Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          EH2/gmqfVHvu1ofBKlOW8UxfvTkZ8evuSUtFDCh+zZ4=
Subject key identifier:   6F:66:3F:B2:BF:5D:0A:17:8B:52:47:DE:0D:C4:98:D5:81:63:C1:F6
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       03F8566FE9B4E03D35A09AFA45A607B021A70108
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
Signing time:             Mon 12 Oct 2026 00:07:02 +0000
ROA not before:           Mon 12 Oct 2026 00:02:02 +0000
ROA not after:            Mon 11 Oct 2027 00:07:02 +0000
asID:                     14618
IP address blocks:        40.27.16.0/23 maxlen: 24
                          40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
                          40.183.100.0/24 maxlen: 24
                          40.223.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f8:56:6f:e9:b4:e0:3d:35:a0:9a:fa:45:a6:07:b0:21:a7:01:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct 12 00:02:02 2026 GMT
            Not After : Oct 11 00:07:02 2027 GMT
        Subject: CN=6F663FB2BF5D0A178B5247DE0DC498D58163C1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:15:cc:f5:c9:0e:73:3f:ca:9e:0f:d7:5a:
                    a0:83:25:0b:77:d2:09:3d:c3:59:6d:4a:54:05:24:
                    16:66:d9:b4:ae:d3:18:f4:c7:87:63:7e:e4:1c:bb:
                    97:27:a9:a4:63:63:2c:22:24:b8:4c:52:8d:7b:fa:
                    d4:9f:79:80:23:6b:c9:4f:62:72:68:9c:bb:db:c0:
                    7c:87:a5:4c:58:44:57:15:5c:e8:3c:e6:b3:33:a8:
                    11:15:b6:f0:9f:55:31:4b:d4:ba:6a:a0:23:8c:7a:
                    8b:7a:c5:b7:4d:bd:96:7f:22:e7:e9:d7:90:cc:09:
                    2a:63:84:90:98:93:3a:e8:8b:2f:19:9e:3f:3e:4e:
                    d8:c5:3c:ec:11:1d:80:dd:12:cc:bd:e1:35:c2:1c:
                    f0:08:21:06:4c:de:d4:31:3b:69:21:5d:68:bd:68:
                    cd:3d:94:11:f3:53:34:55:26:94:6f:39:1f:f8:80:
                    56:80:cd:b9:53:d8:61:bf:c2:e2:8c:88:35:82:22:
                    58:c5:96:a9:82:e1:7c:f0:45:d2:d7:e8:f4:43:b6:
                    c6:47:f5:7e:9d:fe:a4:04:dc:30:65:2b:b9:5e:c2:
                    43:8a:b3:1d:5b:c7:b5:a4:b6:ac:f3:bd:32:41:dd:
                    50:62:18:df:09:14:0f:d7:e9:3e:5c:43:ab:47:51:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:3F:B2:BF:5D:0A:17:8B:52:47:DE:0D:C4:98:D5:81:63:C1:F6
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.16.0/23
                  40.183.0.0/18
                  40.183.80.0/22
                  40.183.100.0/24
                  40.223.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:f1:c8:f9:54:a6:d4:fc:aa:d3:2a:5e:80:80:82:99:17:
         6e:57:68:ca:48:85:e7:57:53:0a:23:0a:f5:18:0d:10:0c:ca:
         58:34:6e:3f:b1:73:32:12:33:b2:8c:2f:9e:e9:a4:6d:d3:9f:
         89:3a:9b:0a:11:73:a9:69:d8:c1:cf:a0:d6:09:3a:a9:4a:7f:
         bb:26:a1:1f:bb:fe:d8:60:a2:81:ca:50:10:7a:34:33:e6:49:
         4e:0d:0b:68:5e:76:e6:9f:e6:fd:65:be:ff:c0:ab:a1:eb:88:
         05:c1:f4:b6:e6:6a:e4:90:fc:77:08:f2:da:75:ba:d6:f8:61:
         8c:40:6c:10:87:41:b0:43:83:34:75:ab:c4:25:1c:7f:00:e3:
         c1:6a:05:73:06:df:1d:42:f0:0c:a8:f6:f5:4c:36:38:8d:81:
         d0:85:73:9a:b6:c8:d5:1f:53:ad:09:91:5a:5a:49:4c:b4:d8:
         0a:63:d9:67:8a:e7:07:92:b2:62:e8:fb:86:f9:dc:8c:23:d0:
         ad:a0:dc:98:71:61:3f:15:c7:e1:b1:16:a1:69:0a:f0:17:4b:
         76:47:1f:b2:eb:52:a3:d0:ab:94:75:bf:c3:cb:fe:c7:f1:33:
         0f:5d:5a:95:b2:3f:5b:51:74:81:9c:59:d7:f5:00:24:1c:04:
         2b:de:14:e9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIUA/hWb+m04D01oJr6RaYHsCGnAQgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMDEyMDAwMjAyWhcNMjcxMDExMDAwNzAy
WjAzMTEwLwYDVQQDEyg2RjY2M0ZCMkJGNUQwQTE3OEI1MjQ3REUwREM0OThENTgx
NjNDMUY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgQVzPXJDnM/
yp4P11qggyULd9IJPcNZbUpUBSQWZtm0rtMY9MeHY37kHLuXJ6mkY2MsIiS4TFKN
e/rUn3mAI2vJT2JyaJy728B8h6VMWERXFVzoPOazM6gRFbbwn1UxS9S6aqAjjHqL
esW3Tb2WfyLn6deQzAkqY4SQmJM66IsvGZ4/Pk7YxTzsER2A3RLMveE1whzwCCEG
TN7UMTtpIV1ovWjNPZQR81M0VSaUbzkf+IBWgM25U9hhv8LijIg1giJYxZapguF8
8EXS1+j0Q7bGR/V+nf6kBNwwZSu5XsJDirMdW8e1pLas870yQd1QYhjfCRQP1+k+
XEOrR1H2aQIDAQABo4ICljCCApIwHQYDVR0OBBYEFG9mP7K/XQoXi1JH3g3EmNWB
Y8H2MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG
CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBKBsQAwQGKLcAAwQCKLdQAwQAKLdk
AwQAKN8XMA0GCSqGSIb3DQEBCwUAA4IBAQA45fHI+VSm1Pyq0ypegICCmRduV2jK
SIXnV1MKIwr1GA0QDMpYNG4/sXMyEjOyjC+e6aRt05+JOpsKEXOpadjBz6DWCTqp
Sn+7JqEfu/7YYKKBylAQejQz5klODQtoXnbmn+b9Zb7/wKuh64gFwfS25mrkkPx3
CPLadbrW+GGMQGwQh0GwQ4M0davEJRx/AOPBagVzBt8dQvAMqPb1TDY4jYHQhXOa
tsjVH1OtCZFaWklMtNgKY9lniucHkrJi6PuG+dyMI9CtoNyYcWE/FcfhsRahaQrw
F0t2Rx+y61Kj0KuUdb/Dy/7H8TMPXVqVsj9bUXSBnFnX9QAkHAQr3hTp
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:34:26 2026 by rpki-client