Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          PgW4qA8/6fuNcNI4KXg2EF/tAgMs2nhqi+gunhkCft8=
Subject key identifier:   CF:F7:E3:93:CD:26:B0:88:96:63:35:6B:8D:DC:3C:8E:96:E9:6F:BD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4E604DAABD14D8D50656210F54260AF242E4F7F3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
Signing time:             Sat 11 Apr 2026 20:50:34 +0000
ROA not before:           Sat 11 Apr 2026 20:45:34 +0000
ROA not after:            Sat 10 Apr 2027 20:50:34 +0000
asID:                     14618
IP address blocks:        23.95.142.0/24 maxlen: 24
                          23.95.162.0/24 maxlen: 24
                          64.50.161.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.183.0/24 maxlen: 24
                          67.210.104.0/24 maxlen: 24
                          209.200.231.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:60:4d:aa:bd:14:d8:d5:06:56:21:0f:54:26:0a:f2:42:e4:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 11 20:45:34 2026 GMT
            Not After : Apr 10 20:50:34 2027 GMT
        Subject: CN=CFF7E393CD26B0889663356B8DDC3C8E96E96FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:6d:b4:3c:19:ca:ea:87:b2:fd:3c:e6:3f:
                    fe:a2:c4:28:cd:74:12:c3:11:98:79:a3:dc:61:5c:
                    56:fc:0b:88:d9:05:ce:1b:25:3e:5d:e1:a9:9a:8e:
                    b7:ab:e6:dc:56:e0:a3:f6:b2:e2:a2:03:eb:4e:43:
                    e4:9c:22:5e:3c:08:d0:54:37:69:da:e6:6d:07:cd:
                    5a:78:ff:97:0f:a2:9b:73:73:d2:8f:a3:33:cf:88:
                    44:63:76:0d:66:d9:e2:b7:89:a2:7d:60:21:d9:26:
                    01:f8:47:cf:3f:2f:51:4c:40:81:ef:1d:0f:f5:be:
                    df:bb:c4:a8:34:5b:7f:fd:4d:1a:9c:4b:0d:fd:11:
                    88:46:01:6d:3f:45:3a:8b:13:00:95:f5:15:43:48:
                    de:35:00:ed:69:1b:1f:e4:f4:76:dc:6b:dc:76:02:
                    df:39:3c:93:5a:cf:1c:1b:c8:15:2f:d7:ed:e1:90:
                    d7:71:3c:31:b4:34:32:01:32:a2:91:af:ec:12:e1:
                    72:8d:ca:74:29:a1:a7:19:5c:39:4b:ee:f9:34:98:
                    36:37:4f:82:3d:fd:00:b2:6c:2a:7e:e4:0b:80:c7:
                    bf:5a:64:06:c5:5f:9f:9d:35:3a:48:0f:cf:08:69:
                    5c:fd:f1:5a:9f:52:41:e0:34:dd:34:f8:5e:c6:b5:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F7:E3:93:CD:26:B0:88:96:63:35:6B:8D:DC:3C:8E:96:E9:6F:BD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  23.95.162.0/24
                  64.50.161.0/24
                  64.50.166.0/24
                  64.50.183.0/24
                  67.210.104.0/24
                  209.200.231.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:8b:77:7a:45:5e:6c:5f:81:48:26:5b:ca:01:b6:81:cb:8c:
         04:3c:62:07:7b:c2:51:3f:42:9c:b1:57:66:be:51:80:23:7b:
         61:30:19:5e:ec:22:f5:5f:6d:0d:0a:3e:52:cd:38:7d:42:4a:
         be:31:bf:b8:e8:20:4b:c7:de:6e:35:d2:75:19:b1:9a:e2:ce:
         c9:c3:fc:b9:ef:41:8c:1b:08:aa:35:51:e8:2a:cd:af:b7:93:
         5c:63:ad:a8:98:28:39:7b:2e:97:e5:59:a1:c8:99:86:c8:60:
         c5:b5:2e:70:b3:67:4d:7e:7d:a9:a4:39:f2:f0:47:b9:6a:ed:
         f4:93:47:87:dc:30:cd:34:bb:d4:7f:42:62:c0:2a:e2:8b:ea:
         78:e1:6c:55:81:b3:49:18:06:b6:72:70:bf:fd:bb:df:32:55:
         7d:22:1c:da:d9:09:3a:22:cc:bf:f8:fb:3b:51:4d:ef:3a:70:
         52:b8:ab:4f:94:ac:cc:b3:a1:ab:66:a5:6b:42:30:4a:a1:d0:
         c8:1e:4c:ed:62:cf:0b:6d:9d:11:2f:01:a7:91:5e:97:4e:89:
         b0:d4:3b:05:72:54:6a:4b:75:c4:35:c2:b2:8a:c3:83:ec:47:
         fb:97:a2:60:78:2a:82:65:cb:18:53:43:d3:12:bb:66:df:7b:
         76:f3:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:38:28 2026 by rpki-client