Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          4qxbvCRls2j3Rq1EsmU4+BCWxZQy3SDWV9w+U0yrvYc=
Subject key identifier:   2F:2B:B2:2A:78:CE:DC:24:7B:C5:E7:17:20:84:99:1F:36:43:E7:16
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       2495D9E63B1DB74133C2A931B924045869168DB6
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa
Signing time:             Thu 30 Jul 2026 07:36:09 +0000
ROA not before:           Thu 30 Jul 2026 07:31:09 +0000
ROA not after:            Thu 29 Jul 2027 07:36:09 +0000
asID:                     14618
IP address blocks:        140.99.12.0/24 maxlen: 24
                          140.99.50.0/24 maxlen: 24
                          140.99.51.0/24 maxlen: 24
                          140.99.52.0/24 maxlen: 24
                          140.99.53.0/24 maxlen: 24
                          140.99.54.0/24 maxlen: 24
                          140.99.55.0/24 maxlen: 24
                          140.99.56.0/24 maxlen: 24
                          140.99.57.0/24 maxlen: 24
                          140.99.61.0/24 maxlen: 24
                          140.99.63.0/24 maxlen: 24
                          140.99.64.0/24 maxlen: 24
                          140.99.65.0/24 maxlen: 24
                          140.99.66.0/24 maxlen: 24
                          140.99.67.0/24 maxlen: 24
                          140.99.70.0/24 maxlen: 24
                          140.99.71.0/24 maxlen: 24
                          140.99.72.0/24 maxlen: 24
                          140.99.73.0/24 maxlen: 24
                          140.99.74.0/24 maxlen: 24
                          140.99.75.0/24 maxlen: 24
                          140.99.76.0/24 maxlen: 24
                          140.99.221.0/24 maxlen: 24
                          140.99.232.0/24 maxlen: 24
                          140.99.234.0/24 maxlen: 24
                          140.99.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 18:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:95:d9:e6:3b:1d:b7:41:33:c2:a9:31:b9:24:04:58:69:16:8d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul 30 07:31:09 2026 GMT
            Not After : Jul 29 07:36:09 2027 GMT
        Subject: CN=2F2BB22A78CEDC247BC5E7172084991F3643E716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f2:c0:41:59:af:25:b6:bd:ac:6a:28:2b:e7:
                    10:8e:ad:73:07:d8:2b:5b:72:3f:87:fe:41:16:64:
                    f9:6c:5a:37:77:e0:11:08:b5:06:95:05:52:33:d2:
                    dc:ef:98:d3:4b:6b:27:86:08:7f:f0:f1:8d:48:e3:
                    4a:b1:5a:19:09:1f:88:ef:d1:da:cc:3e:70:30:81:
                    d8:05:02:e2:a2:66:aa:59:80:6e:fe:34:a4:d4:22:
                    5f:9e:90:7d:71:b2:a7:0a:b6:c1:ef:a0:57:49:3e:
                    de:09:46:bb:17:27:56:fd:93:9b:be:76:f2:91:d5:
                    d5:c4:85:b1:7e:1e:e6:84:43:11:c8:d9:91:9b:ac:
                    3a:2a:10:f9:89:73:fa:9d:a9:e3:2b:c9:dc:34:a4:
                    9a:c0:68:f9:c7:a0:9e:2b:8f:20:2a:06:82:7f:73:
                    00:4c:8c:74:8f:a0:47:a1:f0:e3:81:2d:53:86:41:
                    07:19:10:5c:46:c9:a7:43:b8:d5:1b:0a:ff:ca:f3:
                    4a:3f:93:69:a4:49:7f:8a:5a:54:e9:08:6b:a9:67:
                    68:b4:7a:98:21:b4:eb:d6:8f:aa:73:42:80:98:0e:
                    59:57:1f:a1:7e:67:7d:ad:76:52:38:9c:1c:1b:af:
                    74:84:2f:6b:fd:01:21:b2:cd:28:4d:32:19:35:56:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2B:B2:2A:78:CE:DC:24:7B:C5:E7:17:20:84:99:1F:36:43:E7:16
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.12.0/24
                  140.99.50.0-140.99.57.255
                  140.99.61.0/24
                  140.99.63.0-140.99.67.255
                  140.99.70.0-140.99.76.255
                  140.99.221.0/24
                  140.99.232.0/24
                  140.99.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:be:f4:02:aa:04:0e:e4:5d:fb:60:4c:91:b7:25:db:76:6d:
         48:bf:30:79:9d:18:0b:35:86:00:00:51:34:27:6d:ac:a0:07:
         c5:ae:4c:84:73:c5:a7:28:3f:3d:8e:fe:00:84:9e:21:a1:54:
         bb:ad:95:33:1d:b8:40:f1:d8:37:7d:8b:1e:a3:bd:cd:2f:76:
         76:1d:1d:9d:86:b2:84:92:fa:b1:e8:4e:df:06:b3:ec:91:39:
         33:ce:32:5b:ba:42:93:d4:e4:d5:17:05:a1:64:8e:64:b9:c5:
         39:e9:bd:b4:b3:1d:ce:02:4a:4b:9a:47:3b:bd:77:ff:c8:44:
         6c:68:03:44:25:75:53:50:3a:05:79:4d:17:85:69:29:1c:a8:
         40:dd:36:4e:91:7d:8b:53:b5:98:56:23:3f:8e:82:c3:2b:be:
         ba:6c:0a:23:19:53:7b:ac:c5:18:3a:a6:6f:38:ad:72:9f:d9:
         cc:39:63:fb:f5:b1:5e:3d:87:37:bf:7e:89:a3:73:64:eb:50:
         a5:2a:2f:e0:eb:b7:4d:6b:fc:c7:ca:b2:0b:7b:93:28:83:8d:
         d0:32:47:da:30:38:10:de:61:8a:5c:b3:72:16:22:dd:44:eb:
         18:6f:09:c1:f8:84:82:ed:1f:ae:e7:c6:9f:fd:0c:89:22:05:
         08:db:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:31:55 2026 by rpki-client