Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          hpsej7rkBfg0ZiubSuKEc3PemqbU5HhyvYDNU+FrAQw=
Subject key identifier:   70:C7:F2:FE:9E:1E:F5:6B:C8:76:83:A0:30:6C:A9:97:7F:FC:5C:66
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       426CD01C68CD9A3F39E8ADB0DB96B4316707D078
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa
Signing time:             Tue 06 Aug 2024 00:00:06 +0000
ROA not before:           Mon 05 Aug 2024 23:55:06 +0000
ROA not after:            Tue 05 Aug 2025 00:00:06 +0000
asID:                     14618
IP address blocks:        140.99.12.0/24 maxlen: 24
                          140.99.50.0/24 maxlen: 24
                          140.99.51.0/24 maxlen: 24
                          140.99.52.0/24 maxlen: 24
                          140.99.53.0/24 maxlen: 24
                          140.99.54.0/24 maxlen: 24
                          140.99.55.0/24 maxlen: 24
                          140.99.56.0/24 maxlen: 24
                          140.99.57.0/24 maxlen: 24
                          140.99.61.0/24 maxlen: 24
                          140.99.63.0/24 maxlen: 24
                          140.99.64.0/24 maxlen: 24
                          140.99.65.0/24 maxlen: 24
                          140.99.66.0/24 maxlen: 24
                          140.99.67.0/24 maxlen: 24
                          140.99.70.0/24 maxlen: 24
                          140.99.71.0/24 maxlen: 24
                          140.99.72.0/24 maxlen: 24
                          140.99.73.0/24 maxlen: 24
                          140.99.74.0/24 maxlen: 24
                          140.99.75.0/24 maxlen: 24
                          140.99.76.0/24 maxlen: 24
                          140.99.221.0/24 maxlen: 24
                          140.99.232.0/24 maxlen: 24
                          140.99.234.0/24 maxlen: 24
                          140.99.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 04:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6c:d0:1c:68:cd:9a:3f:39:e8:ad:b0:db:96:b4:31:67:07:d0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug  5 23:55:06 2024 GMT
            Not After : Aug  5 00:00:06 2025 GMT
        Subject: CN=70C7F2FE9E1EF56BC87683A0306CA9977FFC5C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e3:14:26:03:32:21:79:ff:ed:9e:05:c4:6d:
                    7d:ff:9e:43:aa:5c:8b:66:14:b9:fb:1e:2e:3a:07:
                    94:1b:b9:18:d4:7a:ec:98:b6:63:a6:b4:32:7e:91:
                    23:a3:fa:91:24:a8:b1:9f:89:66:b7:a5:73:50:a2:
                    7d:33:13:da:22:92:f9:cc:bd:93:3a:9f:7b:57:f5:
                    3b:74:3c:38:88:ab:5e:d7:6b:ae:0c:f9:cd:04:d5:
                    54:52:1a:48:e5:a7:25:5c:25:8c:e5:2a:ad:d0:74:
                    81:71:ac:56:2c:29:d3:49:4d:81:fe:a8:a4:12:97:
                    97:5d:09:f0:ba:33:d1:04:aa:a2:fc:d2:94:5f:64:
                    65:79:07:56:de:f5:9b:14:2f:16:64:01:55:3e:8f:
                    7e:ef:5f:12:6d:8c:ac:dc:55:28:5d:cc:07:1b:df:
                    87:bf:5c:62:ec:16:57:13:e5:ae:76:ac:9a:85:04:
                    a8:89:f7:35:96:97:28:5f:88:19:e7:e2:88:d4:eb:
                    27:b6:bf:6d:03:7c:59:5a:40:67:22:5b:8e:8d:ae:
                    30:eb:fc:b4:7e:5f:c3:32:6e:bc:95:19:53:0a:d1:
                    04:7a:d8:f4:19:f7:5b:22:13:78:d7:9f:15:07:a4:
                    07:0f:4e:24:74:1a:32:5f:44:41:3e:28:99:a3:1e:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C7:F2:FE:9E:1E:F5:6B:C8:76:83:A0:30:6C:A9:97:7F:FC:5C:66
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.12.0/24
                  140.99.50.0-140.99.57.255
                  140.99.61.0/24
                  140.99.63.0-140.99.67.255
                  140.99.70.0-140.99.76.255
                  140.99.221.0/24
                  140.99.232.0/24
                  140.99.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:14:c7:32:c5:94:d8:f4:b5:3e:e6:a4:44:6b:6c:d2:bd:f1:
         21:df:df:69:50:1d:89:94:d2:5b:e0:d0:ce:44:e1:c8:33:fd:
         45:1a:81:17:02:de:0f:cf:21:a9:2c:03:0e:61:03:f7:5f:70:
         c9:bd:96:09:92:1e:9b:99:9b:10:c3:fb:89:32:a3:1d:14:3e:
         b4:79:2e:79:91:fe:00:65:08:bd:e7:22:e7:8a:9d:73:2f:f1:
         6b:1f:d3:83:c5:2c:a6:e2:d4:97:d6:43:81:e7:2d:76:4d:91:
         94:5b:6d:b1:68:e8:ca:44:48:1b:40:32:bb:6d:83:7d:dd:d7:
         9b:15:75:80:db:8a:bd:48:f8:e9:cb:89:00:74:d4:cb:f3:ec:
         8d:04:29:45:bf:9b:94:59:35:41:6c:c1:66:ea:0b:77:bd:1b:
         c3:c8:00:51:a9:08:d4:f3:b9:50:aa:1f:24:2a:11:07:a5:0d:
         ef:87:cf:23:70:88:38:52:f1:e2:5f:8b:b3:fe:53:05:1b:15:
         f7:de:a4:c6:49:13:b6:aa:be:8e:48:6f:f1:ab:19:ea:d6:21:
         9c:f7:cc:9a:f4:b3:62:9c:f5:6d:2e:4b:5b:e5:92:4d:32:0d:
         4e:6c:1b:36:f3:4a:0e:d1:8e:b1:8b:29:0c:61:84:96:3a:b8:
         4e:ac:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:50 2025 by rpki-client