Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          nHthliLOmyeS7MLLZZNZBfhGHBL/dkjqYlSc446QwUw=
Subject key identifier:   24:65:DF:C3:B5:1D:2E:89:AB:C1:55:54:71:FC:D4:35:97:CD:7A:69
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1C710721BA15BE06EDE5AA55D087C104FB3CEAD0
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa
Signing time:             Tue 27 Jan 2026 12:28:59 +0000
ROA not before:           Tue 27 Jan 2026 12:23:59 +0000
ROA not after:            Tue 26 Jan 2027 12:28:59 +0000
asID:                     14618
IP address blocks:        157.254.2.0/23 maxlen: 24
                          157.254.141.0/24 maxlen: 24
                          157.254.200.0/22 maxlen: 22
                          157.254.217.0/24 maxlen: 24
                          157.254.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 11:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:71:07:21:ba:15:be:06:ed:e5:aa:55:d0:87:c1:04:fb:3c:ea:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jan 27 12:23:59 2026 GMT
            Not After : Jan 26 12:28:59 2027 GMT
        Subject: CN=2465DFC3B51D2E89ABC1555471FCD43597CD7A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:02:53:62:dc:ec:c7:83:c2:d0:bd:e4:07:
                    18:68:b5:52:dd:11:5d:c9:64:9c:d8:0d:c1:e3:ca:
                    ce:bf:01:d0:84:8b:7d:cb:35:bd:74:7c:8a:67:4b:
                    31:43:86:9f:d9:bf:11:b6:1b:d5:a0:9d:24:04:ad:
                    6f:d9:db:7d:68:af:bb:0c:11:3d:c4:d2:c4:89:72:
                    40:99:46:88:5c:bb:d3:93:79:0e:f1:57:59:f0:d7:
                    fe:2f:c9:d7:36:31:06:ae:7b:b1:d6:6e:b4:b2:e3:
                    18:fe:30:63:9a:13:68:bb:5d:77:6e:d4:a3:34:44:
                    e7:1a:d1:18:49:9d:05:35:9b:aa:9b:e6:db:32:ad:
                    77:44:b3:d6:25:c1:47:0e:95:38:18:ea:c2:e0:e5:
                    38:a3:bc:07:58:aa:27:6c:6f:29:e1:17:66:fa:82:
                    eb:3d:83:4b:73:9d:67:eb:24:03:1b:86:b8:95:68:
                    a6:9e:53:4d:9d:89:e7:5f:bb:38:9e:25:35:75:6f:
                    98:79:b8:b2:f6:1a:9e:c7:4a:bb:43:5c:3a:65:96:
                    8a:7c:d7:4c:9f:87:30:85:f4:69:b1:38:6a:6f:a7:
                    01:5e:35:c2:89:80:ad:97:4f:e7:af:2f:87:ee:6d:
                    bb:cf:b1:07:97:d4:d1:07:10:73:5c:44:9b:da:0d:
                    ea:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:65:DF:C3:B5:1D:2E:89:AB:C1:55:54:71:FC:D4:35:97:CD:7A:69
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.2.0/23
                  157.254.141.0/24
                  157.254.200.0/22
                  157.254.217.0/24
                  157.254.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:22:c4:45:22:56:7a:73:a1:ad:40:3e:bb:52:d6:9c:b4:7e:
         2f:a4:7b:33:23:bb:a3:07:bc:d2:28:25:a6:0d:cf:50:8c:e5:
         b4:8f:df:2a:39:29:ce:44:28:c0:74:f3:26:63:d7:7e:ca:03:
         29:20:a9:cb:b5:6c:f3:84:cb:3b:7d:b7:12:ee:a5:07:dc:38:
         1d:9b:b2:eb:9c:04:5c:e5:75:71:6f:dd:98:b2:5a:ac:39:5f:
         6f:c0:e5:f1:9a:3b:4a:90:bb:02:46:36:12:e4:ae:c2:5f:61:
         24:30:8c:4c:9a:b5:50:71:83:86:e1:1a:60:27:ff:1d:30:7b:
         6c:90:29:15:ec:65:0d:d7:c1:45:48:63:bb:55:1e:7d:dc:c5:
         22:ce:8c:9a:e6:b2:9c:9a:25:24:50:84:54:38:2c:74:83:fb:
         50:8a:fc:2f:8c:60:9b:79:af:e1:e2:a1:b9:ca:b1:85:7d:a7:
         fe:c0:6b:be:24:7a:21:d7:f4:dc:9d:78:7c:f7:3d:cb:e4:cb:
         50:d2:49:91:c8:9b:64:09:ae:f8:40:d1:5f:7a:8a:47:5f:fd:
         cf:a7:58:02:80:c5:10:aa:3a:0d:b1:53:fe:0a:44:c3:77:c0:
         d4:4b:08:c9:3a:73:0e:6f:04:cc:02:4f:a1:bd:ba:6e:c9:c3:
         c4:67:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:51:38 2026 by rpki-client