Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          o8DY+ArbKfy/NH7JS7XHzLaR57jx8cQCCPxW4viTZGM=
Subject key identifier:   40:1F:0A:06:74:6D:02:04:40:C8:65:8E:B6:1D:4F:79:D8:D9:02:1B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       268840E623B7694DECDCCD4CA3257F7711FDE831
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Sat 28 Jun 2025 12:12:32 +0000
ROA not before:           Sat 28 Jun 2025 12:07:32 +0000
ROA not after:            Sat 27 Jun 2026 12:12:32 +0000
asID:                     834
IP address blocks:        64.50.163.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.180.0/22 maxlen: 24
                          64.50.184.0/23 maxlen: 24
                          67.210.97.0/24 maxlen: 24
                          67.210.101.0/24 maxlen: 24
                          67.210.103.0/24 maxlen: 24
                          67.210.111.0/24 maxlen: 24
                          67.210.121.0/24 maxlen: 24
                          74.50.3.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.112.0/24 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.120.0/23 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.233.0/24 maxlen: 24
                          216.97.226.0/24 maxlen: 24
                          216.97.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:88:40:e6:23:b7:69:4d:ec:dc:cd:4c:a3:25:7f:77:11:fd:e8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 28 12:07:32 2025 GMT
            Not After : Jun 27 12:12:32 2026 GMT
        Subject: CN=401F0A06746D020440C8658EB61D4F79D8D9021B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:2f:69:df:bf:e0:28:38:89:d6:1f:9d:d9:
                    e4:d0:e5:6b:18:77:f5:9b:77:a1:e1:03:19:6e:f1:
                    86:45:fe:99:a1:db:60:57:08:b7:22:55:99:ec:ae:
                    65:28:14:da:06:ef:1e:3d:ab:1c:c1:b3:23:9a:54:
                    d5:24:4a:ba:6d:69:9a:98:fb:43:49:6f:b8:3b:fe:
                    c4:3d:03:44:d1:18:e9:ea:c8:e0:00:e5:5e:ef:9a:
                    91:d8:48:d0:3e:94:bd:34:18:69:dd:4c:ad:a0:d9:
                    53:6f:8a:e2:6c:6a:9c:14:35:8b:0b:ef:72:49:52:
                    55:f7:c0:62:e5:a8:9d:75:eb:19:49:d5:6d:16:ad:
                    99:12:02:48:03:41:e7:9d:7e:4b:07:dd:f8:a6:93:
                    4b:e2:8c:f4:d3:ff:48:d3:8c:a9:22:62:ca:e3:a1:
                    06:2f:fd:55:db:09:0b:41:c9:90:3d:86:3b:93:ae:
                    c2:22:79:c1:be:6b:80:8f:04:b4:69:55:fd:6b:9a:
                    db:cd:b1:18:b4:cf:a0:d9:8a:76:ae:02:87:8b:5c:
                    19:b1:02:56:42:eb:a3:54:5e:9f:bb:09:79:ab:6e:
                    64:5b:7b:9a:28:9c:0c:97:7b:23:2a:a6:bd:7a:4d:
                    8a:38:90:ab:2c:55:19:0d:6c:bc:ba:7b:61:5d:cb:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1F:0A:06:74:6D:02:04:40:C8:65:8E:B6:1D:4F:79:D8:D9:02:1B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.163.0/24
                  64.50.166.0/24
