Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          LDbljyjTtnPPwBYlMJYF2yMypQ63YICU9rGB9aSBK3Q=
Subject key identifier:   1C:42:E7:5D:4D:F9:66:26:24:B4:13:D3:3D:7B:72:6F:C4:AD:5F:0C
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       03DE90C0DDD42020ADEE48BBF238A71218C239B3
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa
Signing time:             Mon 11 May 2026 12:51:54 +0000
ROA not before:           Mon 11 May 2026 12:46:54 +0000
ROA not after:            Mon 10 May 2027 12:51:54 +0000
asID:                     834
IP address blocks:        207.180.4.0/24 maxlen: 24
                          207.180.22.0/24 maxlen: 24
                          207.180.25.0/24 maxlen: 24
                          207.180.28.0/24 maxlen: 24
                          207.180.34.0/24 maxlen: 24
                          207.180.35.0/24 maxlen: 24
                          207.180.42.0/24 maxlen: 24
                          207.180.44.0/24 maxlen: 24
                          216.75.150.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 11:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:de:90:c0:dd:d4:20:20:ad:ee:48:bb:f2:38:a7:12:18:c2:39:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May 11 12:46:54 2026 GMT
            Not After : May 10 12:51:54 2027 GMT
        Subject: CN=1C42E75D4DF9662624B413D33D7B726FC4AD5F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:24:89:9f:da:32:34:ef:a0:46:38:bc:62:
                    3b:f9:4e:64:4d:46:6f:43:95:08:e3:4a:a6:b2:7a:
                    43:c7:d6:7d:90:2e:4f:e3:1d:48:1c:d9:0e:10:fd:
                    2d:03:03:5f:43:3c:49:08:f2:29:92:66:89:cb:93:
                    10:e4:c3:13:bd:fe:af:20:d2:e8:b6:f5:9f:0f:4b:
                    8e:ed:64:c9:c1:dc:5b:f6:4b:b8:c0:18:89:03:e7:
                    62:b5:a2:1b:e0:32:91:53:6f:0c:d7:e1:6f:83:72:
                    ae:04:29:ab:8f:9b:26:e1:02:3e:a6:f8:10:12:42:
                    13:59:22:0e:de:83:28:61:f1:9a:98:c1:40:9a:54:
                    ee:c8:56:34:a9:e5:51:de:cb:6f:27:e6:f9:34:e3:
                    9c:cb:76:ed:6c:59:a8:0b:61:39:56:3f:e1:a3:2f:
                    f3:88:e2:eb:fb:2d:e5:f2:45:4f:2c:b1:ed:a7:9c:
                    c2:c8:b9:50:d5:c6:cc:85:96:94:b3:81:52:07:e1:
                    7a:6b:fa:af:36:be:e0:7b:04:16:10:55:98:da:96:
                    0f:74:84:3d:53:c6:c8:96:e6:ae:7f:4f:86:f0:10:
                    15:b4:80:57:5b:41:ae:6a:ad:0c:14:ea:5a:4d:59:
                    07:13:2b:7a:ea:2f:88:f9:78:9d:04:f4:57:c3:e8:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:42:E7:5D:4D:F9:66:26:24:B4:13:D3:3D:7B:72:6F:C4:AD:5F:0C
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.4.0/24
                  207.180.22.0/24
                  207.180.25.0/24
                  207.180.28.0/24
                  207.180.34.0/23
                  207.180.42.0/24
                  207.180.44.0/24
                  216.75.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:19:12:0e:5e:86:10:8a:45:69:53:4a:d5:e9:0e:d6:52:4a:
         7b:d1:54:dd:ab:99:58:a4:d1:44:de:3a:61:af:8f:37:60:2f:
         83:3b:6d:77:dd:60:27:71:9c:3a:3f:64:dc:14:b3:e8:2a:c7:
         e1:e6:b9:f4:38:fd:77:47:ee:2b:c3:4d:da:8f:d5:a3:70:58:
         3e:c5:1d:fa:57:a5:85:05:82:51:13:b2:4c:73:6f:cb:1e:1a:
         a6:e7:a9:6e:36:83:86:d7:02:cf:6f:c9:c0:9c:21:64:b3:c7:
         f9:ea:1c:40:76:12:50:b3:99:ca:16:6c:a0:38:09:2b:f8:b9:
         3c:7b:43:d3:04:c7:20:46:ae:c9:9f:f4:ad:2d:f0:47:ea:7e:
         e3:4a:63:4b:be:76:ae:dd:fd:ad:86:e6:e0:19:a1:d8:ed:a0:
         2d:c2:6f:2e:b0:59:23:c6:95:85:f7:8e:91:03:6f:2c:81:e5:
         9a:c4:45:09:71:cc:b4:38:74:59:a5:af:4f:d1:b4:61:69:29:
         83:7e:7e:4e:9d:f6:9e:ce:0c:f4:81:94:df:b5:d5:25:e8:92:
         97:23:fc:cb:c4:09:31:a1:df:db:8c:fb:68:e8:aa:76:bc:37:
         02:c2:3e:e3:63:b5:eb:08:81:52:fe:34:e2:23:af:1f:c4:99:
         e6:74:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:25 2026 by rpki-client