Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          X7q7KbN+/ctJOdeM4huXr6Oergith9SaIFOGERavuOA=
Subject key identifier:   E4:67:ED:5C:36:9E:F8:E8:74:3A:51:6C:9B:C1:73:AB:EA:E5:64:49
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       40CEE8F0E980C141A6CB95637B81CE1498C31FF1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Sat 14 Jun 2025 11:51:40 +0000
ROA not before:           Sat 14 Jun 2025 11:46:40 +0000
ROA not after:            Sat 13 Jun 2026 11:51:40 +0000
asID:                     834
IP address blocks:        157.254.25.0/24 maxlen: 24
                          157.254.29.0/24 maxlen: 24
                          157.254.49.0/24 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.166.0/24 maxlen: 24
                          157.254.175.0/24 maxlen: 24
                          157.254.230.0/24 maxlen: 24
                          199.103.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ce:e8:f0:e9:80:c1:41:a6:cb:95:63:7b:81:ce:14:98:c3:1f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 14 11:46:40 2025 GMT
            Not After : Jun 13 11:51:40 2026 GMT
        Subject: CN=E467ED5C369EF8E8743A516C9BC173ABEAE56449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:c7:88:61:8a:71:3d:f9:40:a9:dd:68:12:
                    91:2a:9e:27:c6:81:b6:e6:b3:aa:5f:19:f6:f9:2d:
                    d6:bd:5f:02:2e:f7:87:a4:d9:72:9b:88:ba:71:2c:
                    0b:45:6d:cb:7f:ec:66:db:bd:e0:e5:1e:d8:59:4e:
                    e9:7c:bf:18:61:71:96:65:ef:40:d8:65:49:3b:ef:
                    31:4b:e7:78:76:f6:58:88:5c:4c:ff:ce:40:a8:ec:
                    13:b9:d7:48:ca:ad:58:24:3a:fd:cb:51:93:61:a2:
                    29:32:61:53:e6:62:e0:44:b0:75:be:29:c2:ce:a7:
                    59:a0:de:e2:ce:fd:2d:29:f4:0e:eb:9f:85:5d:52:
                    99:13:1e:f0:e7:b0:aa:45:de:93:31:b7:8f:90:9f:
                    ae:0a:c4:d9:88:89:6b:9d:6b:c9:c8:2b:4a:0f:63:
                    ab:be:da:5c:10:51:81:17:f0:85:1e:9c:2c:24:00:
                    18:be:1b:2a:6c:ae:7c:05:c5:8e:93:e4:cf:ff:ed:
                    5e:b9:22:6e:6c:d0:0c:88:4a:30:27:c9:af:ee:49:
                    55:ed:ed:c4:63:5b:94:61:6a:d0:33:2f:1c:8e:cc:
                    82:c0:25:1f:3d:c7:55:5d:0e:f5:93:0d:03:2b:f2:
                    cc:9e:e2:24:b9:8d:52:4c:5a:ef:a2:c0:65:ba:93:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:67:ED:5C:36:9E:F8:E8:74:3A:51:6C:9B:C1:73:AB:EA:E5:64:49
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.25.0/24
                  157.254.29.0/24
                  157.254.49.0/24
                  157.254.144.0/21
                  157.254.166.0/24
                  157.254.175.0/24
                  157.254.230.0/24
                  199.103.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:49:65:5f:7d:9a:dd:95:27:e1:95:07:e4:09:90:d6:18:
         65:3f:f4:07:68:66:8e:4f:83:83:e1:20:d5:81:6c:ee:44:04:
         53:31:66:db:11:d3:6d:a7:31:f4:c3:16:19:5f:36:49:46:10:
         e2:a5:d8:47:53:ee:b4:35:cf:cb:f4:9a:96:ea:f2:4d:2a:08:
         d3:b1:a5:3f:a7:a5:eb:49:80:c0:5f:9b:1e:2e:61:d4:08:12:
         f2:f5:8b:50:18:1f:d0:4f:e0:d5:11:b7:32:9d:2e:10:c5:95:
         ce:79:4b:57:b0:45:6e:77:12:e4:fc:1b:8f:36:0b:33:66:4d:
         b6:2f:c5:57:af:cf:6e:cf:8a:2f:03:f0:9d:ef:8a:f4:8b:45:
         aa:c2:67:ee:26:9e:6b:2c:80:04:f8:06:37:7b:b9:37:7b:9f:
         42:03:d3:b6:f1:5c:cd:c0:fa:48:8a:d8:f1:2a:f2:7b:cf:77:
         8d:6e:55:85:06:1e:34:40:de:b4:f9:ff:05:21:b0:45:4f:3c:
         7e:11:08:10:ba:49:5e:b5:68:7c:3e:d1:12:f2:2e:e1:ed:26:
         8c:d3:2d:b5:a2:3d:bb:f4:ca:bf:7e:2c:3b:7e:15:14:37:42:
         2a:1e:9d:a4:35:52:4d:de:bb:31:87:6e:57:55:d4:b1:05:e1:
         43:fa:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:25:47 2025 by rpki-client