Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          x+hWYsnjZELilm38YNb0nZ1YLiwA/qGpphnJSq1Tp/A=
Subject key identifier:   A4:FA:DD:B3:14:20:3C:99:26:C2:0D:6E:FE:CC:68:3D:0C:33:5A:E2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1CF5E37FF84B1781A5780DA1D4545142D8E71724
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Sat 26 Apr 2025 06:24:07 +0000
ROA not before:           Sat 26 Apr 2025 06:19:07 +0000
ROA not after:            Sat 25 Apr 2026 06:24:07 +0000
asID:                     834
IP address blocks:        64.50.160.0/24 maxlen: 24
                          64.50.165.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.185.0/24 maxlen: 24
                          64.50.186.0/24 maxlen: 24
                          67.210.103.0/24 maxlen: 24
                          67.210.104.0/24 maxlen: 24
                          67.210.111.0/24 maxlen: 24
                          74.50.7.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.112.0/24 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.120.0/23 maxlen: 24
                          192.228.123.0/24 maxlen: 24
                          192.228.126.0/23 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.228.0/23 maxlen: 24
                          209.200.233.0/24 maxlen: 24
                          209.200.234.0/23 maxlen: 24
                          209.200.236.0/24 maxlen: 24
                          209.200.238.0/24 maxlen: 24
                          209.200.242.0/23 maxlen: 24
                          216.97.225.0/24 maxlen: 24
                          216.97.226.0/24 maxlen: 24
                          216.97.228.0/23 maxlen: 24
                          216.97.235.0/24 maxlen: 24
                          216.227.218.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f5:e3:7f:f8:4b:17:81:a5:78:0d:a1:d4:54:51:42:d8:e7:17:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 26 06:19:07 2025 GMT
            Not After : Apr 25 06:24:07 2026 GMT
        Subject: CN=A4FADDB314203C9926C20D6EFECC683D0C335AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:bb:c1:40:33:12:8f:f4:03:3f:9d:5f:e7:
                    bb:b6:eb:02:b0:62:be:55:0d:7f:fa:a0:21:a0:66:
                    61:5b:1f:83:a1:03:dd:63:46:32:c4:b2:2e:59:c5:
                    f9:a7:7d:1e:b6:ea:07:82:3e:69:7b:33:e1:0d:ba:
                    6b:1c:4e:63:58:c6:f6:bd:89:09:38:e6:c1:c6:93:
                    b2:b5:cf:62:e1:81:9a:66:d2:cb:b2:ee:f3:2c:ac:
                    08:19:7f:24:ab:08:6f:93:61:5b:58:27:d6:d0:ca:
                    f5:5d:33:52:a1:9f:fb:96:a8:ce:d7:b4:9a:f0:61:
                    ff:56:22:61:6f:d5:55:2a:f3:af:92:1b:e6:39:dc:
                    fd:d0:25:4f:1f:dd:4e:f3:3d:80:22:1e:9c:0a:89:
                    68:57:9f:d8:0b:ea:1d:6e:32:c4:ca:ce:b2:89:cb:
                    d5:55:5b:74:16:cf:1b:8a:3b:d5:c7:78:77:5e:5f:
                    98:89:bf:c0:e3:5c:91:58:76:b8:bc:ae:41:79:53:
                    82:4d:ac:d1:2c:39:97:db:74:ea:1f:35:c7:3a:ce:
                    2a:1d:d1:dd:23:07:6b:03:67:7d:0d:fb:da:26:99:
                    a7:8d:c2:92:fa:bb:bf:f1:d8:dc:4d:7a:31:c2:9e:
                    da:c3:b5:f0:7b:9c:bc:27:ce:41:11:43:29:34:00:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:DD:B3:14:20:3C:99:26:C2:0D:6E:FE:CC:68:3D:0C:33:5A:E2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.160.0/24
                  64.50.165.0-64.50.166.255
                  64.50.185.0-64.50.186.255
                  67.210.103.0-67.210.104.255
                  67.210.111.0/24
                  74.50.7.0/24
                  190.92.165.0-190.92.167.255
                  192.228.112.0/24
                  192.228.115.0/24
                  192.228.120.0/23
                  192.228.123.0/24
                  192.228.126.0/23
                  198.23.186.0/24
                  209.200.228.0/23
                  209.200.233.0-209.200.236.255
                  209.200.238.0/24
                  209.200.242.0/23
                  216.97.225.0-216.97.226.255
                  216.97.228.0/23
                  216.97.235.0/24
                  216.227.218.0/24
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:42:d2:1f:0b:e9:9c:60:cd:93:ce:1c:9c:bc:2f:7e:e8:f8:
         45:1d:8a:45:30:73:46:00:c5:74:ff:36:13:fa:bf:0a:b0:02:
         d9:1a:b0:00:d7:36:57:76:fc:6c:04:b3:af:f5:1d:43:b4:6f:
         37:a5:a8:89:ea:67:83:c6:82:01:12:71:76:2b:02:c1:04:80:
         bd:46:ed:8d:94:8b:09:5f:30:48:85:6c:9e:84:e0:ce:fa:65:
         e2:48:2f:d7:98:cd:43:6f:93:9a:ed:47:98:d8:bf:83:cd:2f:
         45:30:6c:c7:b0:c5:75:db:d1:c5:6f:40:48:98:78:24:e5:bc:
         b0:06:6a:94:68:85:14:cc:1d:04:2c:eb:5b:68:bf:96:72:97:
         ab:2f:ec:23:c4:5d:52:09:cb:e4:d3:64:2d:65:c9:fb:2f:0d:
         14:0b:5b:98:d9:85:e2:4b:e4:93:eb:cb:0c:30:65:98:fa:55:
         8e:60:2f:e5:fe:02:56:34:f8:3a:d0:2a:75:5e:63:32:47:d2:
         5b:7f:7d:96:b5:e4:58:9d:8f:58:33:29:62:ed:14:52:a3:30:
         0b:f0:3f:03:9b:8c:43:63:78:df:2b:0a:b8:83:4b:54:30:95:
         8d:d9:45:8b:15:aa:23:9c:63:2d:ed:1e:6e:e9:ed:c9:51:b5:
         22:03:c2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:51:19 2025 by rpki-client