Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          5jDzBPoOzw8SK2yzxT8GhEONWi/ybTBFj6k23u4ndio=
Subject key identifier:   30:75:68:10:2F:0C:C2:BF:D2:B5:47:AA:91:ED:47:50:84:2C:0C:CA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5654BBED5DE603E5AAD35929769563DF43683675
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Tue 22 Sep 2026 06:15:15 +0000
ROA not before:           Tue 22 Sep 2026 06:10:15 +0000
ROA not after:            Tue 21 Sep 2027 06:15:15 +0000
asID:                     834
IP address blocks:        64.50.163.0/24 maxlen: 24
                          74.50.3.0/24 maxlen: 24
                          74.50.4.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.232.0/24 maxlen: 24
                          216.227.217.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:54:bb:ed:5d:e6:03:e5:aa:d3:59:29:76:95:63:df:43:68:36:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 22 06:10:15 2026 GMT
            Not After : Sep 21 06:15:15 2027 GMT
        Subject: CN=307568102F0CC2BFD2B547AA91ED4750842C0CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:b1:0a:ce:b9:1a:0b:f1:aa:83:d1:48:18:
                    42:25:93:0c:dc:77:da:be:24:d8:34:4b:af:7c:5f:
                    1f:7b:dc:a5:be:fd:c4:22:11:d9:16:8c:b2:ca:18:
                    73:96:f1:5d:05:74:6f:28:17:21:0d:5d:7a:53:e1:
                    5a:1a:29:2c:f4:25:6f:77:bb:8d:92:a8:85:66:dc:
                    d5:61:70:98:6c:73:ac:bd:f7:77:3a:78:73:c6:26:
                    66:ef:9c:98:38:53:36:88:a5:15:9e:a1:63:3e:d6:
                    f3:84:26:27:64:a7:6b:02:33:5c:4d:86:24:3b:c1:
                    9f:60:d1:dd:1c:51:62:c5:dd:2c:d2:a4:5b:da:6c:
                    56:24:a7:ad:9a:39:69:de:d6:5e:0a:07:2b:09:67:
                    51:ea:bf:01:ca:a9:62:0b:39:98:54:dc:aa:70:7b:
                    1b:43:71:8e:dc:5e:7a:ac:f0:c5:00:ae:c0:f5:b1:
                    b9:69:e3:d5:5c:ef:3d:95:93:01:91:1f:cc:2d:93:
                    96:cb:d9:f2:4d:66:11:60:c6:77:98:5e:7c:c6:30:
                    3a:d6:78:70:97:5e:57:be:a0:83:9a:87:06:df:89:
                    92:d9:1e:4f:8c:1f:de:fd:8a:70:57:ab:8e:ae:9b:
                    bf:27:34:ed:ab:2f:ab:fa:ba:20:cb:7f:df:b6:e5:
                    d1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:75:68:10:2F:0C:C2:BF:D2:B5:47:AA:91:ED:47:50:84:2C:0C:CA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.163.0/24
                  74.50.3.0-74.50.4.255
                  190.92.165.0-190.92.167.255
                  192.228.115.0/24
                  198.23.186.0/24
                  209.200.232.0/24
                  216.227.217.0/24
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:47:f1:62:c0:52:d2:3f:5d:fd:c8:6c:44:e4:b8:99:e6:
         ce:a6:11:45:24:75:ca:9b:e5:c3:a2:8d:c8:af:aa:4f:be:84:
         22:0b:73:c5:55:7d:30:76:43:96:80:c7:2f:2c:22:4a:b9:03:
         3c:8d:5f:f0:4c:05:b0:8a:9a:ab:c7:24:47:02:d5:c0:e2:7f:
         8a:b4:18:2b:68:e8:40:7f:4a:0a:6b:22:77:b5:03:70:01:7e:
         4b:58:81:38:92:eb:8f:e4:a8:e9:71:a1:4e:de:1e:26:51:de:
         5e:24:aa:c4:06:9c:3c:2e:19:93:3a:4a:4e:17:1f:05:80:95:
         79:65:0c:7c:64:d4:80:47:b1:c8:b0:ba:a9:b1:32:c2:9f:f3:
         23:66:b9:4f:57:57:55:72:b9:62:59:c6:e0:58:ad:26:90:f7:
         9d:a7:02:80:a6:a5:14:0a:55:06:a3:2e:c9:05:84:42:dd:11:
         3a:ac:b9:16:a2:2c:e5:c7:00:22:be:73:7b:82:8f:8a:76:80:
         02:1d:e9:44:67:d1:ea:0d:c6:5f:d1:56:73:5f:de:aa:d8:29:
         e2:28:cd:dd:64:b2:c7:45:7b:52:ec:0c:cd:64:8e:7e:dc:15:
         3a:d1:68:bb:29:38:18:59:e7:b4:d7:e9:19:8c:4b:96:45:4e:
         d2:7e:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:13:32 2026 by rpki-client