Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          ikfyBKUYn76ZPmeCWV41cg0seBTxXOih/32HdGIIYxo=
Subject key identifier:   C6:3F:84:A6:55:F0:CE:5C:99:84:EE:98:E2:B5:8C:50:EC:4E:F0:60
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7C75881FE48A2D8C1EB9394D604AABBB7CBEF975
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
Signing time:             Tue 19 May 2026 15:30:47 +0000
ROA not before:           Tue 19 May 2026 15:25:47 +0000
ROA not after:            Tue 18 May 2027 15:30:47 +0000
asID:                     14618
IP address blocks:        23.95.142.0/24 maxlen: 24
                          23.95.162.0/24 maxlen: 24
                          64.50.161.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.183.0/24 maxlen: 24
                          67.210.104.0/24 maxlen: 24
                          192.227.203.0/24 maxlen: 24
                          209.200.231.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:75:88:1f:e4:8a:2d:8c:1e:b9:39:4d:60:4a:ab:bb:7c:be:f9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 19 15:25:47 2026 GMT
            Not After : May 18 15:30:47 2027 GMT
        Subject: CN=C63F84A655F0CE5C9984EE98E2B58C50EC4EF060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:b7:66:e3:58:7c:ba:de:96:cd:16:38:cd:
                    9c:e6:49:13:cf:ef:a6:8b:16:ce:16:ab:88:fa:05:
                    11:93:9e:25:04:3f:2d:f9:7f:11:c5:49:58:f9:f3:
                    9b:e2:39:ab:98:f4:2b:bd:c9:15:fa:63:57:2b:a2:
                    bf:47:85:b2:df:05:ae:52:05:fa:e3:fb:81:53:ed:
                    04:09:b7:53:29:dd:58:2a:d8:de:68:e4:20:3f:b2:
                    c0:ca:74:2e:b8:69:2c:69:62:8c:e8:e5:1c:d6:19:
                    1d:5e:47:36:ef:e2:27:fb:e3:e1:18:d8:ea:23:3e:
                    db:a0:53:66:91:b3:a3:46:19:78:28:8b:99:4d:11:
                    af:9f:87:c0:0c:64:a9:27:1f:f0:4b:93:2d:9d:50:
                    80:77:db:0e:e8:fa:48:13:01:4a:7c:02:64:49:62:
                    85:7a:bd:8a:bc:af:73:54:4b:93:3d:2e:c6:ce:f8:
                    5b:cc:72:4a:31:1b:5c:7b:47:b0:5e:5b:1d:1d:fb:
                    7f:e5:d2:70:9e:3e:d0:ca:6c:e0:ef:0d:38:5e:bd:
                    86:b4:39:b7:ce:0b:d2:e8:8a:4a:46:6c:47:99:79:
                    24:07:b1:fc:20:ee:03:10:6c:2d:0e:ed:31:52:cd:
                    ea:c0:f4:8c:6f:04:24:ff:dd:76:e6:1e:1c:7b:1a:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:84:A6:55:F0:CE:5C:99:84:EE:98:E2:B5:8C:50:EC:4E:F0:60
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  23.95.162.0/24
                  64.50.161.0/24
                  64.50.166.0/24
                  64.50.183.0/24
                  67.210.104.0/24
                  192.227.203.0/24
                  209.200.231.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:64:29:ba:ae:17:89:be:4a:8f:be:c3:c4:7d:4e:fa:85:76:
         40:43:f5:71:6d:c4:23:92:ac:4f:dd:c3:0a:d8:11:88:8d:da:
         35:5d:1c:a6:08:71:c4:92:de:bf:8a:d9:7d:28:05:9b:93:83:
         e0:e7:6c:b7:09:6a:11:c9:94:05:68:fb:0d:8a:9c:ee:1a:0d:
         6d:0a:0c:89:ed:07:a8:6c:d5:dd:2d:d5:71:2f:2e:35:fd:77:
         0d:69:fb:2c:a6:53:3d:97:ee:c6:1d:92:54:08:24:5e:d6:e9:
         c1:fb:7d:52:43:0c:60:46:4e:e6:ac:1b:ab:8f:21:6e:aa:b4:
         89:2f:da:0c:df:70:fc:83:a3:31:bb:07:b3:8e:61:1c:ee:05:
         c6:b9:b1:24:53:2d:cf:64:bd:a7:ff:a8:1f:96:83:54:7a:10:
         41:34:cb:96:37:a1:1c:5c:3f:b0:d0:eb:aa:66:6c:b3:af:00:
         f4:84:1c:06:ab:4d:4b:35:e1:40:84:bf:11:0f:78:fb:93:70:
         35:b0:bc:cf:46:69:c7:90:ea:53:67:ae:b0:2c:67:85:fb:34:
         99:3d:bd:05:bc:f4:ee:bb:bc:53:f3:94:3b:76:46:41:8c:54:
         69:38:58:a1:67:33:48:91:36:fe:d8:5d:ff:c4:ac:f3:1a:03:
         dc:73:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:38:54 2026 by rpki-client