Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          cQbpe0Rb9xfMwpSzSz9tpUJrIRqsTlQQLCQlcZMj66k=
Subject key identifier:   39:A6:F2:1A:B4:00:A6:81:C6:D8:85:A8:E7:D5:80:B3:D9:1D:79:ED
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4D41880AB5B8F42D4493C284BE1F13C135B93489
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time:             Sat 16 Aug 2025 18:40:21 +0000
ROA not before:           Sat 16 Aug 2025 18:35:21 +0000
ROA not after:            Sat 15 Aug 2026 18:40:21 +0000
asID:                     834
IP address blocks:        140.99.48.0/24 maxlen: 24
                          140.99.114.0/24 maxlen: 24
                          140.99.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 22:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:41:88:0a:b5:b8:f4:2d:44:93:c2:84:be:1f:13:c1:35:b9:34:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 16 18:35:21 2025 GMT
            Not After : Aug 15 18:40:21 2026 GMT
        Subject: CN=39A6F21AB400A681C6D885A8E7D580B3D91D79ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:e4:ac:2d:99:cf:0f:d7:4e:75:16:d3:e8:
                    37:d1:15:8d:7f:f1:4e:ea:c6:4f:b3:34:5f:c3:76:
                    c5:37:dd:70:9f:50:a6:4b:31:06:39:06:70:77:16:
                    9d:52:8c:3e:ce:4d:ed:3a:f7:7f:d3:69:fb:f3:db:
                    82:d5:99:23:18:0a:be:54:04:45:28:b3:b3:e4:ae:
                    62:4d:85:31:2a:a0:b4:a7:ad:e4:5d:0c:37:08:31:
                    95:58:eb:e5:df:9f:42:b5:d1:e5:f3:0a:e8:3b:bd:
                    25:fd:aa:07:01:ec:5f:50:fa:e3:18:71:d9:28:de:
                    74:26:2f:38:c6:be:ac:c2:d3:ab:29:ed:1d:30:75:
                    b3:e9:67:cd:73:01:5b:f9:27:f9:c8:6a:be:11:e0:
                    08:64:6c:08:c5:ca:5a:4f:ce:d8:36:89:b1:55:4b:
                    c8:44:fb:2a:33:b7:3b:2b:12:dd:28:3d:69:7d:4c:
                    40:63:e0:f3:ae:bf:1e:26:d8:94:fb:71:79:bc:1a:
                    d8:6b:96:e3:ec:15:cd:0a:67:db:b8:50:94:71:af:
                    ad:d1:3c:46:e4:dd:88:7e:b1:f8:7d:57:6b:a9:01:
                    56:1c:42:b6:d6:1c:70:dd:27:a2:16:00:da:8e:72:
                    a0:e1:f4:07:37:d0:50:36:eb:18:4e:b7:4b:dc:fc:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A6:F2:1A:B4:00:A6:81:C6:D8:85:A8:E7:D5:80:B3:D9:1D:79:ED
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.48.0/24
                  140.99.114.0/24
                  140.99.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:ca:ec:46:d9:db:8b:5e:bd:f6:75:f0:95:c4:e2:43:f1:
         e7:3f:5a:29:f7:60:29:c7:96:e4:12:4a:9e:44:c2:ea:12:06:
         13:13:75:37:c1:1a:24:e6:8d:d0:77:87:dc:9c:14:46:e9:5f:
         e6:8f:31:fb:fe:6b:cc:29:0a:54:e2:37:1d:45:e7:ab:81:0d:
         c6:5f:c0:35:7a:6b:7f:9f:33:0e:07:eb:0f:28:d5:a8:3a:ee:
         f6:a3:c3:a5:3d:b1:1f:94:33:71:26:7a:db:e0:b3:3a:6f:b6:
         61:d5:6e:85:0d:79:24:78:fd:92:e7:4b:b9:17:17:bd:26:f4:
         55:1c:59:b6:e2:0d:7b:85:90:8a:3e:cd:fc:40:44:48:e5:bf:
         9e:f4:5a:11:e9:29:63:65:6b:b5:c6:07:1b:d4:bf:8e:e2:46:
         01:98:cf:f3:66:47:ed:71:6b:51:f9:f9:fb:6a:b0:0e:f1:f6:
         81:0c:a1:ef:9e:58:01:51:ee:ce:11:6f:95:c7:d8:0e:4c:56:
         47:e0:4d:6c:8e:0d:7e:d2:4f:db:11:8f:4b:3d:5f:c4:58:cd:
         73:f6:56:7a:e0:98:9d:94:b7:fc:b7:c6:e2:27:a4:b1:8f:4b:
         2c:bc:a2:a1:4d:ed:3c:ee:6f:84:5e:8e:0c:a3:5f:19:00:2f:
         f1:87:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:44:35 2025 by rpki-client