Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          v+AtpsNirlDY8I1cxR3AjgSZ5nUKa+cVmJDtMnHnQ4Y=
Subject key identifier:   A9:AC:D9:B0:C2:09:86:EB:5A:AF:6A:E1:B1:C6:30:2A:5E:98:33:D0
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       596B19CB42086163756F3DDA376F107CF1C479F1
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa
Signing time:             Sun 25 Oct 2026 07:27:14 +0000
ROA not before:           Sun 25 Oct 2026 07:22:14 +0000
ROA not after:            Sun 24 Oct 2027 07:27:14 +0000
asID:                     14618
IP address blocks:        104.234.13.0/24 maxlen: 24
                          104.234.40.0/24 maxlen: 24
                          104.234.137.0/24 maxlen: 24
                          104.234.141.0/24 maxlen: 24
                          104.234.143.0/24 maxlen: 24
                          104.234.160.0/24 maxlen: 24
                          104.234.175.0/24 maxlen: 24
                          104.234.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Nov 2026 00:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6b:19:cb:42:08:61:63:75:6f:3d:da:37:6f:10:7c:f1:c4:79:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 25 07:22:14 2026 GMT
            Not After : Oct 24 07:27:14 2027 GMT
        Subject: CN=A9ACD9B0C20986EB5AAF6AE1B1C6302A5E9833D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:f5:cb:f0:aa:68:37:c3:e2:6f:56:69:47:
                    64:11:35:52:da:cf:cf:ed:6e:89:23:34:92:c9:f9:
                    e2:ca:11:dd:1a:be:d1:e6:ed:fd:45:c6:98:1f:f8:
                    6b:46:c9:68:2f:30:7a:39:5c:a9:e2:70:42:01:6e:
                    6b:5c:e2:96:68:0c:68:40:00:9f:e9:cc:8e:e3:04:
                    b5:f4:02:96:0b:3a:b2:66:50:83:69:12:d7:21:2b:
                    8a:2d:66:2b:6a:ec:88:53:76:d9:ac:0e:28:47:88:
                    0c:1b:06:47:ff:5c:3a:50:d1:62:a1:1e:e2:2c:f3:
                    8f:c6:d8:e9:87:d8:bb:50:87:dc:53:31:a5:8f:80:
                    55:41:cf:0e:6c:83:c6:dd:a7:02:02:78:2d:be:62:
                    d7:55:88:85:0e:fa:6d:89:dc:96:1d:6b:3f:eb:b7:
                    67:1f:a6:51:68:80:41:5e:40:8b:2e:5d:b6:bd:e7:
                    19:c9:11:77:db:cc:f8:16:1f:36:75:25:0e:1a:b9:
                    fd:5e:bd:3e:87:7b:67:12:bc:f9:d0:90:1c:86:fd:
                    97:3f:85:81:d9:78:c7:f5:01:16:08:00:5e:39:86:
                    f6:4a:47:e6:99:f2:4d:e6:d3:d2:e5:24:64:94:c3:
                    79:dc:93:4a:e0:fe:73:3c:78:8b:b2:96:65:98:2d:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AC:D9:B0:C2:09:86:EB:5A:AF:6A:E1:B1:C6:30:2A:5E:98:33:D0
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.13.0/24
                  104.234.40.0/24
                  104.234.137.0/24
                  104.234.141.0/24
                  104.234.143.0/24
                  104.234.160.0/24
                  104.234.175.0/24
                  104.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2c:81:e9:69:d4:b8:c5:a5:41:6f:91:b4:bc:a8:da:6e:62:
         26:6c:5c:ec:40:42:8c:c9:39:20:46:85:66:50:04:6f:d6:02:
         de:e4:30:e9:19:fa:6e:a1:c9:d9:d2:86:10:a0:15:33:8d:24:
         60:24:20:c0:51:5e:35:6d:29:61:92:bf:0f:7f:1e:00:51:45:
         f8:72:37:f3:f5:fb:5c:46:84:f7:d5:16:b1:6e:75:d3:04:ab:
         da:b9:73:97:92:be:aa:09:59:d9:09:52:52:6c:81:7f:98:a3:
         1e:e4:2b:ac:a3:6a:cc:95:a9:d2:44:73:29:0c:69:27:9b:e6:
         20:cb:6d:80:bd:36:09:95:4c:43:e0:86:58:4d:28:e0:ca:76:
         a7:a7:1a:24:a2:e2:bb:53:36:6a:fb:35:64:52:6b:c9:5e:6e:
         35:5d:65:96:e1:ba:1b:96:22:a5:84:78:4c:1e:94:67:38:84:
         45:24:f3:a0:01:25:3d:3c:79:84:8c:92:8b:ef:34:8f:75:af:
         7a:81:5b:df:0e:a8:7d:fd:b5:ee:02:04:12:bd:a7:da:59:2a:
         a4:9d:88:08:20:38:81:85:9b:04:94:a5:36:e0:6a:b4:4e:65:
         20:c2:d1:8d:88:33:f3:76:24:2b:10:3d:d4:54:41:7d:cb:1a:
         24:2e:20:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 17:00:03 2026 by rpki-client