Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          Pa3T9Z1j8oCybSLoJglLdiSg088qEw65/M/YERY0+9Q=
Subject key identifier:   14:CA:7D:34:77:CD:4A:22:0F:EE:7F:9B:F1:57:CA:BB:4C:F8:41:D7
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       5CA9C6C1E5897A2A255E8FF3473A3E21A3AD2435
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
Signing time:             Thu 06 Aug 2026 10:36:19 +0000
ROA not before:           Thu 06 Aug 2026 10:31:19 +0000
ROA not after:            Thu 05 Aug 2027 10:36:19 +0000
asID:                     14618
IP address blocks:        64.202.96.0/24 maxlen: 24
                          66.225.239.0/24 maxlen: 24
                          204.93.164.0/24 maxlen: 24
                          204.93.186.0/24 maxlen: 24
                          204.93.201.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.204.0/24 maxlen: 24
                          205.234.244.0/24 maxlen: 24
                          216.246.3.0/24 maxlen: 24
                          216.246.96.0/24 maxlen: 24
                          216.246.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 11:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a9:c6:c1:e5:89:7a:2a:25:5e:8f:f3:47:3a:3e:21:a3:ad:24:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Aug  6 10:31:19 2026 GMT
            Not After : Aug  5 10:36:19 2027 GMT
        Subject: CN=14CA7D3477CD4A220FEE7F9BF157CABB4CF841D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:44:93:ab:cd:8b:6d:9e:27:ba:b6:9f:db:
                    4f:74:28:27:8b:8a:82:79:04:2b:8f:3d:f7:1d:5f:
                    69:85:f0:98:a7:12:22:24:a1:f8:b4:69:73:ea:3e:
                    73:e5:f4:22:c2:ff:dc:61:cd:47:5b:df:92:5e:45:
                    0e:5c:f8:b6:65:af:4d:3d:d9:be:2b:db:0b:46:32:
                    fd:b7:bd:61:dc:da:db:2c:73:e7:53:01:6d:fd:9f:
                    54:dc:9c:40:42:c5:68:54:f5:50:0c:a9:e7:2e:ee:
                    0e:3c:0f:97:42:71:0a:77:a6:c2:67:c1:8d:0a:87:
                    44:cf:fe:28:0e:79:a2:96:a4:df:a2:e3:ee:28:4a:
                    7d:ae:a2:5c:33:8d:bc:be:46:0d:b1:5d:a9:36:4a:
                    a7:c8:0b:1f:18:ed:dd:cb:2a:1f:83:d8:5a:15:fc:
                    89:3d:2f:a6:40:77:1a:a6:88:1d:f9:c7:60:30:d0:
                    90:fb:b5:42:cd:56:61:f0:22:60:c9:82:ca:90:3b:
                    73:7c:f4:16:c8:28:89:72:ec:c9:5d:0f:23:88:14:
                    a3:a0:d7:8a:42:75:95:bc:fc:71:24:72:68:5a:de:
                    5d:8f:88:e9:d8:19:7a:b3:e1:5c:e7:1d:2e:ba:cb:
                    99:5b:02:a1:69:6a:0b:26:1c:1c:88:de:a3:12:9f:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CA:7D:34:77:CD:4A:22:0F:EE:7F:9B:F1:57:CA:BB:4C:F8:41:D7
