Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: mOjp7ot+/x6GmjMheLWgtmv2XkQCQVyaCqJK2T/jzhw=
Subject key identifier: 40:FB:A0:56:94:08:C7:C3:61:98:AA:D8:E7:A5:B2:2C:DB:D3:20:82
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 48EF62B9F289E79FADD0905A5EA5FDC3FA15D614
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS14618.roa
Signing time: Thu 04 Jun 2026 15:58:52 +0000
ROA not before: Thu 04 Jun 2026 15:53:52 +0000
ROA not after: Thu 03 Jun 2027 15:58:52 +0000
asID: 14618
IP address blocks: 2a0a:6043::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ef:62:b9:f2:89:e7:9f:ad:d0:90:5a:5e:a5:fd:c3:fa:15:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:52 2026 GMT
Not After : Jun 3 15:58:52 2027 GMT
Subject: CN=40FBA0569408C7C36198AAD8E7A5B22CDBD32082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:e1:63:f7:78:60:c7:76:d2:cf:29:41:a1:
f5:1d:34:65:7b:cb:a3:88:12:95:33:b6:32:aa:91:
3e:46:d7:af:fc:f9:5a:44:a2:8b:48:22:f5:c0:47:
a4:fc:f3:4b:c7:33:6c:97:d4:09:49:11:89:f6:12:
96:dd:3b:f0:37:80:dc:3b:d7:fc:f6:c8:97:c6:77:
7b:69:7d:17:5f:a3:40:25:29:27:ab:6a:9d:fb:d1:
b1:dc:04:da:34:42:94:18:d7:47:9c:d2:7f:cb:09:
8c:ca:ea:47:ce:23:c3:c1:39:d9:ea:cf:c3:06:85:
48:8f:ec:40:7b:0d:57:65:7b:12:2d:70:eb:d2:68:
96:0e:fe:7c:f7:8a:44:5e:b3:b7:82:cd:56:4c:6f:
6f:3e:4f:63:f6:d6:5d:4b:2c:91:d2:69:46:23:ed:
bf:78:3a:88:c2:76:cf:9b:4b:f5:7d:76:aa:06:68:
64:21:fb:4e:cf:0b:e9:4f:37:7f:a8:33:2d:31:60:
dd:e9:6b:6e:31:76:ef:ca:1a:73:67:e8:b8:79:a0:
9d:8a:cd:b0:5b:65:9c:88:c1:e9:b1:01:e3:8f:bc:
95:6c:a8:53:6c:6c:7e:bb:d4:37:88:a4:26:34:c0:
db:eb:a1:f0:ee:2f:60:66:d1:77:f1:22:f0:18:fc:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:A0:56:94:08:C7:C3:61:98:AA:D8:E7:A5:B2:2C:DB:D3:20:82
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6043::/40
Signature Algorithm: sha256WithRSAEncryption
13:62:c3:7f:c3:eb:8e:18:2f:ae:f4:9c:cb:d7:6e:37:08:f5:
12:dd:61:7b:22:ff:d3:4b:ea:8b:30:ab:f4:53:62:f4:e9:4e:
76:3c:a4:ed:d1:c6:d5:88:b9:cb:ea:73:33:bd:81:b2:cc:0d:
ce:6c:d8:0f:dd:6b:7e:80:53:b9:fd:cf:63:62:1c:0d:9d:6f:
88:a4:db:f7:40:8b:bc:cc:c3:85:a3:ff:87:41:d5:a0:1f:68:
0a:34:22:17:24:2e:2a:38:ec:0f:a2:79:ed:10:c4:a2:cc:2a:
b4:86:8f:8e:82:7f:7d:45:34:e1:50:eb:cf:84:cc:12:fb:ed:
db:8c:85:64:cf:41:79:af:75:36:91:95:ba:30:a9:ff:12:f9:
6c:44:0c:c9:6c:bf:97:38:a4:85:61:2a:c3:48:5c:a0:39:41:
6b:37:cf:fe:f3:b1:bd:55:e9:98:b7:1e:b7:3b:13:b2:6d:60:
e5:eb:65:e3:45:75:76:2c:7c:25:ef:26:a6:45:2b:a9:7a:00:
7a:20:14:ce:1e:70:eb:6e:3f:9b:83:2f:86:5e:22:19:4d:d7:
71:eb:56:34:35:8c:49:83:79:26:6d:bd:e6:73:2d:c4:01:d3:
70:42:b6:b7:27:eb:ff:98:78:d6:b3:09:8d:c4:3c:64:89:77:
2b:5b:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:01 2026 by rpki-client