Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          ES/p103V8s9rGU57XR/vp/e4pQHgnY/qABEUo1N8VBg=
Subject key identifier:   74:F1:48:3D:93:86:CC:12:4D:47:33:F2:62:F7:B5:4C:D8:9C:DB:C6
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       10D85BEFF6CC5EE8840308BA759F5B11AF747850
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Fri 18 Sep 2026 00:01:35 +0000
ROA not before:           Thu 17 Sep 2026 23:56:35 +0000
ROA not after:            Fri 17 Sep 2027 00:01:35 +0000
asID:                     834
IP address blocks:        157.254.144.0/21 maxlen: 24
                          157.254.193.0/24 maxlen: 24
                          157.254.204.0/24 maxlen: 24
                          157.254.224.0/24 maxlen: 24
                          157.254.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 07:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d8:5b:ef:f6:cc:5e:e8:84:03:08:ba:75:9f:5b:11:af:74:78:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 17 23:56:35 2026 GMT
            Not After : Sep 17 00:01:35 2027 GMT
        Subject: CN=74F1483D9386CC124D4733F262F7B54CD89CDBC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:87:4c:5e:76:22:c6:c1:2b:14:84:0e:f3:
                    46:9c:5e:5d:9f:d7:95:64:0d:24:57:f0:bf:dd:d6:
                    5a:7a:91:94:e7:5c:b3:a9:01:d7:ed:f0:5a:cb:73:
                    64:7e:cb:96:68:52:d5:70:d3:45:59:92:fc:3e:f1:
                    83:3b:17:4c:b3:00:e8:30:5f:f4:91:20:71:f9:07:
                    73:3d:a1:61:2c:2d:0a:25:53:59:16:89:30:56:49:
                    fe:04:f2:92:23:92:c6:0a:21:4d:40:b4:36:45:1a:
                    90:f9:1b:dc:ab:f8:c1:26:56:97:d7:b5:ee:69:43:
                    ec:56:8e:7c:f8:81:2e:75:10:b8:ca:23:b0:7b:df:
                    e8:5f:55:97:db:17:e5:b3:60:dc:9a:0c:8d:d4:fa:
                    9f:36:d6:1f:88:97:0f:ec:ba:88:7c:df:94:9f:50:
                    a7:6a:a5:88:3a:6a:bc:59:fc:84:bf:1f:6d:c8:43:
                    00:c8:aa:26:53:4a:c6:85:ce:e9:e8:a5:81:f9:ba:
                    72:7c:ab:1b:1a:c9:84:51:52:f1:0d:04:91:39:c7:
                    6f:d6:f2:db:e9:cc:a9:7f:9d:5d:01:ba:26:46:c7:
                    66:86:27:7d:9d:9d:f0:6c:5d:ab:9c:f3:77:56:89:
                    c9:a0:cb:11:39:4c:c3:d2:d9:42:4e:41:e4:c9:33:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:48:3D:93:86:CC:12:4D:47:33:F2:62:F7:B5:4C:D8:9C:DB:C6
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.144.0/21
                  157.254.193.0/24
                  157.254.204.0/24
                  157.254.224.0/24
                  157.254.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:22:0e:80:8e:68:8f:e3:cb:96:5d:06:9d:5d:06:e4:0e:e9:
         ff:e3:69:80:9b:b3:ae:4e:93:a9:87:b7:a8:15:88:a5:23:43:
         a7:c0:67:a0:4e:71:87:50:a4:6b:f5:60:28:12:b7:8b:f4:5c:
         89:cf:30:84:83:b7:bb:08:ee:51:92:ca:0a:ba:e7:3d:4e:7b:
         72:40:44:42:65:06:4c:26:6c:e3:77:14:af:d5:07:7d:2b:2d:
         ba:43:16:bd:05:d1:5f:fd:97:51:50:b5:68:e8:df:ce:11:96:
         2c:b6:29:b0:80:c4:7c:14:d6:46:c8:9b:eb:d9:ff:ef:37:2e:
         29:12:ab:b5:1f:bd:dc:2d:32:d9:22:9a:14:a8:3e:78:7e:86:
         07:eb:1d:52:d5:24:35:45:1a:1d:88:29:40:21:56:63:3a:f4:
         60:37:d3:19:aa:0b:e5:31:f3:87:d2:e8:e5:4d:14:70:ad:e1:
         ed:34:58:91:7a:26:2c:e7:11:33:4b:7f:59:46:91:16:40:4c:
         82:c6:45:f5:00:6d:e3:4e:a3:a3:90:97:ec:79:87:36:dd:55:
         1a:d3:a7:d0:5e:9d:cc:f6:88:fc:e4:9f:fd:7e:05:94:29:ee:
         bf:6f:e8:8c:54:98:f9:03:ae:92:86:cf:51:27:31:09:25:56:
         d1:a9:cf:ad
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIUENhb7/bMXuiEAwi6dZ9bEa90eFAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwOTE3MjM1NjM1WhcNMjcwOTE3MDAwMTM1
WjAzMTEwLwYDVQQDEyg3NEYxNDgzRDkzODZDQzEyNEQ0NzMzRjI2MkY3QjU0Q0Q4
OUNEQkM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIqHTF52IsbB
KxSEDvNGnF5dn9eVZA0kV/C/3dZaepGU51yzqQHX7fBay3NkfsuWaFLVcNNFWZL8
PvGDOxdMswDoMF/0kSBx+QdzPaFhLC0KJVNZFokwVkn+BPKSI5LGCiFNQLQ2RRqQ
+Rvcq/jBJlaX17XuaUPsVo58+IEudRC4yiOwe9/oX1WX2xfls2DcmgyN1PqfNtYf
iJcP7LqIfN+Un1CnaqWIOmq8WfyEvx9tyEMAyKomU0rGhc7p6KWB+bpyfKsbGsmE
UVLxDQSROcdv1vLb6cypf51dAbomRsdmhid9nZ3wbF2rnPN3VonJoMsROUzD0tlC
TkHkyTMzmQIDAQABo4IClDCCApAwHQYDVR0OBBYEFHTxSD2ThswSTUcz8mL3tUzY
nNvGMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3Bggr
BgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEA53+kAMEAJ3+wQMEAJ3+zAMEAJ3+4AME
AJ3+6DANBgkqhkiG9w0BAQsFAAOCAQEARiIOgI5oj+PLll0GnV0G5A7p/+NpgJuz
rk6TqYe3qBWIpSNDp8BnoE5xh1Cka/VgKBK3i/Rcic8whIO3uwjuUZLKCrrnPU57
ckBEQmUGTCZs43cUr9UHfSstukMWvQXRX/2XUVC1aOjfzhGWLLYpsIDEfBTWRsib
69n/7zcuKRKrtR+93C0y2SKaFKg+eH6GB+sdUtUkNUUaHYgpQCFWYzr0YDfTGaoL
5THzh9Lo5U0UcK3h7TRYkXomLOcRM0t/WUaRFkBMgsZF9QBt406jo5CX7HmHNt1V
GtOn0F6dzPaI/OSf/X4FlCnuv2/ojFSY+QOukobPUScxCSVW0anPrQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:08:14 2026 by rpki-client