Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          2bqMtATZDll1U6vDS+z8ySLelwGKwJMkg38fhn4OCIU=
Subject key identifier:   8E:92:02:46:52:65:DF:7C:A5:DB:E8:4B:40:00:89:E9:CF:82:2C:E8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1CA257CC956C155E27D3B432214AB1195A0C014B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time:             Mon 11 May 2026 17:35:32 +0000
ROA not before:           Mon 11 May 2026 17:30:32 +0000
ROA not after:            Mon 10 May 2027 17:35:32 +0000
asID:                     834
IP address blocks:        104.234.1.0/24 maxlen: 24
                          104.234.28.0/23 maxlen: 24
                          104.234.40.0/24 maxlen: 24
                          104.234.56.0/24 maxlen: 24
                          104.234.58.0/24 maxlen: 24
                          104.234.60.0/23 maxlen: 24
                          104.234.62.0/24 maxlen: 24
                          104.234.86.0/24 maxlen: 24
                          104.234.98.0/24 maxlen: 24
                          104.234.136.0/24 maxlen: 24
                          104.234.161.0/24 maxlen: 24
                          104.234.192.0/23 maxlen: 24
                          104.234.194.0/24 maxlen: 24
                          104.234.196.0/24 maxlen: 24
                          104.234.198.0/23 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.202.0/23 maxlen: 24
                          104.234.206.0/23 maxlen: 24
                          104.234.211.0/24 maxlen: 24
                          104.234.229.0/24 maxlen: 24
                          104.234.232.0/24 maxlen: 24
                          104.234.238.0/24 maxlen: 24
                          206.53.56.0/24 maxlen: 24
                          206.53.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 10:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a2:57:cc:95:6c:15:5e:27:d3:b4:32:21:4a:b1:19:5a:0c:01:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 11 17:30:32 2026 GMT
            Not After : May 10 17:35:32 2027 GMT
        Subject: CN=8E9202465265DF7CA5DBE84B400089E9CF822CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:3e:64:41:e4:5b:28:d7:46:e0:45:0a:d3:
                    18:b7:34:fe:b0:8e:56:b0:58:b3:1b:40:a5:2c:2b:
                    5f:9b:44:db:5e:d2:80:2d:57:b3:8d:aa:2b:b9:52:
                    e0:87:75:b8:61:d6:cf:e2:41:18:b0:9e:ab:ad:1c:
                    31:2f:f6:65:ba:09:c6:f5:99:1d:8e:da:e8:24:d6:
                    3f:5a:9c:04:4d:01:56:00:08:f7:53:fe:06:58:29:
                    3a:82:df:6d:c2:ce:0f:7f:e0:9c:66:01:c4:a3:45:
                    42:96:b6:b3:11:4b:c9:0f:bf:6c:50:bd:57:75:ad:
                    c7:a1:e2:ff:49:7e:9f:ed:b1:32:63:eb:e8:92:e6:
                    e5:02:8a:9c:c3:06:ba:ec:48:50:bb:3b:8d:51:ee:
                    be:5d:9c:b7:11:df:00:08:e8:b6:2f:7e:8e:8e:a8:
                    d6:18:c8:46:49:1e:65:6a:53:06:d3:82:0b:23:f6:
                    67:7c:9c:49:02:e1:51:aa:38:b8:5e:cb:4e:5c:78:
                    d3:a2:03:60:a6:7e:86:94:7b:ca:7b:2c:0b:fa:21:
                    ee:02:b2:af:ea:29:ea:0c:89:41:d3:6f:65:09:aa:
                    56:de:dc:b8:ed:06:f4:63:79:17:2c:c8:cc:b0:34:
                    c4:fe:07:75:c1:5e:71:77:54:85:58:d4:0e:7b:57:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:92:02:46:52:65:DF:7C:A5:DB:E8:4B:40:00:89:E9:CF:82:2C:E8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.1.0/24
                  104.234.28.0/23
                  104.234.40.0/24
                  104.234.56.0/24
                  104.234.58.0/24
                  104.234.60.0-104.234.62.255
                  104.234.86.0/24
                  104.234.98.0/24
                  104.234.136.0/24
                  104.234.161.0/24
                  104.234.192.0-104.234.194.255
                  104.234.196.0/24
                  104.234.198.0/23
                  104.234.201.0-104.234.203.255
                  104.234.206.0/23
                  104.234.211.0/24
                  104.234.229.0/24
                  104.234.232.0/24
                  104.234.238.0/24
                  206.53.56.0/24
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:3f:8f:4b:25:dd:0c:28:42:d0:c6:ac:49:df:ef:57:ec:2c:
         ae:ba:09:7a:ab:80:76:73:1c:9e:fc:8c:f5:68:d5:5e:49:82:
         0d:8b:a7:10:fa:53:a3:ce:04:10:ca:1d:c8:72:10:04:0b:69:
         09:92:a4:a8:63:48:bb:b3:c0:e7:0b:ba:27:8e:f6:a7:89:bc:
         ad:c7:ae:21:9e:c2:24:c3:fa:0d:5d:e2:68:40:4c:23:9c:86:
         36:25:25:96:82:54:8b:bc:3b:7a:74:29:ac:1c:d7:d5:de:a6:
         e1:9a:18:ac:58:ae:2d:88:68:e5:b4:42:30:55:b4:c3:47:e3:
         d7:c2:30:51:58:c2:37:c2:ca:9e:f2:77:94:48:51:80:c0:bd:
         5a:ac:e7:50:5b:e2:48:63:39:a6:a0:59:44:18:53:b3:73:72:
         b9:b2:00:61:e7:00:6d:b4:c3:ae:78:c4:0b:bc:22:f1:66:d1:
         b2:6c:31:d0:da:1e:98:6c:9d:ff:79:ba:79:0f:98:3e:36:7e:
         03:dc:72:d2:a4:e5:d3:e8:e7:28:df:5d:b6:ec:de:c9:5b:c9:
         a6:8d:30:91:bd:99:12:df:45:dd:7d:f5:63:c9:59:80:42:45:
         f8:93:f5:4d:6f:00:03:d8:ee:5a:ef:b7:49:80:3c:b9:39:43:
         5f:dd:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:48:21 2026 by rpki-client