFNxQe+ij4Zao7+Ea0TIZnDrZ68yCY8jmiwr1kldEkzvzROWUklUB
l0KaQlc+q2M8QLwpUDkDgR/sOSl27t2MIqvBah2jR2Lrm3vM2fREFUdBkLe1iDdS
Fr3ZFgGCbQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFLDI5I1eod9V4PZ1v54UYBIc
9W/AMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGKLcAAwQCKLdQMA0GCSqGSIb3DQEB
CwUAA4IBAQAJxioNXwODEI61OJljLOI2kuFT5k9RIJ/JepY3DXHFXilm0lsdt+aW
YbRt9pzEhB2Q8GpBGrtMhbE9UzsYlriOt78AyFR4MEkcBwkB8sTvz+DLPrztwuKx
k70miwphVzT9D9vhXWTzyU1yxb+AExa+DCW/MYQh9Ux4fdZAR34e/RH9ynQTul+2
eBWieIJkfkxHGByiaJLIwKhIYlqNwRTc6KQyjMQjOPCrlq4Rv7VbeothvjEvVm+4
QmxhYc4F1x228QM2QddZcR7MHT9Q0inp7y2B4ZtZBtDw1b4K6RqVoMfHREw3ckgh
aJelN/Z3iMfoHjRbwC4WGojQEkBkdqt/
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:29 2025 by rpki-client