Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          5EQ8iuObcWCak51sZVCYLlyCnmMd6F1mBsGnWkIXTNM=
Subject key identifier:   59:8B:D7:DF:F4:4A:1E:AE:88:41:6A:75:DE:F9:92:93:5F:7E:69:42
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       3118A94D87CECBCFD40CB8D651F925313320F235
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa
Signing time:             Sun 15 Nov 2026 00:06:13 +0000
ROA not before:           Sun 15 Nov 2026 00:01:13 +0000
ROA not after:            Sun 14 Nov 2027 00:06:13 +0000
asID:                     834
IP address blocks:        207.180.25.0/24 maxlen: 24
                          207.180.34.0/23 maxlen: 24
                          207.180.36.0/24 maxlen: 24
                          207.180.42.0/24 maxlen: 24
                          207.180.48.0/24 maxlen: 24
                          207.180.51.0/24 maxlen: 24
                          207.180.53.0/24 maxlen: 24
                          207.180.58.0/24 maxlen: 24
                          216.75.141.0/24 maxlen: 24
                          216.75.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 22:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:18:a9:4d:87:ce:cb:cf:d4:0c:b8:d6:51:f9:25:31:33:20:f2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Nov 15 00:01:13 2026 GMT
            Not After : Nov 14 00:06:13 2027 GMT
        Subject: CN=598BD7DFF44A1EAE88416A75DEF992935F7E6942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:7a:1b:f5:3b:c5:3a:03:aa:ce:63:06:49:
                    46:94:0f:f6:df:40:04:f8:8f:c6:75:03:f7:f1:8f:
                    82:13:7d:5c:ab:4c:b0:18:c2:39:02:64:2a:fd:6b:
                    69:90:4a:3a:b7:1e:77:ca:26:38:4f:62:52:ce:06:
                    63:cb:37:0c:1b:30:74:cb:df:fc:a1:ac:69:83:56:
                    66:5d:31:ac:fb:25:af:63:bb:47:7a:1c:a9:67:ef:
                    32:04:1f:fb:77:8f:3e:25:71:c3:b1:1c:81:e3:cb:
                    3b:a2:5d:86:70:60:fc:85:ec:26:e7:ef:ea:22:78:
                    0e:36:19:00:bb:2a:74:9c:a5:8a:be:1c:25:a9:8f:
                    08:47:90:1a:4d:d4:98:d8:3e:9e:7e:98:6a:69:e2:
                    c4:56:87:a4:d7:f6:de:7e:6d:0d:67:e0:28:21:d5:
                    43:cf:0c:40:72:7c:ef:ea:ec:5a:78:ad:e6:56:02:
                    03:2e:38:35:a6:6a:75:f4:2e:17:20:56:8f:5f:5c:
                    12:78:3b:76:00:78:96:c2:7c:da:23:72:92:c7:a7:
                    43:b4:ad:f0:67:45:55:eb:a3:87:2b:00:a8:9d:4b:
                    23:03:b5:36:ac:1e:b4:5e:a2:6d:ca:52:f2:ca:e0:
                    ba:07:5e:86:49:5b:62:6d:1c:26:b3:56:2d:47:d1:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:D7:DF:F4:4A:1E:AE:88:41:6A:75:DE:F9:92:93:5F:7E:69:42
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.25.0/24
                  207.180.34.0-207.180.36.255
                  207.180.42.0/24
                  207.180.48.0/24
                  207.180.51.0/24
                  207.180.53.0/24
                  207.180.58.0/24
                  216.75.141.0/24
                  216.75.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:35:ab:73:12:35:e6:ff:d3:9a:d2:4f:05:a8:b2:03:0b:78:
         e2:33:34:0b:40:d8:23:f1:f7:2f:dd:34:5d:e1:63:2a:1d:58:
         f5:2a:2e:4c:d6:9d:a4:9a:e7:7d:0c:ce:59:8c:07:c3:08:3e:
         7a:50:79:5b:8b:b2:bf:3a:b4:05:e6:e2:8b:e0:fc:1c:a8:57:
         e6:ee:e7:dc:84:3f:69:9a:7b:f9:71:cd:bd:ab:bb:dd:8a:41:
         4e:67:74:74:31:47:be:bf:51:b2:c5:e7:fc:ce:7c:91:24:a6:
         f8:16:06:15:d4:ed:1e:a1:6e:af:de:c1:0f:2a:c7:74:de:72:
         96:ad:80:02:e4:a6:9b:61:17:5f:d0:30:ef:f6:b5:20:de:fa:
         03:46:87:82:04:1e:71:d4:0d:54:f3:b8:64:6e:02:0d:15:0b:
         7e:83:07:1d:53:84:32:0f:1a:50:1b:b6:5d:1d:68:fd:89:c4:
         37:27:57:7e:de:13:51:75:df:2b:a7:f9:0e:3e:49:e0:36:cb:
         e2:e3:3a:d4:48:c0:8a:5f:4f:c7:a5:65:97:77:2d:8d:20:cb:
         58:74:03:fd:ff:36:eb:c0:77:7e:d7:42:2f:71:50:8e:09:93:
         29:45:12:5d:58:98:3e:6a:3c:1f:df:00:1e:a1:e7:43:a8:5f:
         f8:9c:16:4c
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUMRipTYfOy8/UDLjWUfklMTMg8jUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYxMTE1MDAwMTEzWhcNMjcxMTE0MDAwNjEz
WjAzMTEwLwYDVQQDEyg1OThCRDdERkY0NEExRUFFODg0MTZBNzVERUY5OTI5MzVG
N0U2OTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV16G/U7xToD
qs5jBklGlA/230AE+I/GdQP38Y+CE31cq0ywGMI5AmQq/WtpkEo6tx53yiY4T2JS
zgZjyzcMGzB0y9/8oaxpg1ZmXTGs+yWvY7tHehypZ+8yBB/7d48+JXHDsRyB48s7
ol2GcGD8hewm5+/qIngONhkAuyp0nKWKvhwlqY8IR5AaTdSY2D6efphqaeLEVoek
1/befm0NZ+AoIdVDzwxAcnzv6uxaeK3mVgIDLjg1pmp19C4XIFaPX1wSeDt2AHiW
wnzaI3KSx6dDtK3wZ0VV66OHKwConUsjA7U2rB60XqJtylLyyuC6B16GSVtibRwm
s1YtR9G29QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFFmL19/0Sh6uiEFqdd75kpNf
fmlCMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBXBggr
BgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEAM+0GTAMAwQBz7QiAwQAz7QkAwQAz7Qq
AwQAz7QwAwQAz7QzAwQAz7Q1AwQAz7Q6AwQA2EuNAwQA2EudMA0GCSqGSIb3DQEB
CwUAA4IBAQBZNatzEjXm/9Oa0k8FqLIDC3jiMzQLQNgj8fcv3TRd4WMqHVj1Ki5M
1p2kmud9DM5ZjAfDCD56UHlbi7K/OrQF5uKL4PwcqFfm7ufchD9pmnv5cc29q7vd
ikFOZ3R0MUe+v1Gyxef8znyRJKb4FgYV1O0eoW6v3sEPKsd03nKWrYAC5KabYRdf
0DDv9rUg3voDRoeCBB5x1A1U87hkbgINFQt+gwcdU4QyDxpQG7ZdHWj9icQ3J1d+
3hNRdd8rp/kOPkngNsvi4zrUSMCKX0/HpWWXdy2NIMtYdAP9/zbrwHd+10IvcVCO
CZMpRRJdWJg+ajwf3wAeoedDqF/4nBZM
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:40:10 2026 by rpki-client