Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          i2hE6iPJ8LLqyZY4kLqX/3Mvj6iatecYeCzIqrhO1J0=
Subject key identifier:   F6:94:FA:2C:D1:C1:46:5A:AA:1F:3C:D3:BB:5E:E0:1C:56:4A:7F:DF
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       5FDEC0EBBF29143A2B6385F15FF4D6968BDB44C0
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
Signing time:             Thu 04 Sep 2025 10:14:35 +0000
ROA not before:           Thu 04 Sep 2025 10:09:35 +0000
ROA not after:            Thu 03 Sep 2026 10:14:35 +0000
asID:                     14618
IP address blocks:        64.202.96.0/24 maxlen: 24
                          66.225.239.0/24 maxlen: 24
                          204.93.164.0/24 maxlen: 24
                          204.93.186.0/24 maxlen: 24
                          204.93.201.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.204.0/24 maxlen: 24
                          205.234.244.0/24 maxlen: 24
                          216.246.3.0/24 maxlen: 24
                          216.246.96.0/24 maxlen: 24
                          216.246.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 00:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:de:c0:eb:bf:29:14:3a:2b:63:85:f1:5f:f4:d6:96:8b:db:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep  4 10:09:35 2025 GMT
            Not After : Sep  3 10:14:35 2026 GMT
        Subject: CN=F694FA2CD1C1465AAA1F3CD3BB5EE01C564A7FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:81:9f:cf:c2:88:97:1d:cf:ba:a8:8d:f8:
                    24:4f:ff:0c:82:ff:61:fa:28:ef:96:81:4e:6e:93:
                    14:0b:65:d3:b5:01:f1:e0:00:2b:88:4a:d7:61:cc:
                    68:ad:a1:ba:3a:27:89:3b:cb:a7:ab:3b:d5:5d:11:
                    47:27:03:64:c5:ee:cc:db:51:ca:97:0d:86:22:74:
                    c7:10:cc:bf:f7:30:00:fe:be:ff:36:76:c7:90:8a:
                    a7:df:96:d5:47:d8:3c:66:62:7b:56:8a:10:13:06:
                    0d:f3:8e:61:0e:1b:c6:95:8f:85:08:19:d0:df:4c:
                    0b:e6:45:69:c0:93:be:4b:5e:99:95:71:99:f5:94:
                    ee:12:cf:b2:8c:34:a3:fd:84:77:26:b1:e6:8c:74:
                    3d:e6:55:2f:95:ba:f9:f6:53:d7:29:b0:7a:b5:a3:
                    37:dd:37:a0:bc:ce:44:c4:d2:0c:e0:23:49:2d:84:
                    b0:12:77:c1:49:c3:0f:3b:46:d4:09:04:28:e2:f9:
                    b6:18:3c:a7:42:8f:23:25:c5:db:bf:b4:07:7d:8e:
                    c3:b0:1b:6d:f7:01:9d:71:1f:4c:7b:e2:ec:cb:c7:
                    53:d1:8a:d1:5a:d4:f9:ca:83:25:ba:a2:ad:ff:04:
                    1b:cf:77:37:d1:47:7d:4e:cd:da:3b:0b:dc:07:0e:
                    d7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:FA:2C:D1:C1:46:5A:AA:1F:3C:D3:BB:5E:E0:1C:56:4A:7F:DF
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.96.0/24
                  66.225.239.0/24
                  204.93.164.0/24
                  204.93.186.0/24
                  204.93.201.0/24
                  205.234.156.0/23
                  205.234.204.0/24
                  205.234.244.0/24
                  216.246.3.0/24
                  216.246.96.0/24
                  216.246.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:d6:f4:8b:82:ce:c9:88:05:5c:a6:b0:b9:b9:3f:f3:e0:
         a9:b6:99:3f:2c:82:d1:e3:28:f4:e3:ad:f6:15:91:40:74:5f:
         fb:db:49:82:22:2f:c1:ea:57:87:d9:20:61:3b:fc:47:f7:55:
         7a:41:c1:a9:25:4f:28:ae:10:1e:c3:a9:a7:0e:f6:83:74:4e:
         16:4c:bd:03:53:df:cb:36:8c:4e:ad:3d:42:2c:fc:7c:32:23:
         68:68:56:ac:dc:d5:cf:25:4b:6d:d1:c0:be:02:9b:51:f9:1f:
         6c:1e:6a:69:60:d9:ae:f2:10:db:5c:e0:54:8f:f0:3c:77:d6:
         f0:26:8f:26:bb:19:28:e2:34:d1:d0:cc:75:54:ce:19:96:dc:
         f7:f8:f8:93:d2:31:87:a0:03:b1:56:7b:7b:a3:b5:b9:e1:47:
         72:a4:4a:57:6f:0e:74:33:db:9b:dd:18:2f:5b:23:83:02:85:
         1b:ba:e3:ad:7e:c1:5f:32:a4:96:dc:5d:1b:8d:60:32:a7:16:
         c0:40:6e:8d:de:14:0d:3d:04:73:ae:29:72:8f:f6:73:37:fc:
         5f:da:be:9b:68:50:e6:52:ca:01:32:53:ba:b1:2b:34:7b:ad:
         f1:c4:6c:bf:5f:05:a7:1f:65:df:7f:2e:1d:66:4a:4d:8f:09:
         e8:16:2c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:20 2025 by rpki-client