Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          KtLvGqRk+2fHhTh8zEYbZ5vk21uv7KCit2uJ30NOok8=
Subject key identifier:   4B:DB:7B:67:1E:A8:5B:A7:EA:23:30:4C:49:DA:57:42:10:5C:2B:BF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       17F6EC3C989C3AD3D2CAC800A80795CC9EFFF5F8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Mon 27 Jul 2026 14:36:08 +0000
ROA not before:           Mon 27 Jul 2026 14:31:08 +0000
ROA not after:            Mon 26 Jul 2027 14:36:08 +0000
asID:                     834
IP address blocks:        64.50.162.0/23 maxlen: 24
                          64.50.165.0/24 maxlen: 24
                          64.50.180.0/24 maxlen: 24
                          64.50.182.0/24 maxlen: 24
                          64.50.185.0/24 maxlen: 24
                          67.210.101.0/24 maxlen: 24
                          67.210.105.0/24 maxlen: 24
                          67.210.121.0/24 maxlen: 24
                          74.50.1.0/24 maxlen: 24
                          74.50.3.0/24 maxlen: 24
                          74.50.4.0/24 maxlen: 24
                          74.50.8.0/24 maxlen: 24
                          74.50.14.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.112.0/24 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.121.0/24 maxlen: 24
                          192.228.123.0/24 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.229.0/24 maxlen: 24
                          209.200.236.0/24 maxlen: 24
                          216.97.225.0/24 maxlen: 24
                          216.97.226.0/23 maxlen: 24
                          216.97.229.0/24 maxlen: 24
                          216.97.235.0/24 maxlen: 24
                          216.227.216.0/23 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f6:ec:3c:98:9c:3a:d3:d2:ca:c8:00:a8:07:95:cc:9e:ff:f5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 27 14:31:08 2026 GMT
            Not After : Jul 26 14:36:08 2027 GMT
        Subject: CN=4BDB7B671EA85BA7EA23304C49DA5742105C2BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:b3:ac:06:12:8e:1e:d7:cb:af:a9:93:28:
                    34:35:05:8e:6f:34:ee:7e:68:81:40:dc:a7:17:d2:
                    63:1c:41:74:24:58:22:21:fc:30:e5:01:87:51:fb:
                    e8:57:b4:ec:e4:11:59:e8:47:cb:5f:1b:a0:de:f1:
                    30:87:29:e3:a0:cb:2a:60:eb:0f:d9:ea:2c:93:70:
                    33:12:35:9b:08:ca:cf:0a:e2:87:15:2c:cd:69:1a:
                    67:d5:7f:67:71:49:68:c7:0b:26:7a:e0:8b:9d:3a:
                    f7:7a:ce:19:ad:72:f3:07:f0:33:b4:62:7f:c4:0c:
                    3f:0b:1d:4c:6e:29:5d:17:cd:e7:38:da:00:21:47:
                    29:d5:3a:70:ac:38:3b:52:42:d1:4c:bc:78:2c:9d:
                    6d:65:e6:1b:99:c2:81:17:42:8f:a3:ff:c8:d6:0c:
                    de:2c:f6:2b:f7:1e:bd:55:57:c2:b3:f9:4e:ee:50:
                    0b:5d:e9:eb:9a:80:de:05:7a:b9:d4:8e:76:f7:c6:
                    6a:74:a2:fb:41:90:ce:eb:e0:7f:d0:cf:62:04:db:
                    45:5d:71:3a:1a:1c:86:e9:1f:81:66:24:c0:a6:ed:
                    d8:f3:05:18:36:fd:d2:36:f8:da:e7:14:8c:ee:35:
                    5d:07:f0:76:5d:26:fa:6b:2a:c9:ef:52:c5:73:b4:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:7B:67:1E:A8:5B:A7:EA:23:30:4C:49:DA:57:42:10:5C:2B:BF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.162.0/23
                  64.50.165.0/24
                  64.50.180.0/24
                  64.50.182.0/24
                  64.50.185.0/24
                  67.210.101.0/24
                  67.210.105.0/24
                  67.210.121.0/24
                  74.50.1.0/24
                  74.50.3.0-74.50.4.255
                  74.50.8.0/24
                  74.50.14.0/24
                  190.92.165.0-190.92.167.255
                  192.228.112.0/24
                  192.228.115.0/24
                  192.228.121.0/24
                  192.228.123.0/24
                  198.23.186.0/24
                  209.200.229.0/24
                  209.200.236.0/24
                  216.97.225.0-216.97.227.255
                  216.97.229.0/24
                  216.97.235.0/24
                  216.227.216.0/23
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:66:8c:38:9b:cc:ac:fe:67:26:6b:f4:b6:ef:30:01:0f:
         81:21:ff:3e:5c:52:f6:ed:aa:ae:cb:cc:0d:21:c2:a8:4d:8a:
         8f:81:c9:d6:9e:50:18:5b:d9:62:69:a1:1b:d7:e4:de:16:b4:
         41:c2:fb:21:c8:c4:89:46:11:7a:07:ef:de:ae:f1:76:d9:9b:
         b3:46:27:72:fe:27:16:ae:9b:f5:e6:5a:b7:c3:a0:14:72:3c:
         d7:8c:d5:88:ad:9c:bd:af:6b:18:9f:bb:cf:f3:03:f8:61:90:
         9a:cf:34:c1:e8:37:f9:4e:2e:9b:9e:2e:d4:36:3e:5a:a2:73:
         48:cb:4f:99:ce:9a:2a:ad:f9:2f:68:f2:d3:f2:09:3a:77:eb:
         39:5b:54:e1:73:d8:2c:3c:2b:a7:fc:fa:ef:31:71:75:95:52:
         3c:6b:ec:2c:75:a9:78:0f:3e:48:a9:2d:94:a5:fe:ec:96:80:
         85:a8:22:9c:d5:32:7b:ba:4d:05:6d:d5:18:2d:4c:99:d4:a3:
         d3:bb:52:50:5b:83:03:43:18:56:f2:09:07:94:fb:d8:64:d4:
         f9:5a:2a:4f:b5:f9:67:60:15:42:f7:00:5f:f7:8f:05:82:5a:
         15:67:a1:9e:a0:21:b1:1d:31:3a:7c:1b:53:58:a4:44:c2:01:
         af:64:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:05:44 2026 by rpki-client