                  64.50.180.0-64.50.185.255
                  67.210.97.0/24
                  67.210.101.0/24
                  67.210.103.0/24
                  67.210.111.0/24
                  67.210.121.0/24
                  74.50.3.0/24
                  190.92.165.0-190.92.167.255
                  192.228.112.0/24
                  192.228.115.0/24
                  192.228.120.0/23
                  198.23.186.0/24
                  209.200.233.0/24
                  216.97.226.0/24
                  216.97.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:da:42:75:d0:19:7f:d5:04:5e:6c:de:5e:50:3f:e0:28:f8:
         88:93:e6:c5:b4:c1:e7:f4:66:f7:f6:3a:2e:87:c0:d3:0b:80:
         ab:fe:20:12:bf:bb:bb:88:e5:ea:3c:4b:85:6b:c1:ea:e1:20:
         85:d6:e6:a0:93:c1:c7:66:0f:41:d2:3d:dd:b0:5f:78:64:0c:
         03:2f:1c:cd:b0:0e:39:c5:e1:17:4b:51:31:ff:f1:17:1d:1f:
         fd:1d:64:ea:6f:4e:e6:98:bc:f6:71:8a:80:8e:8e:3c:d1:08:
         15:6e:d7:4b:ea:65:ab:a7:d1:d8:22:ab:e7:fc:e7:60:12:8c:
         c4:71:46:a8:ac:a3:fa:dd:0a:e7:00:aa:02:5d:2d:a8:3c:44:
         06:f6:f4:9a:af:62:38:87:5e:cb:f3:04:ce:06:18:8b:c4:c5:
         af:70:92:75:7c:ba:66:b1:1e:00:e7:76:f6:df:68:b8:ec:48:
         d1:cc:ec:92:8e:e7:cd:37:ab:46:aa:74:19:2d:cd:a8:ab:97:
         e7:fc:79:ed:aa:6d:82:20:57:80:73:a7:ac:d1:b0:ee:4f:c5:
         25:ee:c0:60:41:f6:7f:e1:78:d6:c7:eb:dc:85:01:cb:15:b4:
         2b:be:9c:af:aa:fe:5c:c4:35:a3:7f:9b:a1:b5:c9:97:94:8d:
         7c:b4:d1:c6
-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgIUJohA5iO3aU3s3M1MoyV/dxH96DEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjI4MTIwNzMyWhcNMjYwNjI3MTIxMjMy
WjAzMTEwLwYDVQQDEyg0MDFGMEEwNjc0NkQwMjA0NDBDODY1OEVCNjFENEY3OUQ4
RDkwMjFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcQvad+/4Cg4
idYfndnk0OVrGHf1m3eh4QMZbvGGRf6ZodtgVwi3IlWZ7K5lKBTaBu8ePascwbMj
mlTVJEq6bWmamPtDSW+4O/7EPQNE0Rjp6sjgAOVe75qR2EjQPpS9NBhp3UytoNlT
b4ribGqcFDWLC+9ySVJV98Bi5aiddesZSdVtFq2ZEgJIA0HnnX5LB934ppNL4oz0
0/9I04ypImLK46EGL/1V2wkLQcmQPYY7k67CInnBvmuAjwS0aVX9a5rbzbEYtM+g
2Yp2rgKHi1wZsQJWQuujVF6fuwl5q25kW3uaKJwMl3sjKqa9ek2KOJCrLFUZDWy8
unthXcsu3QIDAQABo4IC7jCCAuowHQYDVR0OBBYEFEAfCgZ0bQIEQMhljrYdT3nY
2QIbMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBkAYI
KwYBBQUHAQcBAf8EgYAwfjB8BAIAATB2AwQAQDKjAwQAQDKmMAwDBAJAMrQDBAFA
MrgDBABD0mEDBABD0mUDBABD0mcDBABD0m8DBABD0nkDBABKMgMwDAMEAL5cpQME
A75coAMEAMDkcAMEAMDkcwMEAcDkeAMEAMYXugMEANHI6QMEANhh4gMEAdhh5DAN
BgkqhkiG9w0BAQsFAAOCAQEAktpCddAZf9UEXmzeXlA/4Cj4iJPmxbTB5/Rm9/Y6
LofA0wuAq/4gEr+7u4jl6jxLhWvB6uEghdbmoJPBx2YPQdI93bBfeGQMAy8czbAO
OcXhF0tRMf/xFx0f/R1k6m9O5pi89nGKgI6OPNEIFW7XS+plq6fR2CKr5/znYBKM
xHFGqKyj+t0K5wCqAl0tqDxEBvb0mq9iOIdey/MEzgYYi8TFr3CSdXy6ZrEeAOd2
9t9ouOxI0czsko7nzTerRqp0GS3NqKuX5/x57aptgiBXgHOnrNGw7k/FJe7AYEH2
f+F41sfr3IUByxW0K76cr6r+XMQ1o3+bobXJl5SNfLTRxg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:00:25 2025 by rpki-client