Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          zTVERFKnTj2r7QalHjf189WrLR82fEchkutja0xFbmw=
Subject key identifier:   06:31:0B:97:26:9F:A8:DF:2C:91:B7:1C:98:51:01:3A:26:09:0A:6A
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2D5DD53EC8A8AC4C3F99C0A3BC1FB57CCC6C6CA0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time:             Sat 13 Jun 2026 00:03:13 +0000
ROA not before:           Fri 12 Jun 2026 23:58:13 +0000
ROA not after:            Sat 12 Jun 2027 00:03:13 +0000
asID:                     834
IP address blocks:        104.234.4.0/24 maxlen: 24
                          104.234.24.0/23 maxlen: 24
                          104.234.58.0/24 maxlen: 24
                          104.234.107.0/24 maxlen: 24
                          104.234.112.0/24 maxlen: 24
                          104.234.114.0/23 maxlen: 24
                          104.234.136.0/24 maxlen: 24
                          104.234.151.0/24 maxlen: 24
                          104.234.156.0/23 maxlen: 24
                          104.234.159.0/24 maxlen: 24
                          104.234.192.0/23 maxlen: 24
                          104.234.194.0/24 maxlen: 24
                          104.234.196.0/24 maxlen: 24
                          104.234.198.0/23 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.202.0/23 maxlen: 24
                          104.234.206.0/23 maxlen: 24
                          104.234.243.0/24 maxlen: 24
                          206.53.56.0/24 maxlen: 24
                          206.53.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5d:d5:3e:c8:a8:ac:4c:3f:99:c0:a3:bc:1f:b5:7c:cc:6c:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 12 23:58:13 2026 GMT
            Not After : Jun 12 00:03:13 2027 GMT
        Subject: CN=06310B97269FA8DF2C91B71C9851013A26090A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:6d:ce:ae:1d:81:d4:9d:8a:ce:c5:a9:1b:
                    66:f1:5d:b6:59:e3:7c:9b:41:25:e6:f9:54:50:2d:
                    22:e6:6e:b4:da:17:56:15:da:62:de:96:ad:61:e6:
                    0a:22:ab:6c:90:ae:54:39:3e:a0:61:e8:f9:04:69:
                    b6:91:f3:25:c9:95:e4:5d:b3:f8:9c:6d:69:f9:24:
                    ef:83:e5:59:91:15:97:48:61:9f:d3:77:d3:8b:a0:
                    4b:ea:a1:60:e1:60:27:37:b9:44:46:83:8c:f5:ce:
                    5b:0c:14:77:59:74:f4:e4:41:2c:a7:73:04:0d:8b:
                    5a:f3:31:7d:27:c9:86:50:4f:96:56:11:46:2b:51:
                    d3:0d:1c:46:18:50:71:71:86:dd:0e:c8:36:24:63:
                    b0:cf:32:c4:e4:9b:85:09:5f:51:1e:e2:59:9e:ac:
                    8f:4f:b7:1e:58:8d:ae:68:a2:aa:68:22:30:94:51:
                    fa:b5:36:5b:13:c0:e8:b1:cf:0e:f8:ec:b2:44:56:
                    7b:e8:39:7a:0d:7b:2b:73:bc:7e:f8:3b:66:09:6d:
                    41:cb:6d:b0:17:1b:3a:e1:0e:cd:fd:b4:76:55:d6:
                    65:00:42:ce:14:fd:0a:26:42:c0:53:64:92:ed:fd:
                    1c:b8:d0:12:ab:46:d2:1b:ad:b3:88:61:6e:76:25:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:31:0B:97:26:9F:A8:DF:2C:91:B7:1C:98:51:01:3A:26:09:0A:6A
