Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          lLSaittBYQaDKU/U5WTtv1SynZM9uUPJafjhO1aky/k=
Subject key identifier:   C4:43:9F:A7:C5:F8:EB:E0:09:DB:96:7D:A9:67:75:C6:64:51:6B:FB
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       7B116068C79C7A84CD28192488E18CCA3B2A37FA
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Thu 30 Oct 2025 00:02:02 +0000
ROA not before:           Wed 29 Oct 2025 23:57:02 +0000
ROA not after:            Thu 29 Oct 2026 00:02:02 +0000
asID:                     834
IP address blocks:        66.225.226.0/24 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.176.0/24 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          216.246.20.0/23 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.66.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:11:60:68:c7:9c:7a:84:cd:28:19:24:88:e1:8c:ca:3b:2a:37:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 29 23:57:02 2025 GMT
            Not After : Oct 29 00:02:02 2026 GMT
        Subject: CN=C4439FA7C5F8EBE009DB967DA96775C664516BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:67:fa:64:fb:00:d8:99:f6:59:43:a6:74:
                    fd:ef:88:cc:47:46:26:ba:3b:28:c3:7a:08:4a:47:
                    32:55:ac:64:7b:b1:26:9f:e1:5e:d9:1f:6a:0a:60:
                    bd:3b:d8:7f:29:4f:d3:fb:15:ad:1e:d7:d2:e9:4e:
                    37:fc:e5:14:5e:bb:27:ee:48:d0:35:d7:3f:0f:68:
                    60:8a:11:6c:81:2d:a5:38:2e:a5:51:4d:02:7a:4e:
                    83:84:8c:60:4a:cb:4c:3d:b6:49:4a:1b:b1:f9:f0:
                    2a:b7:8b:95:b3:f1:90:b7:27:81:a1:8d:97:a5:1e:
                    ac:80:69:86:31:98:4b:0b:8b:d9:55:77:9c:de:38:
                    84:24:4c:ea:0c:cc:0c:b4:e7:68:fb:7f:14:1b:8c:
                    1f:e9:90:f2:a1:c3:6b:1a:78:41:ba:d0:6c:65:57:
                    aa:7b:5f:0d:32:08:a5:d5:6e:7b:95:c9:99:5d:41:
                    a6:6f:c4:c3:55:37:78:ca:93:5d:cc:a2:d5:8a:39:
                    c7:a4:d9:5c:f3:e5:96:84:a3:51:06:ce:37:c9:31:
                    77:20:0a:33:21:72:77:f9:9b:2d:91:33:3e:ab:37:
                    1b:ad:ea:78:0f:42:56:35:23:f2:1a:d2:73:ca:56:
                    22:b1:8c:0b:1a:3e:5b:f3:f5:57:32:3b:b6:29:f2:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:43:9F:A7:C5:F8:EB:E0:09:DB:96:7D:A9:67:75:C6:64:51:6B:FB
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/24
                  75.102.49.0-75.102.50.255
                  205.234.156.0/23
                  205.234.176.0/24
                  205.234.200.0/23
                  205.234.222.0/23
                  205.234.252.0/24
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.66.0/23
                  216.246.90.0/23
                  216.246.103.0/24
                  216.246.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a2:5e:7e:60:df:4e:c5:42:d1:59:41:81:a8:ad:e9:92:46:
         32:87:cd:3d:db:7d:8f:e5:49:2a:cb:81:8b:d3:8b:ab:63:28:
         12:f5:9e:a0:cf:fc:13:e5:b5:a7:f1:9e:11:7d:90:b0:2f:40:
         69:f8:64:ec:8d:4e:77:5c:c0:5f:fb:9f:33:de:a4:bf:17:94:
         cc:3e:b8:3c:ea:f6:30:66:4f:21:c6:7f:83:fc:6e:ae:b7:83:
         2d:5e:28:71:2f:db:14:43:f9:b4:81:37:69:d9:82:16:a2:f9:
         e4:ab:6d:c0:80:e5:33:ab:cd:58:a0:50:07:bf:fe:49:0c:9b:
         73:cc:bf:27:5f:4d:2b:2f:25:98:a8:91:c9:cb:9e:5c:fe:39:
         64:19:a8:6a:a3:3a:7f:f2:a8:70:d0:ad:03:04:c2:99:a6:d9:
         96:89:02:e2:7c:00:b2:fe:9f:f0:8a:b7:13:68:5c:ce:bd:60:
         90:42:ef:2b:00:51:40:80:1d:11:05:ed:9e:da:06:a3:26:23:
         70:7a:a1:a0:ee:81:75:ea:42:1e:ac:f5:c3:87:95:79:a8:da:
         ac:6a:3c:a7:24:08:20:e5:55:28:5f:ce:6d:d3:06:ee:d1:81:
         82:1c:e6:dd:26:42:3f:9e:da:4c:08:2a:87:c6:2b:e3:8f:03:
         1a:da:bc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:04:17 2025 by rpki-client