Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          KUXMvLTDqiSEkO/4yugdI8eGG8fbbDdJpL5olpSzyao=
Subject key identifier:   65:E6:B4:51:F1:C1:BC:D7:8E:28:EC:EA:4F:0F:F2:7C:02:58:2C:5F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       025DD73767E3B7B278CFB13710F06CB316FC6726
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Sat 01 Nov 2025 00:14:45 +0000
ROA not before:           Sat 01 Nov 2025 00:09:45 +0000
ROA not after:            Sat 31 Oct 2026 00:14:45 +0000
asID:                     834
IP address blocks:        157.254.49.0/24 maxlen: 24
                          157.254.51.0/24 maxlen: 24
                          157.254.140.0/22 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.166.0/24 maxlen: 24
                          157.254.175.0/24 maxlen: 24
                          157.254.185.0/24 maxlen: 24
                          157.254.208.0/21 maxlen: 24
                          157.254.218.0/24 maxlen: 24
                          157.254.230.0/24 maxlen: 24
                          199.103.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 23:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5d:d7:37:67:e3:b7:b2:78:cf:b1:37:10:f0:6c:b3:16:fc:67:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov  1 00:09:45 2025 GMT
            Not After : Oct 31 00:14:45 2026 GMT
        Subject: CN=65E6B451F1C1BCD78E28ECEA4F0FF27C02582C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:01:5b:39:7d:b6:0d:f5:4a:14:a1:21:60:
                    61:ca:d3:32:a9:7e:49:94:9f:aa:47:25:f7:9b:2b:
                    65:bd:54:19:9f:30:0b:89:db:21:56:25:33:4b:3a:
                    5d:41:5d:b4:a2:9c:ed:99:f8:be:9e:7e:ab:f7:0f:
                    50:7b:2d:83:6f:a0:e8:0e:f0:31:ef:91:bb:35:d6:
                    d1:44:94:af:ff:e9:9e:53:3e:d2:49:18:10:a0:90:
                    f2:13:c3:01:8a:c2:7a:61:95:4b:e7:3e:ee:c1:d0:
                    b6:5a:c5:89:7a:45:ff:53:b1:70:5d:3e:56:7f:49:
                    63:be:bb:c9:47:2d:9d:61:c1:e3:09:cb:5d:60:ab:
                    33:2a:4f:29:92:91:76:94:53:b3:9d:5c:e1:07:0b:
                    83:23:1d:67:fd:13:ac:86:df:c0:b2:ae:ca:04:c0:
                    62:a3:86:8a:bb:62:df:2e:2f:96:f4:e5:59:3e:6c:
                    e1:98:5f:93:1d:f6:51:f7:6e:54:d1:6c:a5:8c:50:
                    f0:e0:6e:89:83:99:1d:ac:84:eb:a0:68:39:b5:0d:
                    95:47:db:c2:af:6c:40:09:ef:00:6c:f8:5d:b5:b1:
                    e9:8c:7f:14:e5:8b:5e:57:e9:c5:db:f9:f6:10:23:
                    e8:7b:36:d9:80:2b:c5:e6:e5:40:46:93:bd:88:50:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E6:B4:51:F1:C1:BC:D7:8E:28:EC:EA:4F:0F:F2:7C:02:58:2C:5F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.49.0/24
                  157.254.51.0/24
                  157.254.140.0-157.254.151.255
                  157.254.166.0/24
                  157.254.175.0/24
                  157.254.185.0/24
                  157.254.208.0/21
                  157.254.218.0/24
                  157.254.230.0/24
                  199.103.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:ab:ec:eb:31:d3:22:2d:94:53:7e:bd:84:96:6b:33:57:61:
         8a:e9:69:d6:52:aa:03:5a:61:c5:5c:fc:98:c1:ed:2f:ab:40:
         45:a7:f5:4c:e1:77:e8:41:37:f4:5d:a0:79:14:8b:cc:5b:e8:
         9a:55:d2:e6:41:76:6b:c1:8b:e1:01:51:7a:fa:1a:99:7a:9f:
         e5:86:dd:19:46:39:8d:86:9b:f8:97:a9:1e:57:6e:39:29:e1:
         48:f7:05:6c:e6:b6:19:20:1d:09:19:b9:1a:c0:e2:03:bc:ff:
         01:b7:2a:f2:52:35:f6:5a:8c:16:f6:79:b5:60:8b:11:af:e1:
         f5:44:ed:3b:26:23:32:eb:8b:18:13:99:9e:e0:2b:07:99:ed:
         4b:26:d5:77:57:ba:21:77:6e:62:6b:35:f0:a9:94:cb:39:0a:
         32:74:db:b0:de:1d:f3:17:d5:ba:c0:e6:2c:97:d8:10:63:36:
         ab:b0:d7:72:d7:07:55:41:89:35:93:f0:18:15:2e:c8:33:ef:
         5b:38:0d:6f:eb:e7:94:90:d9:4d:a4:0e:50:f8:d1:d6:20:99:
         ee:4c:11:d9:c3:0f:d2:cb:14:27:c6:5b:41:1f:04:29:20:19:
         3d:46:eb:f9:8a:de:c3:40:46:4f:13:01:90:b1:4d:3b:16:07:
         18:6a:9f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:00 2025 by rpki-client