Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          gXz05SOVCvG7W2ZyL4am3W/zH4ROigiB4hVhBalv9qI=
Subject key identifier:   FF:73:3C:B6:06:A9:53:E2:43:C2:EF:C6:CE:73:6B:3E:B2:F0:37:3A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7195C475A6F87687F945E1FC4FAE2A0809110506
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Fri 22 Aug 2025 08:42:14 +0000
ROA not before:           Fri 22 Aug 2025 08:37:14 +0000
ROA not after:            Fri 21 Aug 2026 08:42:14 +0000
asID:                     834
IP address blocks:        64.50.163.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.182.0/23 maxlen: 24
                          64.50.184.0/23 maxlen: 24
                          64.50.188.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.120.0/24 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:95:c4:75:a6:f8:76:87:f9:45:e1:fc:4f:ae:2a:08:09:11:05:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 22 08:37:14 2025 GMT
            Not After : Aug 21 08:42:14 2026 GMT
        Subject: CN=FF733CB606A953E243C2EFC6CE736B3EB2F0373A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cb:b9:3e:bc:fa:2f:d7:d9:5c:fe:de:b3:ac:
                    a2:6a:7d:26:84:fb:5c:71:56:bc:7f:d1:03:03:90:
                    58:73:23:55:f9:98:5c:8f:cc:b4:c1:0e:47:fc:a6:
                    fe:b0:cf:07:b4:e6:42:9b:de:df:ff:1d:8c:ac:85:
                    ef:14:5b:6b:09:90:a9:d8:a2:2f:cc:c9:14:e1:66:
                    27:9a:a8:22:b5:ce:69:13:44:d7:5a:cc:7c:2e:0c:
                    63:60:0f:e7:03:b8:e3:d8:a9:87:8b:2e:ad:8d:dc:
                    c5:34:d4:72:43:a8:b7:1f:3f:b9:f3:12:af:7f:6a:
                    96:7f:6b:d5:ac:6f:16:31:27:0c:9d:40:31:c8:d3:
                    93:6a:c2:a7:f3:61:fe:a7:36:a6:bb:d4:0b:70:7f:
                    10:2a:a7:f6:70:39:f4:a6:83:af:4b:c3:21:b8:a0:
                    c6:65:41:08:c7:69:28:56:2b:0f:2c:9b:07:07:ac:
                    eb:8e:ea:55:85:b4:80:55:eb:34:92:58:a8:e6:46:
                    6e:68:52:6a:ac:83:d4:72:49:dd:63:51:ed:56:0d:
                    ac:f0:3b:1e:73:3a:ab:3a:b7:fe:a6:76:53:58:78:
                    fa:ad:22:82:06:ac:9f:75:50:46:e9:85:8d:95:b7:
                    d5:28:85:99:52:23:be:21:85:e5:18:c1:4f:3b:25:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:73:3C:B6:06:A9:53:E2:43:C2:EF:C6:CE:73:6B:3E:B2:F0:37:3A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.163.0/24
                  64.50.166.0/24
                  64.50.182.0-64.50.185.255
                  64.50.188.0/24
                  190.92.165.0-190.92.167.255
                  192.228.115.0/24
                  192.228.120.0/24
                  198.23.186.0/24
                  209.200.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:05:31:33:d7:2b:30:49:c3:71:3a:3c:2b:95:2a:ec:cb:d2:
         59:83:4d:06:a1:8f:57:7b:3a:77:19:fb:97:75:99:f9:9e:64:
         9c:6d:fd:4d:b8:8c:d3:ef:f7:a8:8b:39:2e:30:fb:eb:84:53:
         45:f0:19:8e:dc:b2:c5:8e:58:cb:29:e8:73:24:13:c6:ac:19:
         93:54:49:8c:4d:8f:38:a1:85:ec:76:d1:76:9b:c1:a0:5f:21:
         a2:ff:bc:a8:6c:4a:46:6c:9b:e3:16:2e:7a:a7:e5:f4:2a:4c:
         c1:71:db:22:71:24:1c:18:c5:90:f7:b5:26:f2:55:d6:5b:4f:
         72:b2:52:5d:a5:c0:3d:6c:29:ed:36:08:85:0c:51:3e:c5:59:
         1a:04:a3:38:81:3f:f1:17:1c:94:00:3c:4c:64:df:f8:a0:48:
         d9:71:35:0f:6a:d8:23:9f:ce:2e:67:bd:e0:58:dd:a1:b2:c2:
         ee:71:9a:95:9a:db:b9:7a:4d:af:8b:0f:57:cb:f9:9f:53:73:
         7b:5a:81:07:52:aa:a7:bc:b7:ee:38:06:3a:af:fa:28:d2:98:
         65:f7:b7:db:e1:47:d7:08:7c:1e:4a:c3:88:69:50:f3:00:f9:
         e7:ad:cb:5f:c3:58:1d:1c:56:84:1b:ec:9c:b4:02:8c:74:e6:
         50:02:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:45:26 2025 by rpki-client