Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          B6/XZi188cXhbwkVbamOYl7D5aJbCvCHtgvIC/ZxLcM=
Subject key identifier:   6E:18:A3:5B:DD:AC:C6:67:34:1B:73:C9:33:07:8D:CB:8E:D7:8B:68
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       579BD7BC7E5B73DEFD4F40059A587D65B202DEB4
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Tue 22 Apr 2025 02:03:03 +0000
ROA not before:           Tue 22 Apr 2025 01:58:03 +0000
ROA not after:            Tue 21 Apr 2026 02:03:03 +0000
asID:                     834
IP address blocks:        66.225.226.0/24 maxlen: 24
                          75.102.48.0/23 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          216.246.20.0/23 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.66.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9b:d7:bc:7e:5b:73:de:fd:4f:40:05:9a:58:7d:65:b2:02:de:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Apr 22 01:58:03 2025 GMT
            Not After : Apr 21 02:03:03 2026 GMT
        Subject: CN=6E18A35BDDACC667341B73C933078DCB8ED78B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:39:f0:a6:3f:c1:45:14:49:f9:a8:18:da:
                    c7:24:32:21:be:30:f0:23:4b:65:2e:dc:17:4b:88:
                    03:72:8f:38:57:b7:2a:e2:a8:e0:95:eb:db:3a:9a:
                    5a:da:98:84:f9:ac:d4:66:4c:30:f7:1e:9f:26:fa:
                    88:0b:7d:05:ef:e9:2c:fb:34:b9:41:07:44:e8:1a:
                    82:4d:a5:df:34:26:77:68:e5:6c:65:7f:3c:95:9d:
                    37:5c:ef:02:f2:ac:03:25:84:a9:b9:26:39:c4:43:
                    5e:06:05:09:75:c9:4b:ac:98:b2:fd:49:b1:7d:e8:
                    db:d9:e7:39:8d:77:02:54:c7:22:81:1b:db:e0:4a:
                    30:0a:12:ee:aa:36:bd:6d:8f:b6:17:00:6c:5e:ca:
                    54:3a:20:fa:7f:11:fe:01:2d:b7:40:a5:7a:58:eb:
                    81:0e:ad:fb:4b:ca:69:5b:ff:d0:29:0c:91:f4:7c:
                    88:d9:98:5b:29:04:bc:e4:a5:2b:a4:17:93:78:d6:
                    a6:44:ca:33:1d:1d:dd:1a:3f:9b:c0:66:38:dc:c3:
                    08:09:4b:10:1e:75:f3:3c:c6:a1:b5:58:e9:ff:56:
                    46:ff:f5:99:64:e1:35:b0:dd:33:e3:da:ae:eb:3d:
                    56:15:6e:a5:94:9c:22:ec:88:db:09:ec:26:71:55:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:18:A3:5B:DD:AC:C6:67:34:1B:73:C9:33:07:8D:CB:8E:D7:8B:68
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/24
                  75.102.48.0-75.102.50.255
                  205.234.156.0/23
                  205.234.200.0/23
                  205.234.222.0/23
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.66.0/23
                  216.246.90.0/23
                  216.246.103.0/24
                  216.246.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:dc:64:e0:5e:27:d9:e0:76:67:67:2d:5b:1a:10:1c:fc:
         f1:bd:01:62:d1:d6:89:12:80:9b:7f:be:ab:bf:60:3e:5d:f5:
         01:73:e2:84:4d:f4:8a:a9:ab:07:42:be:0a:0e:93:7b:8f:24:
         7f:0a:51:f0:e8:ac:fe:95:cc:14:29:f0:aa:c8:ca:b2:d4:80:
         b8:60:0f:f7:7b:45:e4:1e:7e:fa:d3:6d:45:00:aa:f1:68:8d:
         d7:99:25:d6:58:c1:a8:3c:58:72:47:74:70:80:f4:b7:1f:7b:
         ab:5b:5c:67:6d:4a:ef:ad:b6:b0:19:6f:01:65:4a:df:d6:56:
         43:b5:47:78:c2:eb:a0:5c:a2:e9:4c:2f:14:f8:e7:4c:8d:b9:
         e8:82:36:36:77:7f:cf:3d:69:b9:90:90:80:8d:9b:1d:70:a7:
         63:d7:b3:a8:f5:94:a0:36:fa:5a:b4:17:7d:05:83:d9:78:8f:
         2e:ba:5f:23:dd:f2:98:b1:b8:bd:56:c1:6b:06:a1:43:e9:6a:
         79:20:ed:98:31:c5:00:b9:1a:8f:c7:48:da:b0:12:bd:ca:de:
         d3:74:2a:57:33:96:96:f3:82:19:db:01:26:65:4c:ed:79:44:
         ff:64:ba:e1:b7:61:6f:49:ec:e6:d4:1e:af:00:43:91:f5:ed:
         15:53:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:48:54 2025 by rpki-client