Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          1xNnU7bFsGVgbHs2+zEk5bVUdv0qBtHSnFlSvIrIf7Q=
Subject key identifier:   35:B9:FF:4D:7E:BA:E0:C7:E1:E8:D9:69:74:E6:64:BA:2F:FE:F7:B9
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       089D5F89883AB71098AA4F58F2F47A0979C9E4D1
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa
Signing time:             Sun 05 Oct 2025 08:34:37 +0000
ROA not before:           Sun 05 Oct 2025 08:29:37 +0000
ROA not after:            Sun 04 Oct 2026 08:34:37 +0000
asID:                     14618
IP address blocks:        104.234.13.0/24 maxlen: 24
                          104.234.137.0/24 maxlen: 24
                          104.234.141.0/24 maxlen: 24
                          104.234.143.0/24 maxlen: 24
                          104.234.160.0/24 maxlen: 24
                          104.234.175.0/24 maxlen: 24
                          104.234.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 07:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9d:5f:89:88:3a:b7:10:98:aa:4f:58:f2:f4:7a:09:79:c9:e4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  5 08:29:37 2025 GMT
            Not After : Oct  4 08:34:37 2026 GMT
        Subject: CN=35B9FF4D7EBAE0C7E1E8D96974E664BA2FFEF7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:21:6f:97:0d:2b:93:27:41:1e:2c:bb:fb:
                    76:c3:af:88:c5:fa:2f:a4:d0:b8:60:6f:0c:f3:0e:
                    32:9d:f9:2d:35:d2:55:31:6c:72:e7:3f:cb:08:88:
                    a8:dc:df:d6:c6:6e:98:fa:d0:e3:e6:51:65:04:73:
                    94:49:d5:d8:a8:00:46:b9:db:66:df:9b:ec:a5:e8:
                    08:5c:80:9d:38:bc:4b:7b:59:19:36:76:27:fd:81:
                    f1:09:a8:a9:6a:eb:a5:ef:ac:21:5d:6c:3f:bb:d6:
                    86:ae:a4:07:8f:81:5d:f6:cf:7e:ae:dc:3e:50:17:
                    97:72:00:c3:11:0d:74:9e:c1:53:30:99:1a:dc:97:
                    ee:7d:b1:ff:07:21:76:0b:ac:57:b7:26:ee:fe:ed:
                    36:23:ce:2e:1d:c7:3d:d7:af:91:c5:69:0a:e1:e3:
                    1a:1a:4f:f8:b5:d2:be:d7:8e:1b:23:af:63:e4:ba:
                    0c:63:b4:07:0e:3c:20:df:70:90:45:a5:17:1f:0e:
                    9b:44:09:81:5d:14:a8:fe:79:76:71:68:0d:e6:7c:
                    f3:a2:9f:1b:28:40:6d:ff:97:31:d5:d0:af:65:d3:
                    4c:cd:8e:65:b1:80:b2:5c:a0:1f:43:06:88:ce:23:
                    66:4b:40:cd:6b:5f:40:07:61:0c:74:45:e7:e3:33:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:FF:4D:7E:BA:E0:C7:E1:E8:D9:69:74:E6:64:BA:2F:FE:F7:B9
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.13.0/24
                  104.234.137.0/24
                  104.234.141.0/24
                  104.234.143.0/24
                  104.234.160.0/24
                  104.234.175.0/24
                  104.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e8:2a:6a:f0:2e:02:3c:ea:c3:bc:f9:f0:31:95:fe:e9:40:
         e3:56:23:47:7c:d8:91:8f:d3:ae:d5:c7:02:ec:87:2f:07:6d:
         77:af:5e:6f:9e:76:0a:b7:9f:e6:fc:07:16:2f:53:dc:26:0f:
         c2:4c:13:ef:d2:14:f2:b3:0d:00:81:ac:81:cf:c7:17:8d:04:
         09:02:ea:24:79:10:1d:ac:e0:97:d8:16:e2:5d:4f:fe:d9:16:
         d1:6e:83:fa:5d:22:ac:29:d2:aa:54:86:34:a3:3f:7c:f7:93:
         68:6c:26:bc:78:a3:bc:24:6a:bb:d5:a6:b6:83:4b:95:3e:3e:
         82:f7:9b:e0:de:c1:d0:1b:5d:1b:06:da:1f:64:ed:3b:c9:86:
         34:0d:d0:d9:33:fc:9f:14:e7:46:a8:40:c1:25:b6:d2:99:7f:
         f3:81:e1:ca:bb:b1:72:dc:ab:91:66:d5:f6:1f:71:c7:3e:95:
         db:79:d2:70:b7:dc:8d:58:69:88:e9:0b:44:af:45:bd:6e:09:
         59:82:fa:02:f4:4f:d7:9c:17:11:78:6d:95:49:03:53:f1:51:
         fd:c1:75:4b:69:b9:3b:02:43:ee:41:87:39:1b:0d:53:9d:28:
         9a:ae:6b:98:78:88:4d:82:21:2e:d3:60:40:49:24:f9:85:5e:
         4d:2a:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:15 2025 by rpki-client