Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          yjO0LhRhSajo+AHSMseOEKQJCENXz5OKWMmxCxzlCOQ=
Subject key identifier:   F6:38:E7:AB:D2:DF:F4:22:8F:D2:8C:BC:E0:57:14:47:63:4D:67:A4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       27719A3C8067F5B593D5F9D32963A22E6DD2F9D3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa
Signing time:             Sun 05 Jul 2026 21:32:33 +0000
ROA not before:           Sun 05 Jul 2026 21:27:33 +0000
ROA not after:            Sun 04 Jul 2027 21:32:33 +0000
asID:                     14618
IP address blocks:        104.234.13.0/24 maxlen: 24
                          104.234.137.0/24 maxlen: 24
                          104.234.141.0/24 maxlen: 24
                          104.234.143.0/24 maxlen: 24
                          104.234.160.0/24 maxlen: 24
                          104.234.175.0/24 maxlen: 24
                          104.234.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:71:9a:3c:80:67:f5:b5:93:d5:f9:d3:29:63:a2:2e:6d:d2:f9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  5 21:27:33 2026 GMT
            Not After : Jul  4 21:32:33 2027 GMT
        Subject: CN=F638E7ABD2DFF4228FD28CBCE0571447634D67A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:63:64:b4:cf:fe:d1:3d:d3:49:87:44:ca:
                    f5:cd:8b:d4:7b:99:b8:d3:e0:23:03:88:80:e2:63:
                    4e:5f:0b:64:9f:57:d8:c9:53:4f:00:9e:bc:de:31:
                    4e:71:0b:f2:6e:cd:f0:48:d5:19:3a:50:e8:b0:1b:
                    69:e0:a4:19:72:71:5e:91:72:cd:72:f0:f0:68:81:
                    ae:17:20:c7:e9:c0:fd:1d:58:92:80:76:fb:d9:e0:
                    e2:ca:ba:37:7c:69:30:4e:ea:2a:27:47:63:ab:5e:
                    04:25:45:f7:30:cb:ad:36:f8:fb:eb:0b:c0:88:b0:
                    6c:bc:24:a8:07:5d:c1:71:25:05:63:ee:b0:80:d0:
                    a0:30:0d:ca:1b:79:a4:97:05:4e:01:3f:c7:6e:6b:
                    ad:c5:7f:c5:b6:ba:9a:ac:13:08:fe:04:91:18:8b:
                    35:5a:5c:23:d6:65:af:b5:f2:7f:a5:20:82:f2:f9:
                    33:03:ca:e4:84:9c:c4:c3:99:05:63:c3:25:1d:3c:
                    19:c2:35:1d:55:ba:3c:0e:5e:9e:1e:ae:14:54:76:
                    6f:d2:76:bb:12:a0:5b:6c:58:63:6e:8c:97:69:98:
                    5f:84:c8:db:3c:b2:37:66:6d:01:cc:9c:45:ff:e1:
                    48:d2:8c:ec:23:21:17:77:66:cd:ae:6e:0c:82:9f:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:38:E7:AB:D2:DF:F4:22:8F:D2:8C:BC:E0:57:14:47:63:4D:67:A4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.13.0/24
                  104.234.137.0/24
                  104.234.141.0/24
                  104.234.143.0/24
                  104.234.160.0/24
                  104.234.175.0/24
                  104.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:56:80:fe:d1:db:56:98:3f:82:02:68:c0:6c:84:f1:55:0d:
         e0:9a:b8:42:5a:e2:68:43:43:98:53:d2:6d:55:60:c2:ca:60:
         76:c8:76:10:ab:db:73:85:3a:d9:6e:02:22:43:86:e4:32:db:
         82:f1:fd:fa:a4:f2:96:8b:a4:a0:8c:b4:29:55:96:bd:c3:cc:
         35:e4:23:a3:2f:89:ae:dd:a4:a4:35:ad:6f:13:88:ac:cb:04:
         be:57:11:c4:da:fd:e0:ba:59:7a:32:49:28:ea:8c:b3:01:f6:
         e0:a9:67:47:c6:ba:09:04:94:4c:71:16:13:89:16:c0:4f:72:
         df:cc:a8:3e:e9:f0:68:ec:1b:aa:9c:1a:25:37:24:88:60:21:
         6c:7d:cc:d4:ca:97:8c:f1:d1:5a:66:a4:f4:a1:e5:4a:c5:7e:
         6d:5d:3b:8b:81:9b:d2:11:13:ed:9e:03:fe:b8:bf:0c:77:5c:
         cc:6e:56:a2:05:b6:e8:1b:c4:d8:5b:17:a6:de:a5:6d:2c:45:
         eb:e4:77:14:50:c5:f6:d2:2f:b6:e5:da:4c:41:22:9b:fb:c1:
         61:24:91:8e:bd:9c:ec:27:25:6a:db:4f:e9:d4:34:67:12:0d:
         64:2f:84:f3:f0:c7:e6:7b:cb:92:61:e0:02:79:33:4c:df:6f:
         fc:95:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:49:01 2026 by rpki-client