Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          qeTSvtEfCNPQoTMPeMwr9Y7raSwG5/YFKLYFcIpZFIs=
Subject key identifier:   58:82:64:D8:AB:43:97:F7:EE:95:29:66:29:FB:B1:AE:05:60:2C:A6
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       434936D23E09A0989B1F24A3E472ADBC6825B8C5
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa
Signing time:             Fri 06 Nov 2026 00:02:05 +0000
ROA not before:           Thu 05 Nov 2026 23:57:05 +0000
ROA not after:            Fri 05 Nov 2027 00:02:05 +0000
asID:                     834
IP address blocks:        207.180.5.0/24 maxlen: 24
                          207.180.25.0/24 maxlen: 24
                          207.180.28.0/24 maxlen: 24
                          207.180.34.0/23 maxlen: 24
                          207.180.36.0/24 maxlen: 24
                          207.180.51.0/24 maxlen: 24
                          207.180.53.0/24 maxlen: 24
                          207.180.58.0/24 maxlen: 24
                          216.75.141.0/24 maxlen: 24
                          216.75.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 02:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:36:d2:3e:09:a0:98:9b:1f:24:a3:e4:72:ad:bc:68:25:b8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Nov  5 23:57:05 2026 GMT
            Not After : Nov  5 00:02:05 2027 GMT
        Subject: CN=588264D8AB4397F7EE95296629FBB1AE05602CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:2c:79:c1:d6:7a:f5:da:a9:63:5d:7d:85:
                    75:05:82:e5:fd:96:30:02:96:1b:f0:48:8d:6d:01:
                    44:8e:af:28:1d:af:3a:f4:04:e4:2c:d4:87:33:fb:
                    49:66:52:87:06:02:4b:71:7d:8c:dc:88:06:1b:e9:
                    18:69:5d:a0:bd:63:0e:a9:d6:16:45:86:9f:5e:c2:
                    07:f3:35:24:d2:cd:20:95:e2:72:1a:03:67:ef:ed:
                    71:19:17:f7:e6:55:77:c3:43:89:b6:7d:4f:7d:ae:
                    45:70:cb:8b:12:9e:54:8a:e2:1c:ef:d2:c2:44:9c:
                    30:5a:59:70:5b:1e:8a:8b:2d:9c:70:19:a3:09:a6:
                    bd:b9:f5:c4:b6:cb:39:32:ed:92:78:c0:06:39:53:
                    9e:00:00:37:65:f2:20:c8:02:ae:98:23:0c:31:f7:
                    e7:9b:9e:67:a1:02:6a:a7:c2:7b:c4:cc:52:60:df:
                    0c:5d:01:de:0d:b9:fa:24:ae:22:9a:1a:8b:2c:03:
                    ed:68:d7:0d:3d:3a:37:8d:6d:bd:d4:2a:d8:26:c9:
                    b3:1e:cb:ae:7d:ce:06:cf:09:8e:07:32:4b:c3:fa:
                    5d:41:a0:91:c2:02:03:cb:19:82:58:a2:7a:ae:b4:
                    d6:98:a7:a1:bc:04:1a:c4:47:0f:5e:ab:1a:a8:72:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:82:64:D8:AB:43:97:F7:EE:95:29:66:29:FB:B1:AE:05:60:2C:A6
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.5.0/24
                  207.180.25.0/24
                  207.180.28.0/24
                  207.180.34.0-207.180.36.255
                  207.180.51.0/24
                  207.180.53.0/24
                  207.180.58.0/24
                  216.75.141.0/24
                  216.75.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:91:fc:4f:ef:30:f0:e9:f5:c3:e3:b0:50:17:ab:d9:54:
         74:15:1f:6d:55:3f:6d:3a:bb:80:fb:a6:92:a4:b7:f0:7c:50:
         08:bb:96:54:e5:51:72:2d:45:99:d7:ea:1e:7f:b0:cb:af:50:
         24:3b:ec:18:10:e9:91:09:02:94:33:19:71:31:35:06:bb:c4:
         e4:da:1a:cb:92:de:9b:66:cc:67:09:00:fe:f4:8d:81:d1:20:
         43:bf:a4:8a:9b:49:73:25:50:d1:53:fd:38:cb:ee:29:11:52:
         08:a4:75:a5:44:63:98:b8:70:d0:f3:bf:94:19:2b:41:2a:cc:
         e8:8a:b6:b0:37:d9:be:3b:c2:a2:c2:b3:fb:93:ef:b8:6d:2a:
         56:f9:33:fa:30:f0:5a:6a:de:6a:8f:9f:56:a6:50:77:7c:41:
         d4:b2:03:a9:65:85:39:e0:c9:f5:8c:32:45:2a:5d:03:2b:3a:
         37:bd:b2:dd:4d:4a:e1:d0:59:af:fb:92:a9:0e:5a:ef:ec:b8:
         8c:49:98:24:e0:44:63:cb:36:3f:35:ba:fc:8e:b2:9f:05:87:
         b0:65:dd:18:32:fc:e6:80:e0:68:cb:18:c8:a2:14:79:0b:15:
         27:0e:73:77:2d:d8:67:11:7f:8f:94:91:ba:89:32:d7:3c:a7:
         43:dd:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:24:37 2026 by rpki-client