Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          LxxnRBleFdEgVRf96DwNN+ABmHfbcZQpgoQfkD/4Rbk=
Subject key identifier:   3E:12:14:3A:C7:35:A2:58:D3:97:FA:F8:20:02:57:6A:86:73:69:35
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       29F52A3D24961CEE7388995FC34D111A49B2ECE1
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa
Signing time:             Sat 23 Aug 2025 00:03:21 +0000
ROA not before:           Fri 22 Aug 2025 23:58:21 +0000
ROA not after:            Sat 22 Aug 2026 00:03:21 +0000
asID:                     14618
IP address blocks:        64.202.96.0/24 maxlen: 24
                          66.225.239.0/24 maxlen: 24
                          204.93.164.0/24 maxlen: 24
                          204.93.186.0/24 maxlen: 24
                          204.93.201.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.204.0/24 maxlen: 24
                          205.234.244.0/24 maxlen: 24
                          216.246.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f5:2a:3d:24:96:1c:ee:73:88:99:5f:c3:4d:11:1a:49:b2:ec:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Aug 22 23:58:21 2025 GMT
            Not After : Aug 22 00:03:21 2026 GMT
        Subject: CN=3E12143AC735A258D397FAF82002576A86736935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:49:ce:0c:18:d8:22:cc:93:32:7d:88:2b:
                    71:7f:54:64:24:af:b4:07:9f:33:20:2c:c6:ae:f4:
                    08:c4:21:c0:bc:b2:b4:d7:ea:57:f5:9d:d7:45:d6:
                    33:65:34:57:5b:12:36:c5:ca:78:aa:25:11:6d:bc:
                    d1:fe:ad:25:a5:57:22:b4:c2:75:5c:b4:2a:09:a4:
                    5c:fd:11:8e:be:e1:32:8f:51:22:fd:f9:6a:8c:57:
                    22:2f:30:89:3d:63:4a:05:24:e9:6b:1e:31:8d:60:
                    32:7f:ba:7f:56:ff:94:cd:b5:0c:82:9c:c8:9c:60:
                    98:ff:cf:64:17:5a:01:4a:d9:24:9d:3d:38:d6:b6:
                    52:c8:52:47:00:a1:30:a5:74:56:5e:18:b3:55:01:
                    2c:f0:8c:24:21:28:58:79:ec:bc:45:d2:f3:82:4d:
                    c6:4c:a2:a7:c6:2f:11:a2:e8:ee:a2:74:8e:8d:1d:
                    ea:fc:8c:0f:7c:d5:f7:d5:02:fd:a7:4b:5b:cf:eb:
                    8c:78:7d:4e:4c:34:7a:2e:7a:58:83:57:c4:58:49:
                    77:57:b8:5a:0a:f3:ac:0d:5f:45:8f:a9:1c:4c:69:
                    59:ce:1d:c0:9d:5b:dc:df:7b:85:c3:b8:a7:16:40:
                    24:fd:de:72:ed:6b:ca:87:a3:04:ee:5a:bd:98:8f:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:12:14:3A:C7:35:A2:58:D3:97:FA:F8:20:02:57:6A:86:73:69:35
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.96.0/24
                  66.225.239.0/24
                  204.93.164.0/24
                  204.93.186.0/24
                  204.93.201.0/24
                  205.234.156.0/23
                  205.234.204.0/24
                  205.234.244.0/24
                  216.246.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:4c:b2:e7:bf:cb:2e:5c:40:2f:2e:c9:5b:25:06:ad:4f:
         20:dd:dc:b7:7d:d5:56:ad:d7:a4:54:ae:4a:94:a7:ea:56:c5:
         e7:72:7c:10:2b:23:0a:a0:4a:41:a8:13:2b:4e:7c:0e:da:8f:
         7a:04:79:25:64:9f:5d:94:2b:0a:ca:1d:c7:ef:39:87:73:c2:
         dc:4d:10:fb:34:73:24:75:2f:5b:6d:68:d1:b6:94:0f:f7:ff:
         bd:5c:5f:0b:51:b3:b3:fd:bb:4a:99:11:61:15:9f:cc:13:5d:
         11:4e:50:50:af:75:66:3c:5b:90:d7:fc:bf:33:77:57:1f:21:
         59:46:ed:0c:7a:07:25:fc:51:30:14:5d:98:19:5f:0f:dc:bb:
         f2:55:55:6c:89:e7:aa:e4:97:80:90:d5:83:36:9a:f9:63:27:
         9e:06:62:9c:3a:b6:a5:08:4c:b1:8d:6b:f5:39:a2:e3:53:ce:
         d1:9f:dc:da:5d:86:2b:ef:ed:1e:63:20:5c:8c:d7:d8:7c:2e:
         ef:0e:d5:b3:77:f2:55:04:4f:3d:fe:85:1d:5c:0a:44:16:25:
         e8:b8:65:52:41:a4:1c:32:05:25:e7:ce:7d:d4:c5:64:c6:b6:
         4f:40:b7:ce:a8:a1:8d:ce:00:b4:5b:e7:05:bd:3b:cd:68:19:
         02:63:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:43 2025 by rpki-client