Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          qv6NxhHnwWTXYHZDdygxz3MVZ+Xbip8tyI8NB2Wc+y0=
Subject key identifier:   2C:03:4A:63:0F:8E:0C:26:CC:C0:D7:5C:C8:8E:A3:2B:D1:4A:1C:88
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       25F1D4B6779DC5484F243B1BA437A024F27BCAB2
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Mon 04 Aug 2025 00:05:37 +0000
ROA not before:           Mon 04 Aug 2025 00:00:37 +0000
ROA not after:            Mon 03 Aug 2026 00:05:37 +0000
asID:                     834
IP address blocks:        157.254.8.0/23 maxlen: 24
                          157.254.15.0/24 maxlen: 24
                          157.254.25.0/24 maxlen: 24
                          157.254.29.0/24 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.166.0/24 maxlen: 24
                          157.254.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:d4:b6:77:9d:c5:48:4f:24:3b:1b:a4:37:a0:24:f2:7b:ca:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  4 00:00:37 2025 GMT
            Not After : Aug  3 00:05:37 2026 GMT
        Subject: CN=2C034A630F8E0C26CCC0D75CC88EA32BD14A1C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:e7:5e:2d:8c:b8:31:dd:5e:fb:40:5b:b4:
                    48:2b:43:c2:5a:3e:d6:f4:2c:81:e3:e5:61:56:aa:
                    4a:d7:c9:72:27:24:de:3e:c4:7e:fa:71:2c:c0:cd:
                    76:5a:8a:f7:63:dd:dc:2e:10:35:98:3d:a4:c9:34:
                    81:72:a8:d9:0f:2e:f5:88:d1:07:40:e9:1c:2c:7f:
                    55:c7:ac:77:38:74:d5:bf:e9:23:12:f5:96:5d:af:
                    49:d1:7e:a4:16:e8:7b:b6:74:0f:ff:0c:96:cc:41:
                    05:13:f9:4e:2f:13:74:b6:d7:65:b0:19:c2:cd:be:
                    4a:fa:b0:27:cb:50:09:8d:15:31:a5:79:74:e5:f1:
                    a3:c7:88:85:4f:1a:a4:f8:44:9b:74:ec:9e:60:d3:
                    ff:b7:ac:1c:fe:f4:9b:40:c9:fe:c8:1f:ab:17:b5:
                    34:a2:12:53:36:0b:89:f7:45:f1:d5:db:65:f7:7a:
                    65:80:9d:32:de:c3:79:4d:53:15:c1:7b:1e:60:d9:
                    88:b3:a4:76:a8:f3:d2:d4:20:47:27:e4:1b:7a:12:
                    06:4b:91:c3:e8:a6:e7:8e:71:9f:bc:b2:67:91:f3:
                    c9:8e:47:0e:b2:b3:3d:dd:00:20:ad:bf:56:f0:5a:
                    24:0f:4e:3c:49:99:1e:ee:dc:52:f9:ed:f6:a3:8a:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:03:4A:63:0F:8E:0C:26:CC:C0:D7:5C:C8:8E:A3:2B:D1:4A:1C:88
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.8.0/23
                  157.254.15.0/24
                  157.254.25.0/24
                  157.254.29.0/24
                  157.254.144.0/21
                  157.254.166.0/24
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:9b:90:14:ca:59:b3:11:35:6f:16:8d:ea:9c:61:0e:71:
         61:f3:9a:6b:2f:9d:17:a2:c4:d9:71:a8:5f:12:4a:8d:6d:7d:
         50:9a:0f:77:e9:fa:10:0c:4b:5e:b1:7b:53:ef:54:4b:27:89:
         4f:c2:2b:f9:34:f1:3b:6a:ef:f6:e0:af:f5:91:20:c6:79:88:
         6d:d5:e8:cd:85:21:c2:be:6a:ad:c0:c4:1f:a2:41:0f:a4:9d:
         0c:59:4d:12:83:ff:9c:c2:36:6c:0c:7d:85:63:90:81:1c:e2:
         bb:e2:3d:b0:33:85:19:50:b4:dc:2e:ff:ac:81:92:d8:73:6e:
         0f:b1:79:8a:94:76:9f:1e:4f:ef:11:be:21:42:89:76:bc:7f:
         24:b0:0b:f0:3a:0d:7d:e1:ba:a2:c9:44:17:6e:55:eb:db:0c:
         6f:a5:21:18:d3:23:93:c1:60:63:d8:f5:17:6a:6f:52:e8:01:
         2c:0b:bb:fb:b8:16:d6:3a:cb:b9:3b:52:05:ab:05:90:2b:ef:
         27:be:91:b5:eb:7c:b3:a8:87:5c:8a:23:53:05:da:8d:80:59:
         83:1c:40:70:30:6f:25:b4:0b:87:5d:6f:90:8b:fc:f4:7f:67:
         28:fa:4f:18:69:0c:ab:b0:1e:9d:80:02:b9:1e:e8:79:5b:a4:
         7b:50:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:29 2025 by rpki-client