Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          HJz+hf1AQcVpq7HoYnEPX5udsEKxNvDbV4S5HG7UmfM=
Subject key identifier:   A2:37:D5:53:38:D6:0E:D5:42:9A:77:5A:5A:3A:0F:B9:57:56:FF:FD
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       51541F59FA11E7174F2B00CC546C71C68A9265ED
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
Signing time:             Wed 19 Aug 2026 02:33:29 +0000
ROA not before:           Wed 19 Aug 2026 02:28:29 +0000
ROA not after:            Wed 18 Aug 2027 02:33:29 +0000
asID:                     14618
IP address blocks:        23.95.142.0/24 maxlen: 24
                          23.95.162.0/24 maxlen: 24
                          23.226.138.0/24 maxlen: 24
                          23.226.139.0/24 maxlen: 24
                          64.50.161.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.183.0/24 maxlen: 24
                          67.210.104.0/24 maxlen: 24
                          67.210.121.0/24 maxlen: 24
                          209.200.231.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:54:1f:59:fa:11:e7:17:4f:2b:00:cc:54:6c:71:c6:8a:92:65:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 19 02:28:29 2026 GMT
            Not After : Aug 18 02:33:29 2027 GMT
        Subject: CN=A237D55338D60ED5429A775A5A3A0FB95756FFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:ed:1e:15:49:d8:bd:fc:0a:5f:68:3a:70:
                    db:d4:04:38:b7:8f:e1:91:fd:0b:a8:95:0c:5d:a6:
                    40:35:45:e3:aa:c4:cf:64:ab:ad:79:40:35:b0:40:
                    f7:8f:30:84:37:85:28:36:8a:20:03:3c:81:39:c3:
                    1f:b6:68:f2:50:98:15:30:96:57:c9:da:35:4c:14:
                    c4:6f:1a:de:c9:39:20:d6:ac:54:36:70:45:47:3e:
                    c6:45:4c:39:82:74:74:4f:16:75:8f:b1:0a:8e:b0:
                    a7:a0:04:4c:db:9f:40:81:43:eb:b8:ec:cf:55:0a:
                    df:77:55:9a:68:9d:95:20:23:d8:da:43:d3:d5:89:
                    61:21:96:e9:70:72:4b:7d:25:28:20:7b:75:c9:4a:
                    2c:dc:57:38:24:8b:bf:d7:06:8f:91:93:6e:3a:53:
                    3d:fe:3e:15:9d:64:ac:ca:b4:93:be:06:9d:cc:29:
                    a3:73:09:a7:45:5c:88:46:88:69:61:72:03:98:93:
                    22:e4:96:c2:e7:b5:a5:4b:47:bb:2c:76:d3:fe:15:
                    1f:05:74:26:cf:85:51:e5:36:06:99:43:74:0a:a2:
                    05:42:75:97:a4:e7:72:58:61:79:3c:f8:95:1d:a2:
                    e2:b8:9f:92:2b:53:4d:56:8a:57:8b:95:fd:34:8c:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:37:D5:53:38:D6:0E:D5:42:9A:77:5A:5A:3A:0F:B9:57:56:FF:FD
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  23.95.162.0/24
                  23.226.138.0/23
                  64.50.161.0/24
                  64.50.166.0/24
                  64.50.183.0/24
                  67.210.104.0/24
                  67.210.121.0/24
                  209.200.231.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:09:77:fd:8f:dd:68:cc:e1:f4:ca:d3:8b:28:ed:7d:f7:
         1a:c5:6b:f1:04:9c:26:56:ed:09:8d:d6:43:a1:c1:17:c6:01:
         12:f3:c4:dd:7d:59:61:7a:ab:61:bd:4b:2b:05:f3:43:2a:4d:
         30:4f:11:cc:c8:87:00:40:92:10:ab:56:0f:01:db:66:03:1e:
         18:1a:39:e6:f2:76:e2:82:ac:a9:11:fb:b0:41:1e:fb:41:9c:
         01:8a:56:34:c1:7a:10:46:30:e4:ea:44:87:58:56:39:d5:a3:
         45:d2:95:61:9c:a4:43:ae:c4:74:2f:d5:0e:f0:34:01:0c:02:
         63:05:64:1d:75:30:a4:67:2e:36:a6:17:78:7d:ac:b6:1f:08:
         b1:46:0f:78:e5:fc:8a:f0:3b:6e:8c:70:9b:cb:bd:e1:3d:0e:
         9a:9d:7e:ff:6c:a6:f4:88:0a:24:61:f4:73:30:7b:8d:f1:e4:
         df:2e:62:b7:0a:2f:66:54:6b:34:68:c3:c8:26:ee:29:22:70:
         7c:ee:10:36:88:41:d6:24:37:d2:75:90:32:91:15:0f:b0:01:
         81:11:47:c2:dc:f5:cf:25:fa:be:bd:07:32:31:b3:2e:09:11:
         57:03:04:04:81:4b:df:59:93:81:d5:c1:18:33:e8:0e:c9:da:
         e6:12:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:33:23 2026 by rpki-client