Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          8UlhyWQeOuTmwdm98wt0DPn4d+OXNB56udXO0sNx430=
Subject key identifier:   D7:48:81:64:6E:AF:1C:63:30:B1:3E:C0:98:2E:AE:29:E1:D3:57:55
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       4E0F92D96081A7D4566DC4E464F52638CAF67142
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
Signing time:             Wed 12 Aug 2026 04:20:55 +0000
ROA not before:           Wed 12 Aug 2026 04:15:55 +0000
ROA not after:            Wed 11 Aug 2027 04:20:55 +0000
asID:                     14618
IP address blocks:        40.27.5.0/24 maxlen: 24
                          40.27.16.0/23 maxlen: 24
                          40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
                          40.183.100.0/24 maxlen: 24
                          40.223.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0f:92:d9:60:81:a7:d4:56:6d:c4:e4:64:f5:26:38:ca:f6:71:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 12 04:15:55 2026 GMT
            Not After : Aug 11 04:20:55 2027 GMT
        Subject: CN=D74881646EAF1C6330B13EC0982EAE29E1D35755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b2:53:2b:fa:a3:91:44:68:3d:39:74:d8:66:
                    59:ef:9f:52:20:79:15:98:5d:02:3d:22:8d:af:dc:
                    c8:80:3f:7e:3b:a2:2b:6c:74:52:b5:a8:ce:32:8d:
                    11:00:fe:d8:86:53:8e:be:e2:3d:51:ec:b7:3f:54:
                    3b:0e:42:95:03:31:2f:98:f3:f8:41:5c:d9:dc:e9:
                    ce:1f:e7:16:09:a8:80:e9:7e:db:a5:09:7a:02:b3:
                    28:ce:d8:fb:75:5c:e0:c2:11:be:d0:35:a6:2c:33:
                    3f:b9:3b:88:e0:c9:cf:6b:bd:40:7b:c1:8a:49:8b:
                    b4:b0:8a:a9:87:50:9b:ba:ea:7b:d3:f3:0e:37:bb:
                    99:af:80:a9:8c:1c:28:4e:76:fa:2b:7f:2b:b6:00:
                    a5:7d:40:70:34:03:69:58:a2:8b:b3:3a:c7:a8:71:
                    d9:68:99:19:f3:d6:4f:0f:10:f6:a7:78:70:fd:9f:
                    9a:15:64:39:fc:a7:86:6b:60:6e:15:31:d0:91:35:
                    96:92:d8:86:a2:12:d5:b4:4c:b8:87:0e:c1:6c:ff:
                    58:e3:5f:b0:af:ae:05:73:e5:61:4a:5e:01:38:0a:
                    08:de:87:06:60:4a:79:0d:2a:2c:82:0e:c0:57:4c:
                    a7:f8:c5:80:78:3d:66:26:f3:29:81:80:9a:0f:85:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:48:81:64:6E:AF:1C:63:30:B1:3E:C0:98:2E:AE:29:E1:D3:57:55
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.5.0/24
                  40.27.16.0/23
                  40.183.0.0/18
                  40.183.80.0/22
                  40.183.100.0/24
                  40.223.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:84:15:56:69:4a:95:75:19:77:fc:0b:d0:b4:44:4b:39:ec:
         c6:b7:37:9b:34:a9:c7:be:1a:6b:38:2e:47:a5:c7:47:19:78:
         7d:04:3a:21:3f:68:53:a3:75:4d:e1:27:fa:3d:5d:1d:9c:86:
         da:11:4e:b7:40:ce:ef:7c:88:27:9d:bb:0f:ce:98:79:75:72:
         53:4e:04:91:54:04:9a:97:59:3b:4d:15:66:2c:b9:ea:27:e5:
         e8:75:83:2e:a9:57:3b:46:c9:73:6d:00:29:e5:3f:84:d3:6b:
         42:79:98:f6:14:3c:d7:3c:b5:d2:25:df:46:6f:5c:11:69:37:
         a2:53:98:51:a3:77:79:c6:bc:06:66:ce:1e:c1:dc:5d:77:38:
         23:11:92:42:de:66:ec:59:32:19:91:71:b7:3d:b1:7e:c5:a3:
         c7:82:ec:14:b5:0d:1f:6c:5c:19:13:0a:80:94:d3:06:98:a5:
         9c:ff:8b:71:19:bb:3d:3f:70:8f:f8:11:55:af:6d:b1:61:f2:
         c9:69:a1:8b:24:a4:4c:65:47:ac:f3:4c:1a:ca:5d:8e:c2:1e:
         41:b7:84:83:46:a5:5f:ee:4a:53:d3:10:ca:e5:fc:5b:f6:7b:
         a4:54:9b:a9:15:b3:6f:78:0e:fc:12:3b:eb:cc:7e:6d:f6:dc:
         a2:b6:7f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:59:20 2026 by rpki-client