Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          pngEy1Cy1hN2AtnSlTmAniH/bErJy2vdidbst5oZBjQ=
Subject key identifier:   A7:0E:CA:72:EC:7D:40:21:A7:34:09:21:68:FA:F3:7C:4F:DA:04:C2
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       497DFBC09B611360DA56BDF817C10A2D1373307F
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
Signing time:             Mon 25 Aug 2025 03:25:49 +0000
ROA not before:           Mon 25 Aug 2025 03:20:49 +0000
ROA not after:            Mon 24 Aug 2026 03:25:49 +0000
asID:                     14618
IP address blocks:        40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
                          40.183.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7d:fb:c0:9b:61:13:60:da:56:bd:f8:17:c1:0a:2d:13:73:30:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 25 03:20:49 2025 GMT
            Not After : Aug 24 03:25:49 2026 GMT
        Subject: CN=A70ECA72EC7D4021A734092168FAF37C4FDA04C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:a6:8f:50:28:98:16:c9:a1:db:fa:93:e7:
                    e2:c4:e7:c3:20:ec:94:48:88:5f:9c:f9:0c:ee:54:
                    a8:08:cd:08:c1:2d:33:22:7a:e2:80:07:53:f5:95:
                    11:5c:9b:e2:e8:f8:a6:92:80:15:85:8e:c1:0c:11:
                    00:10:23:65:af:a6:25:37:cb:36:bc:60:b8:9e:6e:
                    46:e7:6d:44:0a:f7:0c:eb:28:b9:58:25:e4:37:1f:
                    c4:6a:2b:0f:ad:22:2d:f8:55:39:5a:7b:ff:ea:e6:
                    57:8d:97:e5:09:ef:4e:42:41:e9:55:86:57:1c:36:
                    bb:37:54:a9:16:3e:c0:0c:12:06:77:f0:a4:d9:ea:
                    a3:8e:27:f8:77:18:da:83:51:b5:6c:4c:1b:22:14:
                    d7:9e:0f:60:30:90:bf:e2:ed:4f:4c:f4:90:71:2d:
                    9a:70:1b:30:d0:23:53:cf:b4:f1:41:66:e3:95:c6:
                    1f:30:e9:22:f7:16:13:c7:dc:22:15:42:fc:48:18:
                    f3:a1:d1:96:50:7e:92:75:e9:e3:2d:fd:eb:9d:2f:
                    15:e4:73:0a:57:b3:3e:9d:a8:72:d1:eb:46:8a:51:
                    e5:08:ce:eb:3a:7c:53:d8:72:84:4e:ed:ae:ed:b2:
                    28:7d:32:6c:3f:73:44:ac:c6:0f:a1:5a:9c:8a:48:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0E:CA:72:EC:7D:40:21:A7:34:09:21:68:FA:F3:7C:4F:DA:04:C2
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18
                  40.183.80.0/22
                  40.183.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:09:ff:a8:f7:13:db:e2:f3:7c:fb:1b:6c:3b:ea:57:60:eb:
         43:b3:27:4e:34:ad:bf:22:2c:8c:72:e5:c2:a6:d5:ed:18:56:
         f8:be:59:ee:94:3d:d2:f1:48:f5:9c:b0:6f:ad:bf:5a:a9:f9:
         ec:3e:71:94:41:00:fc:55:51:a0:69:27:c7:68:32:e9:36:88:
         89:72:a4:e8:07:ac:8f:2d:39:3a:a1:af:03:31:b2:32:f3:bc:
         37:ca:fb:8c:35:b0:72:2c:46:56:f0:a0:1d:01:ce:c8:50:b9:
         2b:86:cf:37:02:78:3d:97:cf:36:c4:60:f7:12:a0:87:a7:1b:
         ec:14:b1:7e:b1:8b:0d:54:93:c3:3a:b7:44:10:00:c1:c1:d2:
         a0:c9:5f:b9:0d:ee:6e:d3:a2:11:1f:fd:d4:9f:4b:9b:d3:0b:
         bc:eb:10:c0:80:8b:a1:ae:56:c2:d0:44:03:f7:28:4f:e0:2f:
         b9:8d:83:75:57:75:3e:66:d5:b7:1b:52:fe:06:a2:55:b6:16:
         1d:f0:fe:85:a9:b3:b3:9e:a9:0e:71:1e:c0:ba:20:66:37:9c:
         51:94:5f:53:b8:9e:63:47:75:2b:a0:7a:68:fa:37:16:f8:a2:
         5f:94:31:99:a1:88:58:5d:cc:60:71:75:af:e7:f6:ff:25:8f:
         4c:9f:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:19:58 2025 by rpki-client