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.4.0/24
                  104.234.24.0/23
                  104.234.58.0/24
                  104.234.107.0/24
                  104.234.112.0/24
                  104.234.114.0/23
                  104.234.136.0/24
                  104.234.151.0/24
                  104.234.156.0/23
                  104.234.159.0/24
                  104.234.192.0-104.234.194.255
                  104.234.196.0/24
                  104.234.198.0/23
                  104.234.201.0-104.234.203.255
                  104.234.206.0/23
                  104.234.243.0/24
                  206.53.56.0/24
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:3e:38:70:d3:da:cc:6e:13:74:e3:6a:e0:f2:90:95:21:
         f9:20:2a:98:53:cc:f5:83:52:62:c5:79:82:f5:7e:c5:e4:72:
         97:10:cd:b2:18:25:33:78:6c:98:fd:34:54:bb:08:ec:9d:f2:
         86:8f:85:44:15:4b:fa:f1:0e:50:a9:ad:a7:9d:ee:08:82:f1:
         df:73:c1:53:61:84:39:bf:dd:80:09:09:0e:fb:93:c9:13:b2:
         50:72:a1:30:fb:12:d5:16:a4:ef:b6:5a:56:ba:8c:c4:c4:bf:
         e7:15:a3:a5:af:52:80:4c:5b:bc:d0:8e:57:81:ed:4f:cc:4d:
         50:af:a8:0e:35:cf:70:0e:62:8e:0c:71:74:8f:52:ee:cd:73:
         8f:c6:dc:c9:5e:01:ff:ba:e8:8f:f2:ba:a3:70:58:89:ce:c7:
         d4:9f:e2:17:1e:3d:13:93:87:6b:97:ae:f6:d4:75:e3:0e:37:
         03:9c:49:3d:39:54:3f:d4:a5:19:5c:ce:61:4b:4c:b3:0d:ea:
         0a:50:6c:23:0b:ca:41:3e:06:b6:58:64:de:6e:83:93:19:ab:
         39:04:1f:d5:79:09:1d:6a:ef:64:dd:7d:00:e1:33:af:ec:1b:
         c3:ea:36:c7:3b:25:09:a7:ff:8f:9f:f2:3a:a9:63:71:2c:01:
         e3:0f:12:4c
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgIULV3VPsiorEw/mcCjvB+1fMxsbKAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNjEyMjM1ODEzWhcNMjcwNjEyMDAwMzEz
WjAzMTEwLwYDVQQDEygwNjMxMEI5NzI2OUZBOERGMkM5MUI3MUM5ODUxMDEzQTI2
MDkwQTZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCRtzq4dgdSd
is7FqRtm8V22WeN8m0El5vlUUC0i5m602hdWFdpi3patYeYKIqtskK5UOT6gYej5
BGm2kfMlyZXkXbP4nG1p+STvg+VZkRWXSGGf03fTi6BL6qFg4WAnN7lERoOM9c5b
DBR3WXT05EEsp3MEDYta8zF9J8mGUE+WVhFGK1HTDRxGGFBxcYbdDsg2JGOwzzLE
5JuFCV9RHuJZnqyPT7ceWI2uaKKqaCIwlFH6tTZbE8Dosc8O+OyyRFZ76Dl6DXsr
c7x++DtmCW1By22wFxs64Q7N/bR2VdZlAELOFP0KJkLAU2SS7f0cuNASq0bSG62z
iGFudiXk5wIDAQABo4IC9jCCAvIwHQYDVR0OBBYEFAYxC5cmn6jfLJG3HJhRATom
CQpqMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBmAYI
KwYBBQUHAQcBAf8EgYgwgYUwgYIEAgABMHwDBABo6gQDBAFo6hgDBABo6joDBABo
6msDBABo6nADBAFo6nIDBABo6ogDBABo6pcDBAFo6pwDBABo6p8wDAMEBmjqwAME
AGjqwgMEAGjqxAMEAWjqxjAMAwQAaOrJAwQCaOrIAwQBaOrOAwQAaOrzAwQAzjU4
AwQAzjU/MA0GCSqGSIb3DQEBCwUAA4IBAQAAwj44cNPazG4TdONq4PKQlSH5ICqY
U8z1g1JixXmC9X7F5HKXEM2yGCUzeGyY/TRUuwjsnfKGj4VEFUv68Q5Qqa2nne4I
gvHfc8FTYYQ5v92ACQkO+5PJE7JQcqEw+xLVFqTvtlpWuozExL/nFaOlr1KATFu8
0I5Xge1PzE1Qr6gONc9wDmKODHF0j1LuzXOPxtzJXgH/uuiP8rqjcFiJzsfUn+IX
Hj0Tk4drl6721HXjDjcDnEk9OVQ/1KUZXM5hS0yzDeoKUGwjC8pBPga2WGTeboOT
Gas5BB/VeQkdau9k3X0A4TOv7BvD6jbHOyUJp/+Pn/I6qWNxLAHjDxJM
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:38:00 2026 by rpki-client