Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          I0uAV51hTlylhQXSBZSgGtzzEuvc35k0AbIhYzH1/C0=
Subject key identifier:   86:F0:23:2C:87:4A:95:C3:84:12:43:71:43:6F:76:36:0C:9F:43:95
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7D5E465221AC7A8A2FFE769D5764E66299149513
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time:             Mon 04 Aug 2025 06:14:55 +0000
ROA not before:           Mon 04 Aug 2025 06:09:55 +0000
ROA not after:            Mon 03 Aug 2026 06:14:55 +0000
asID:                     834
IP address blocks:        104.234.3.0/24 maxlen: 24
                          104.234.92.0/23 maxlen: 24
                          104.234.119.0/24 maxlen: 24
                          104.234.136.0/24 maxlen: 24
                          104.234.192.0/24 maxlen: 24
                          104.234.194.0/24 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.202.0/23 maxlen: 24
                          104.234.206.0/23 maxlen: 24
                          104.234.209.0/24 maxlen: 24
                          206.53.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5e:46:52:21:ac:7a:8a:2f:fe:76:9d:57:64:e6:62:99:14:95:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  4 06:09:55 2025 GMT
            Not After : Aug  3 06:14:55 2026 GMT
        Subject: CN=86F0232C874A95C384124371436F76360C9F4395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:98:5a:11:e4:40:72:44:fd:b5:88:50:e3:
                    e4:86:93:8b:bd:cc:2d:2c:41:cc:1f:d4:26:ee:57:
                    b9:1e:d9:12:fa:b9:d6:30:71:6c:07:8e:60:2f:ba:
                    42:77:0f:dc:cc:08:ce:66:a9:89:e0:78:12:f3:fd:
                    e9:90:a2:0b:cf:ea:f9:0a:29:6f:f6:28:93:7b:b1:
                    67:e7:4c:00:96:a0:04:bd:c9:f9:38:0c:3d:a7:e3:
                    f0:8c:aa:56:4c:9b:7d:19:62:50:d6:3d:b3:a3:6e:
                    91:5f:4d:a6:5e:7a:a5:14:f7:e8:1a:4a:8c:f5:28:
                    7d:e5:54:0f:a9:86:8a:a3:f3:ec:60:40:93:67:ba:
                    b9:2f:fb:4b:fd:d8:3e:f6:a2:25:5e:30:a9:7c:4f:
                    55:58:92:b4:66:38:de:cb:9a:f2:47:0a:5f:27:58:
                    54:cb:2a:f0:4e:4f:95:78:2e:f4:c7:40:67:0d:6b:
                    f9:4e:8b:23:72:41:c0:8f:f4:f0:ef:06:ab:cc:98:
                    c8:b3:6e:f2:93:5a:82:c5:66:b6:39:23:fb:7e:bf:
                    f4:de:fb:c7:df:51:c5:5b:bc:23:23:8f:b5:64:b6:
                    2d:0d:f3:52:9d:da:2b:3a:ad:5f:c8:1a:a3:49:62:
                    05:f7:c8:1d:e9:63:e8:b8:c2:6d:6d:8d:c9:e5:d7:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F0:23:2C:87:4A:95:C3:84:12:43:71:43:6F:76:36:0C:9F:43:95
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.3.0/24
                  104.234.92.0/23
                  104.234.119.0/24
                  104.234.136.0/24
                  104.234.192.0/24
                  104.234.194.0/24
                  104.234.201.0-104.234.203.255
                  104.234.206.0/23
                  104.234.209.0/24
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:0c:56:76:b6:01:70:10:85:47:3c:07:e0:1e:0a:89:bd:
         07:7e:e1:e7:7d:71:80:43:f6:34:c6:15:7d:46:a1:9a:05:d9:
         6f:e7:7f:75:3a:d4:8c:43:5e:58:65:1b:76:5b:e6:af:4a:af:
         2b:fe:9c:e1:52:e3:88:53:e1:12:77:f4:ae:53:b4:cb:b4:ee:
         cb:9d:58:64:89:fc:a0:bb:18:18:7f:59:94:1b:a0:b8:b4:2b:
         73:80:61:51:63:0b:68:37:68:e8:88:3f:44:7d:f2:69:e6:af:
         76:c5:c9:5b:aa:18:82:c6:79:b1:8c:54:4f:65:66:c7:f2:bf:
         99:c3:59:f0:90:88:6b:d1:2e:78:26:c2:fc:ec:32:03:43:5d:
         4b:c0:fb:4f:ed:d4:7f:c9:22:99:97:1d:22:36:2e:c4:fb:25:
         1f:d5:9a:b6:55:e6:13:5c:cc:6f:f3:fb:c3:4f:0b:47:8f:6e:
         d0:03:a2:ee:90:f7:df:86:94:31:a0:cf:9d:f9:fa:39:2f:22:
         fa:ad:bb:db:4c:61:6a:f2:97:2e:f1:b6:a0:06:a5:8a:34:66:
         b1:12:e5:52:38:e6:74:e4:f0:e0:f2:ed:5e:d4:2a:3c:96:e0:
         bb:c2:28:a9:97:80:46:78:05:1d:3a:f6:10:49:65:73:a2:c2:
         4e:90:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:02 2025 by rpki-client