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.96.0/24
                  66.225.239.0/24
                  204.93.164.0/24
                  204.93.186.0/24
                  204.93.201.0/24
                  205.234.156.0/23
                  205.234.204.0/24
                  205.234.244.0/24
                  216.246.3.0/24
                  216.246.96.0/24
                  216.246.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:33:4f:c7:da:ff:50:76:71:b4:fd:28:ed:b6:62:07:ee:
         36:e3:49:1d:4a:33:f0:6b:c8:3c:10:15:6d:cb:77:8c:11:f2:
         33:e6:16:ef:ec:ab:fd:ba:07:d9:36:55:c8:23:64:31:c8:3e:
         cd:d7:21:c5:0d:54:ab:ba:5f:38:a3:3c:8e:ea:ef:82:57:3e:
         77:df:6d:26:30:8c:86:55:5d:b1:ce:60:33:f7:2a:fe:ec:1b:
         18:5f:e8:f1:d2:e4:7c:fb:07:67:bc:a9:ba:52:f9:90:56:c8:
         ba:30:8c:63:eb:a0:03:c5:d5:92:9f:44:82:e4:43:4d:cb:2c:
         a3:0b:ce:e6:52:18:e4:66:8e:18:ae:36:2d:43:bb:75:4a:49:
         a1:23:3a:2f:5a:46:50:87:ad:82:1b:cd:ed:91:99:5f:08:7f:
         14:89:54:1e:7c:38:0d:59:03:4a:45:7f:ea:d3:d1:48:2b:83:
         0a:52:3e:53:64:eb:1d:fe:ab:fd:11:53:ad:08:3e:a8:06:2b:
         89:de:8d:9d:d2:8e:f0:cb:36:49:c9:5c:f1:f5:c7:54:07:56:
         0e:8b:fc:7c:23:f4:94:9d:0e:64:79:34:39:e9:9f:2b:f0:4a:
         f4:fa:b0:f6:9b:2e:bf:4d:36:11:6e:3c:67:ce:9b:92:f1:64:
         c6:d1:68:4a
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUXKnGweWJeiolXo/zRzo+IaOtJDUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjYwODA2MTAzMTE5WhcNMjcwODA1MTAzNjE5
WjAzMTEwLwYDVQQDEygxNENBN0QzNDc3Q0Q0QTIyMEZFRTdGOUJGMTU3Q0FCQjRD
Rjg0MUQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5stEk6vNi22e
J7q2n9tPdCgni4qCeQQrjz33HV9phfCYpxIiJKH4tGlz6j5z5fQiwv/cYc1HW9+S
XkUOXPi2Za9NPdm+K9sLRjL9t71h3NrbLHPnUwFt/Z9U3JxAQsVoVPVQDKnnLu4O
PA+XQnEKd6bCZ8GNCodEz/4oDnmilqTfouPuKEp9rqJcM428vkYNsV2pNkqnyAsf
GO3dyyofg9haFfyJPS+mQHcapogd+cdgMNCQ+7VCzVZh8CJgyYLKkDtzfPQWyCiJ
cuzJXQ8jiBSjoNeKQnWVvPxxJHJoWt5dj4jp2Bl6s+Fc5x0uusuZWwKhaWoLJhwc
iN6jEp+MAwIDAQABo4ICujCCArYwHQYDVR0OBBYEFBTKfTR3zUoiD+5/m/FXyrtM
+EHXMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsG
CCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAQMpgAwQAQuHvAwQAzF2kAwQAzF26
AwQAzF3JAwQBzeqcAwQAzerMAwQAzer0AwQA2PYDAwQA2PZgAwQA2PZjMA0GCSqG
SIb3DQEBCwUAA4IBAQAE9TNPx9r/UHZxtP0o7bZiB+4240kdSjPwa8g8EBVty3eM
EfIz5hbv7Kv9ugfZNlXII2QxyD7N1yHFDVSrul84ozyO6u+CVz53320mMIyGVV2x
zmAz9yr+7BsYX+jx0uR8+wdnvKm6UvmQVsi6MIxj66ADxdWSn0SC5ENNyyyjC87m
UhjkZo4YrjYtQ7t1SkmhIzovWkZQh62CG83tkZlfCH8UiVQefDgNWQNKRX/q09FI
K4MKUj5TZOsd/qv9EVOtCD6oBiuJ3o2d0o7wyzZJyVzx9cdUB1YOi/x8I/SUnQ5k
eTQ56Z8r8Er0+rD2my6/TTYRbjxnzpuS8WTG0WhK
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:31:55 2026 by rpki-client