Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          JEDyXtdrO0DuP2+VDILUp5opJW4Tk9JPkbsXIhX53sU=
Subject key identifier:   5D:A8:90:47:DA:7B:08:DC:2C:62:5E:F2:FF:7A:81:A8:B2:96:A8:AF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4D165509577E148ED302A35CEF4EA635CB8FFBB3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa
Signing time:             Fri 09 May 2025 06:13:55 +0000
ROA not before:           Fri 09 May 2025 06:08:55 +0000
ROA not after:            Fri 08 May 2026 06:13:55 +0000
asID:                     14618
IP address blocks:        23.95.142.0/24 maxlen: 24
                          64.50.161.0/24 maxlen: 24
                          67.210.104.0/24 maxlen: 24
                          209.200.231.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:16:55:09:57:7e:14:8e:d3:02:a3:5c:ef:4e:a6:35:cb:8f:fb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  9 06:08:55 2025 GMT
            Not After : May  8 06:13:55 2026 GMT
        Subject: CN=5DA89047DA7B08DC2C625EF2FF7A81A8B296A8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:95:60:b9:bc:34:d5:95:74:05:96:0c:e6:
                    1c:21:83:6a:fb:c8:6f:e0:59:22:ed:6f:63:c7:03:
                    c3:b6:f2:dc:13:d0:dc:43:15:85:25:16:5f:ed:63:
                    79:9e:18:59:9d:05:f5:87:43:6c:9b:fa:cd:bb:15:
                    d8:65:20:dc:9d:d8:c2:40:53:5a:52:57:6f:86:d2:
                    56:f1:2c:9a:0b:21:d7:42:a5:3d:60:8d:28:62:8b:
                    00:52:c4:af:fa:0f:88:1b:08:a2:55:00:0f:ea:a3:
                    dc:00:9e:60:b2:15:51:a2:81:ff:28:1f:ce:25:f0:
                    20:e8:e7:48:98:10:1d:d2:46:46:2d:3b:b0:e9:6d:
                    69:23:e5:ad:56:6e:e6:09:71:bf:b7:b6:24:49:83:
                    32:69:a9:87:77:58:fe:04:f5:c7:17:9c:ec:fc:a7:
                    12:68:86:96:a2:a3:60:49:c2:61:82:46:06:1c:de:
                    b8:61:6e:1d:93:6e:d0:49:cc:54:2a:a7:a3:a9:ad:
                    dd:1a:b6:83:84:00:b2:51:f9:7f:0a:d2:3a:42:18:
                    0a:06:1c:b7:a9:c2:9e:0e:02:4a:29:c3:f3:d3:1c:
                    1f:ac:73:8b:98:60:b8:66:a3:27:dc:3b:62:1f:8b:
                    16:43:cd:f7:dc:53:fd:d6:e4:de:d1:72:84:de:5b:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A8:90:47:DA:7B:08:DC:2C:62:5E:F2:FF:7A:81:A8:B2:96:A8:AF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  64.50.161.0/24
                  67.210.104.0/24
                  209.200.231.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:6b:d6:86:01:1c:e9:00:c2:4c:b8:37:a0:39:56:5f:fe:ec:
         be:c7:3c:20:9d:a0:35:a8:77:b0:76:69:cf:f5:47:0a:18:e9:
         73:ad:61:e2:99:31:78:cd:59:90:38:6c:86:42:d2:22:e8:c3:
         c8:ff:11:62:57:a7:f8:1f:b7:e9:98:1a:78:ea:10:3c:e7:72:
         45:b7:6b:e3:d6:a9:3f:86:14:fa:5d:06:28:55:f7:82:25:c1:
         03:30:75:5a:80:9a:ed:3b:0b:fd:5d:c0:0a:84:37:4a:48:56:
         84:6f:3d:75:ce:22:69:72:6b:ad:5b:f8:54:3c:87:22:f5:1e:
         1e:f6:be:63:05:e2:14:f1:f8:02:be:72:6c:c7:00:11:af:d3:
         7b:58:e2:32:0c:b1:c8:6f:8c:1d:3a:a1:a0:ca:b6:b5:77:9e:
         a2:a2:da:a8:6a:41:1c:20:62:74:f3:57:10:6f:2d:e8:21:db:
         0f:23:a9:f7:80:55:c2:9e:e1:dd:e9:12:c9:18:fc:34:4a:77:
         e0:a0:43:14:e6:55:9c:a2:2d:2c:90:f4:5a:18:5c:4a:3a:8e:
         2a:12:eb:4b:a4:a4:f9:1c:c7:50:9b:e8:f2:b4:5d:1a:e8:b5:
         c9:dc:b0:f7:94:50:57:76:e7:81:4a:93:3e:0e:61:ac:dd:56:
         3f:58:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:18 2025 by rpki-client