Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          OdQtHLlJjo3F/ieLBeemq/keEgZxqP//B3N+EYYzpyE=
Subject key identifier:   4F:0A:79:47:9E:26:DE:7C:91:36:CA:3C:57:A2:77:FA:13:62:4C:E7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       199A84FF2CA6FFDB3DA6955AF84BB1D9ADF9AECA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time:             Fri 22 Aug 2025 06:57:20 +0000
ROA not before:           Fri 22 Aug 2025 06:52:20 +0000
ROA not after:            Fri 21 Aug 2026 06:57:20 +0000
asID:                     834
IP address blocks:        104.234.3.0/24 maxlen: 24
                          104.234.136.0/24 maxlen: 24
                          104.234.192.0/24 maxlen: 24
                          104.234.194.0/24 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.202.0/23 maxlen: 24
                          104.234.206.0/23 maxlen: 24
                          104.234.209.0/24 maxlen: 24
                          206.53.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9a:84:ff:2c:a6:ff:db:3d:a6:95:5a:f8:4b:b1:d9:ad:f9:ae:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 22 06:52:20 2025 GMT
            Not After : Aug 21 06:57:20 2026 GMT
        Subject: CN=4F0A79479E26DE7C9136CA3C57A277FA13624CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:54:21:b7:eb:8d:e9:e9:17:6b:fb:6f:6b:
                    e2:1c:bf:43:69:56:33:3b:7f:88:45:ac:da:45:5e:
                    f0:be:ab:8c:26:47:a0:01:9c:e4:0a:b4:0c:15:af:
                    32:31:35:68:8e:2c:23:ca:c4:eb:36:b0:b3:ae:50:
                    57:0e:87:99:99:0f:da:39:68:18:0c:77:45:5a:0a:
                    63:f2:77:50:dc:e7:e7:ac:71:7c:b8:2f:53:61:0f:
                    06:e5:52:7c:e2:c0:6e:dd:f0:4d:20:a8:4e:8e:ca:
                    e6:4f:e4:9d:43:75:3f:01:4f:3e:8d:86:2b:e8:9a:
                    96:74:7c:c6:f8:d7:c4:3f:59:07:4a:a8:af:e5:cd:
                    11:82:bf:44:95:e4:13:fe:da:c2:c2:f4:d4:01:42:
                    e4:4d:1c:20:50:2a:cf:cb:0a:f3:45:01:42:05:8d:
                    43:a0:91:97:60:2a:2e:ca:47:28:11:7e:55:dc:ae:
                    a2:02:5b:05:77:74:5c:70:b5:2f:e9:46:77:9e:f4:
                    4b:b4:3e:10:ee:2a:ed:09:4c:aa:68:70:77:4b:5c:
                    d8:2e:80:b5:e1:6b:57:a5:42:7c:6a:2c:d1:a8:39:
                    da:5c:8d:7b:3e:b9:f1:2e:da:18:e6:dd:eb:1f:d8:
                    1b:98:5a:3f:4c:fa:ef:6f:56:76:d2:7c:76:08:ef:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0A:79:47:9E:26:DE:7C:91:36:CA:3C:57:A2:77:FA:13:62:4C:E7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.3.0/24
                  104.234.136.0/24
                  104.234.192.0/24
                  104.234.194.0/24
                  104.234.201.0-104.234.203.255
                  104.234.206.0/23
                  104.234.209.0/24
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:54:68:89:91:a0:93:06:e9:5b:f9:98:c3:09:a6:ad:84:b1:
         aa:02:f3:f2:ac:6e:8a:50:f0:40:c8:13:d0:64:ef:c0:c4:38:
         63:68:df:14:2c:12:db:13:b4:21:6f:2b:30:b6:58:0f:59:37:
         79:47:6d:13:2d:04:ed:f9:c1:db:83:71:e0:fd:6d:04:20:95:
         33:2f:d6:2e:c5:ce:62:96:66:7a:c7:d1:88:d6:54:7f:30:20:
         e6:d1:ce:38:3c:60:ad:b5:32:da:00:5c:89:19:c5:75:d6:8b:
         da:71:aa:0c:b6:a1:9e:60:7f:d8:34:53:49:6f:a0:f1:ed:a3:
         41:e4:08:1e:07:04:fc:26:2b:09:ac:77:b4:25:36:52:fe:0e:
         70:ca:5a:8b:f1:95:09:5c:87:99:6b:13:a3:3a:4b:b3:e5:4e:
         34:20:d8:cb:db:6a:aa:51:f8:a1:12:18:3c:d7:27:c7:27:31:
         cf:e6:73:05:dc:03:f7:d7:6c:3f:5d:21:7c:e5:d0:e6:6d:50:
         b1:b8:88:74:e7:cb:3c:7e:37:11:68:49:90:2a:c5:7d:1d:13:
         52:e3:76:0a:ec:c3:24:23:c2:4d:10:1d:8c:a7:7f:39:63:47:
         4c:aa:ff:56:e2:80:f0:5e:e3:a4:9c:7c:ad:21:a4:5c:68:a5:
         1a:ce:26:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:07 2025 by rpki-client