Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          /+dRqc+/sql4K2FPJLIKXRVTSXgeIu0g/r451aHwF+M=
Subject key identifier:   85:AC:4D:C6:DF:61:43:16:87:8B:5E:7E:05:94:04:7A:5E:3B:03:C3
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       38B0A47C5921589ADC2FF06C65573989E165C340
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa
Signing time:             Thu 19 Jun 2025 09:39:36 +0000
ROA not before:           Thu 19 Jun 2025 09:34:36 +0000
ROA not after:            Thu 18 Jun 2026 09:39:36 +0000
asID:                     14618
IP address blocks:        40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 12:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b0:a4:7c:59:21:58:9a:dc:2f:f0:6c:65:57:39:89:e1:65:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 19 09:34:36 2025 GMT
            Not After : Jun 18 09:39:36 2026 GMT
        Subject: CN=85AC4DC6DF614316878B5E7E0594047A5E3B03C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:3f:e6:af:ca:47:f9:99:6e:d9:59:a1:04:
                    4f:e1:52:67:83:27:a7:e0:ac:b8:a7:23:c6:6e:8e:
                    7d:6f:4c:ad:da:b6:66:5d:bb:c0:18:bd:40:8f:59:
                    a3:94:b3:04:38:ed:cb:fd:da:2a:6f:08:51:ed:06:
                    15:ae:b7:4e:d9:bc:be:66:65:f4:76:c0:49:6c:af:
                    a7:ca:4c:e3:15:a6:0a:4f:37:c2:23:78:b3:0a:d7:
                    7b:e0:1a:8d:a0:97:06:a2:eb:5e:ac:4e:0f:74:5c:
                    b6:39:c7:70:34:38:b3:50:a2:32:2c:90:0d:8f:95:
                    d5:ea:66:78:50:19:b0:0f:9c:7e:69:d5:4d:b0:47:
                    61:64:47:63:f2:7e:bc:6d:15:7c:2f:57:da:b6:66:
                    66:6b:4b:69:3e:8c:3b:0b:fa:cc:cc:91:0b:a7:72:
                    0d:0f:fc:0f:30:f7:f8:30:3c:4d:56:0a:03:bc:2e:
                    a0:7b:01:c1:89:1f:89:0c:f7:0e:b5:9d:03:06:92:
                    43:21:9f:1f:ad:1c:33:0e:0b:c5:3c:e2:08:da:af:
                    bf:e4:23:fd:c1:25:81:7e:33:39:e2:f5:80:5b:69:
                    e3:1f:45:b6:39:83:37:da:ab:0e:21:33:bd:7f:0c:
                    95:41:f6:40:29:73:8b:53:6b:e5:af:3e:a2:08:61:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AC:4D:C6:DF:61:43:16:87:8B:5E:7E:05:94:04:7A:5E:3B:03:C3
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:95:c0:4d:06:0d:c8:82:8a:f4:f3:11:65:af:60:f2:f7:c9:
         f5:d7:a2:1f:71:2d:b6:f7:e7:72:5b:1d:c9:49:73:ff:61:e3:
         b0:36:53:06:3e:03:9c:52:e4:f3:33:46:01:08:8a:83:cd:cd:
         9a:3e:62:85:ef:31:b1:8e:f9:ba:39:d7:b3:8b:2e:7d:3c:92:
         b5:af:b0:42:fd:f9:bf:cd:aa:93:93:54:c7:1b:c9:8d:45:6b:
         f8:cf:e9:85:d5:cc:3a:07:c9:51:33:f5:a8:cd:aa:17:8a:58:
         40:b9:64:2c:90:6f:cc:0b:9d:ae:35:15:7a:72:b7:39:eb:cd:
         31:0e:46:9b:88:be:0e:6d:b9:9e:6b:84:e3:3c:d5:37:76:a2:
         33:6e:f5:d0:52:4a:c9:c8:a9:32:c2:f7:1f:a0:99:e0:ad:ce:
         22:b9:09:74:78:81:d0:3e:f9:51:8c:a2:5b:98:42:0a:ac:1a:
         b6:c6:c2:82:fb:fb:33:d4:a2:b2:ac:a4:6b:27:27:22:73:c9:
         f5:18:f4:1f:d4:34:1b:bf:07:96:0f:3b:6b:38:7e:d0:d9:3d:
         41:52:d0:e2:b4:d0:31:f7:15:9d:a8:2a:24:24:58:66:24:d5:
         75:f5:fe:af:59:38:d1:3f:63:8d:3b:12:d9:f2:9f:95:0e:83:
         5f:4b:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:16 2025 by rpki-client