Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          Ekv3OYkda6NG8dSqVHhJKf3S6CuXUSqUw1tELRYlcuA=
Subject key identifier:   66:AC:D8:4B:C7:DD:F0:B2:29:A2:66:35:DB:15:C2:1D:1F:ED:78:56
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6778C540CB894504DB73E1CF20558A1B3C00B70D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Thu 05 Nov 2026 08:47:52 +0000
ROA not before:           Thu 05 Nov 2026 08:42:52 +0000
ROA not after:            Thu 04 Nov 2027 08:47:52 +0000
asID:                     834
IP address blocks:        157.254.0.0/24 maxlen: 24
                          157.254.130.0/24 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.191.0/24 maxlen: 24
                          157.254.204.0/24 maxlen: 24
                          157.254.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 16:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:78:c5:40:cb:89:45:04:db:73:e1:cf:20:55:8a:1b:3c:00:b7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov  5 08:42:52 2026 GMT
            Not After : Nov  4 08:47:52 2027 GMT
        Subject: CN=66ACD84BC7DDF0B229A26635DB15C21D1FED7856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:9b:84:fb:aa:66:89:33:0d:bd:c5:d1:ce:
                    bf:03:cf:7e:43:c1:4f:95:d2:95:30:4c:50:fa:d0:
                    48:30:94:b1:80:0a:ec:60:3c:97:d5:29:6d:a9:97:
                    b4:50:cd:ad:c0:fc:06:26:b0:f1:b9:46:4c:ae:7d:
                    b6:5e:57:d2:a8:7e:39:ab:d6:49:e9:c0:ad:56:af:
                    5d:da:c0:6f:d2:94:9d:a8:c1:ac:29:2a:12:1d:cc:
                    4c:ea:91:89:04:b5:09:8a:61:41:62:1f:67:5a:52:
                    00:48:50:31:02:9d:68:71:87:69:5d:9e:a7:b2:73:
                    18:ff:06:29:94:11:90:86:e0:f1:b1:fa:c9:f1:5b:
                    8b:21:ed:22:54:27:d2:4f:4e:5c:ed:c8:9c:76:8d:
                    0f:f2:81:c4:df:32:85:2d:c3:3b:03:aa:96:3c:c3:
                    83:f1:0b:65:53:9f:7a:40:c2:7b:43:5f:ce:a7:68:
                    6c:e7:bb:13:dc:53:13:67:0b:33:00:17:70:54:ce:
                    2a:7b:e8:99:6e:0d:3b:94:28:eb:06:0b:93:f7:2d:
                    10:71:d0:a4:7e:12:02:6e:fe:24:ab:f7:a6:cd:ef:
                    3a:04:fc:ff:b2:a4:14:a8:5e:28:f8:16:06:f6:02:
                    f2:17:42:61:bb:4d:05:a3:ba:90:d8:80:ad:ad:71:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:D8:4B:C7:DD:F0:B2:29:A2:66:35:DB:15:C2:1D:1F:ED:78:56
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/24
                  157.254.130.0/24
                  157.254.144.0/21
                  157.254.191.0/24
                  157.254.204.0/24
                  157.254.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c5:09:c3:37:13:32:82:73:32:2b:af:a7:85:b5:8a:b9:35:
         4f:db:61:66:3e:95:91:49:89:41:e5:98:40:43:b6:61:4c:c0:
         f6:43:49:48:23:7d:a3:5a:ab:ca:3a:ab:a0:f1:42:5e:aa:f0:
         30:04:a6:ee:89:a5:f9:eb:bf:0f:d0:17:fe:fa:67:ff:57:22:
         23:66:35:8d:38:48:d1:a0:38:b8:d2:2a:af:73:0e:19:06:3e:
         05:c0:d7:af:66:20:31:eb:bb:21:fe:e4:62:45:8e:dd:29:15:
         a4:79:68:2e:bc:81:ae:4c:2f:f8:23:a5:44:5c:89:86:aa:09:
         f6:d4:e4:3d:c8:f2:bb:7a:6b:b9:0a:f3:42:6d:de:84:2b:37:
         fe:d7:e6:6f:42:22:f1:2a:4d:26:a2:c7:a3:1a:c0:5d:0f:61:
         4e:6d:bb:c8:98:69:89:f9:ee:91:eb:77:d2:be:fc:1a:5c:9e:
         75:57:78:47:0e:28:5d:7e:ab:cc:3c:f6:2f:b4:6f:73:94:3d:
         bc:1d:66:fd:67:be:13:f5:f7:ac:e1:8a:ab:c0:dd:e6:8d:af:
         45:37:e2:61:52:c0:64:0a:1b:7a:08:69:50:03:7a:fb:08:25:
         26:26:9c:fe:eb:e6:75:6b:20:ae:3c:6f:5d:96:fa:cb:37:cc:
         2f:6e:11:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:01:58 2026 by rpki-client