Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          /3OQ3qbmP/zgMsYfFt6JownmI8ybRtxxSlpzEmQwBMo=
Subject key identifier:   63:AE:74:93:44:82:FE:72:4B:21:93:42:AD:C5:BA:B5:2E:F7:10:2B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7B516455299CEFA232F58FA0153C8E62550E5AC4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
Signing time:             Sat 26 Apr 2025 06:23:02 +0000
ROA not before:           Sat 26 Apr 2025 06:18:02 +0000
ROA not after:            Sat 25 Apr 2026 06:23:02 +0000
asID:                     14618
IP address blocks:        23.95.142.0/24 maxlen: 24
                          64.50.161.0/24 maxlen: 24
                          209.200.231.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:51:64:55:29:9c:ef:a2:32:f5:8f:a0:15:3c:8e:62:55:0e:5a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 26 06:18:02 2025 GMT
            Not After : Apr 25 06:23:02 2026 GMT
        Subject: CN=63AE74934482FE724B219342ADC5BAB52EF7102B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:67:1e:9c:84:18:76:2a:7f:5f:27:3b:2c:
                    f0:58:09:35:07:38:49:83:33:a2:cb:b0:77:09:e5:
                    f1:38:3c:b7:3d:31:d9:62:e3:49:4a:7b:e5:9f:be:
                    54:4d:74:5f:72:ae:a2:5f:19:84:e8:3d:e0:a9:b0:
                    85:8f:a1:1c:a3:97:fb:98:0a:4d:16:c9:e0:6f:7f:
                    aa:98:b0:fc:2e:f5:c2:a8:fa:07:d4:16:35:fd:70:
                    ca:ca:d8:cc:88:55:32:05:dd:6b:c7:1f:97:f3:7d:
                    a4:d7:0f:bc:41:21:6e:08:2b:8c:ac:e2:94:26:ee:
                    37:2d:a1:d2:a1:fa:3b:5b:22:60:1d:3c:31:10:f3:
                    db:3a:5b:97:c0:8d:04:7a:9e:cd:66:97:4e:77:c6:
                    7d:90:6f:eb:1f:12:79:1b:b8:22:46:2b:1b:c7:a7:
                    1b:73:74:96:cd:96:44:d5:c2:78:1f:57:bf:5c:ac:
                    3d:33:f8:ca:e1:49:f4:b9:28:7e:d3:79:16:f6:cb:
                    c7:6a:ab:81:51:8d:10:63:e8:b0:fd:e0:a5:d1:e4:
                    f2:b9:1f:a9:49:77:2d:1a:e2:41:85:ec:1b:76:93:
                    af:20:3d:26:3f:ae:c3:e6:36:b5:d1:a4:8a:1f:64:
                    e3:8e:4f:6f:b0:3f:57:61:a1:0a:87:88:77:d6:85:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AE:74:93:44:82:FE:72:4B:21:93:42:AD:C5:BA:B5:2E:F7:10:2B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  64.50.161.0/24
                  209.200.231.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:0f:6d:d5:61:4d:d2:f0:db:8d:77:2f:98:78:70:55:e5:7f:
         31:64:85:99:9b:e9:cf:44:30:10:e3:6d:09:fa:14:70:42:f7:
         1d:3a:ed:9d:ee:85:a6:3f:dc:9f:7d:24:af:b2:a6:79:56:4d:
         c9:ac:63:54:3d:04:fc:42:a4:01:9f:ba:40:7a:15:5c:cf:8a:
         02:bc:84:a1:dc:f9:df:6b:a3:0d:d7:7d:a9:ec:99:52:b3:7e:
         11:f1:3f:2e:9e:9e:ff:49:6f:7a:f6:3d:ef:79:b2:88:51:fe:
         30:6c:bc:60:d1:0c:38:5f:91:1e:ba:af:7c:fa:6f:92:89:43:
         4b:ac:28:02:69:5f:c2:bf:2c:19:6b:e2:f2:3c:65:9b:14:1e:
         ca:6b:db:62:bc:54:30:16:a9:bb:82:28:d0:b7:97:49:b9:51:
         0c:25:1b:15:f8:59:06:50:14:aa:64:1b:a5:fd:aa:63:d5:ce:
         7d:f3:f7:49:2b:7d:d6:5c:d3:f2:01:d8:dd:9d:0f:2b:40:87:
         06:3b:b2:4b:2b:45:65:95:d5:71:a8:1a:3c:0e:31:21:39:4b:
         b8:de:ef:d8:fd:08:70:42:aa:59:7a:6d:dc:b8:2a:dd:63:18:
         8b:5f:3d:56:0e:61:03:38:7b:0f:39:1f:40:03:1a:75:3e:c4:
         35:21:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:15:43 2025 by rpki-client