Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          Kn8ooYQ2qRrRn6hvXFyp2cTZ9dojw8oTFSAgIEYUiD8=
Subject key identifier:   09:7B:2B:0C:43:3D:3B:FF:13:20:8D:53:1F:C7:7A:F6:23:1C:C3:41
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       67FAED6307F946D666351B7F39C5461B15E6F4A0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Sun 19 Oct 2025 12:54:50 +0000
ROA not before:           Sun 19 Oct 2025 12:49:50 +0000
ROA not after:            Sun 18 Oct 2026 12:54:50 +0000
asID:                     834
IP address blocks:        64.50.182.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fa:ed:63:07:f9:46:d6:66:35:1b:7f:39:c5:46:1b:15:e6:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 19 12:49:50 2025 GMT
            Not After : Oct 18 12:54:50 2026 GMT
        Subject: CN=097B2B0C433D3BFF13208D531FC77AF6231CC341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:59:ff:e7:45:2d:ed:b4:6b:c9:8c:c0:98:
                    32:1c:a0:1c:66:c4:de:f4:0e:7e:80:79:68:31:d4:
                    37:19:eb:34:ba:c0:50:dc:73:e2:82:70:d1:b6:dd:
                    3f:2e:6c:be:2e:6d:21:ab:7f:e1:aa:05:b8:96:f1:
                    1f:cc:4a:f4:3b:6d:51:af:5f:69:41:79:ad:af:53:
                    f5:ff:15:52:27:3b:81:17:aa:b5:67:6a:44:d2:76:
                    ff:20:d6:3a:d4:aa:01:ff:3d:f9:89:61:3f:22:33:
                    a9:ce:69:ac:55:02:cf:f2:38:e9:f6:7f:d2:b9:21:
                    18:15:c3:b2:56:22:0d:4d:23:b8:0f:c8:59:9b:10:
                    f7:3e:f6:7c:16:14:b0:ad:11:53:8e:af:f8:d3:12:
                    3e:6c:8c:9f:b2:72:df:a3:93:c1:e2:16:f7:73:e6:
                    53:f1:94:e7:7e:3a:96:bf:ea:39:e3:2a:0a:4b:9d:
                    8d:09:82:d5:ea:b4:25:3c:05:05:27:1a:82:16:a1:
                    f5:5e:ba:3f:5f:35:71:4f:fa:cd:bd:b5:91:65:d0:
                    b1:f5:06:8a:c6:d6:34:fb:1a:a4:31:63:f0:94:d3:
                    c5:54:5d:96:2d:63:49:f6:32:ae:7e:39:f8:16:c3:
                    92:43:09:b1:58:3c:06:dd:9d:2d:92:b2:d6:70:e7:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7B:2B:0C:43:3D:3B:FF:13:20:8D:53:1F:C7:7A:F6:23:1C:C3:41
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.182.0/24
                  190.92.165.0-190.92.167.255
                  198.23.186.0/24
                  209.200.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f2:37:53:ec:b2:dc:9c:c3:8a:0f:a9:7f:2a:a3:45:bb:89:
         c2:fb:4a:b7:d1:01:b6:b7:63:9f:5f:08:3e:ef:46:fd:17:67:
         61:ae:ce:dd:1d:95:b0:c2:54:d3:6b:bd:39:0a:a8:46:58:3f:
         b3:eb:4f:ed:e9:71:64:91:87:72:13:f0:75:cf:c8:dc:e2:bf:
         b4:07:1e:cb:8a:6d:14:56:09:9e:e6:67:36:f1:b7:97:1f:c6:
         89:ba:4a:8b:07:d9:ec:6e:2d:7b:c0:8a:a5:eb:7d:b9:db:f9:
         a6:be:41:c8:69:da:6c:12:92:a3:da:28:55:8e:83:fb:6a:f6:
         b4:60:a6:f6:22:a3:cd:c5:21:d2:d8:b4:f0:d3:33:b7:86:ea:
         3e:1e:c0:c8:aa:5a:00:9b:7c:d9:c0:52:99:73:d1:3e:fb:0e:
         0c:8f:ce:a2:09:89:3e:ff:b8:05:ab:08:14:dd:23:61:cc:24:
         80:6f:6f:1c:71:d2:35:9e:30:08:6d:6d:01:7f:53:55:ac:78:
         a7:05:9b:32:4e:ad:a6:20:45:34:82:2e:5f:16:de:5f:1b:79:
         db:3e:c5:7e:b4:12:14:44:ad:cb:ec:40:f3:30:7f:bb:bc:d3:
         c4:5b:fa:da:47:35:f7:da:8f:50:23:df:ee:c7:e7:2a:4e:31:
         6d:ac:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:43:33 2025 by rpki-client