Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          CMjCZFbM8RMZNnIWhouqQGa9tg5ZFiE8rbttSsYSuLg=
Subject key identifier:   C7:F4:EB:8A:13:DE:ED:E9:3B:9F:CC:66:CF:94:C7:5C:AA:FE:5C:73
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0202181299DE687585E92B5F127103F465DF0769
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS14618.roa
Signing time:             Fri 06 Nov 2026 00:00:08 +0000
ROA not before:           Thu 05 Nov 2026 23:55:08 +0000
ROA not after:            Fri 05 Nov 2027 00:00:08 +0000
asID:                     14618
IP address blocks:        207.180.22.0/24 maxlen: 24
                          207.180.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 02:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:02:18:12:99:de:68:75:85:e9:2b:5f:12:71:03:f4:65:df:07:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Nov  5 23:55:08 2026 GMT
            Not After : Nov  5 00:00:08 2027 GMT
        Subject: CN=C7F4EB8A13DEEDE93B9FCC66CF94C75CAAFE5C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:d6:68:bb:8f:b8:95:85:d1:a9:63:b1:4b:
                    84:c6:51:16:88:61:60:e9:e7:9d:ef:52:83:79:ec:
                    79:e3:45:ac:fe:97:c9:47:f8:ec:b7:b2:f9:c7:48:
                    df:ed:fc:c0:7f:5a:aa:d1:00:0b:86:79:3f:bf:88:
                    47:63:05:dc:53:4b:a9:8b:ec:81:64:e4:36:eb:88:
                    05:bf:5d:f8:60:87:c0:7e:d3:7d:e7:15:f3:c6:53:
                    d3:8d:84:22:df:4e:cf:d2:82:dd:6a:5c:bd:e2:e2:
                    04:37:74:0c:1e:bc:03:87:7a:f6:eb:53:93:10:f2:
                    03:0c:44:89:82:e0:76:56:29:c3:fa:5e:a8:ac:6b:
                    77:a2:64:ac:03:c0:98:68:4e:0e:b0:12:5b:cc:89:
                    f3:a2:bc:f2:21:0c:43:72:e7:20:fc:eb:0c:5b:7b:
                    af:ca:a4:3e:07:25:b5:f2:5e:33:d1:0d:f7:09:70:
                    93:41:38:58:5d:6c:5c:10:0d:a2:d4:b5:24:1a:63:
                    70:40:67:63:69:c7:72:68:91:72:98:c3:8c:cb:ef:
                    92:02:f4:3a:fd:cc:31:8d:e2:b7:71:77:9b:ad:93:
                    ee:82:79:6f:65:d4:48:5f:71:56:4d:9f:10:3f:ea:
                    0b:a3:5f:49:97:1a:37:5a:8c:79:8d:24:f0:1c:36:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F4:EB:8A:13:DE:ED:E9:3B:9F:CC:66:CF:94:C7:5C:AA:FE:5C:73
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.22.0/24
                  207.180.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:c5:a3:29:d0:f6:69:e8:be:aa:7f:70:d6:d2:6d:52:6e:
         d5:ce:9d:87:06:61:cd:36:ef:44:50:63:32:b7:0f:f2:81:e7:
         05:db:44:a8:b7:f5:f5:fe:ce:03:96:02:8b:be:af:68:1c:1f:
         aa:0d:54:03:49:f4:c4:ad:11:31:6e:b8:14:ed:39:16:02:0e:
         5f:d1:62:d5:7e:8f:ca:c9:e1:27:39:6e:b0:04:10:53:60:49:
         aa:c1:3f:18:04:39:0c:50:af:54:66:6a:87:ab:68:f0:29:7d:
         90:2d:74:cf:f2:73:4e:7f:c1:af:16:d3:99:1c:ce:f4:a5:d2:
         30:1c:dd:a5:96:4d:ee:20:15:be:a0:ac:e3:14:f6:b3:35:2c:
         02:72:78:26:fc:42:d7:95:4f:ec:59:91:df:f5:b0:8d:40:ae:
         74:1e:97:50:6d:38:54:f0:dd:e5:f9:aa:d2:92:8b:25:fa:52:
         df:70:4a:7e:da:34:8f:da:cb:61:6e:a3:fe:da:a2:7a:95:d2:
         0d:8b:6d:d5:5d:37:46:d5:e8:02:fd:3e:23:70:47:15:51:5e:
         19:6b:01:cf:9d:d8:9b:bf:10:99:41:6b:b4:77:e3:c4:c8:00:
         30:60:22:bb:0d:94:67:4e:ef:cb:8b:53:bd:7a:66:d7:84:70:
         4a:20:f6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 13:41:23 2026 by rpki-client