Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          0JV/QT1WNWy3nVrnCmfSn2pGITurxPV63jaeXGa1gBc=
Subject key identifier:   0F:4A:FB:99:C5:C8:E5:4A:D1:06:3A:AC:58:80:26:7F:EF:85:85:11
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       34A6B5612F7621CABF72755F00ACEEB50F5351D4
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Tue 19 Aug 2025 11:36:34 +0000
ROA not before:           Tue 19 Aug 2025 11:31:34 +0000
ROA not after:            Tue 18 Aug 2026 11:36:34 +0000
asID:                     834
IP address blocks:        157.254.15.0/24 maxlen: 24
                          157.254.27.0/24 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.166.0/24 maxlen: 24
                          157.254.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 13:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a6:b5:61:2f:76:21:ca:bf:72:75:5f:00:ac:ee:b5:0f:53:51:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 19 11:31:34 2025 GMT
            Not After : Aug 18 11:36:34 2026 GMT
        Subject: CN=0F4AFB99C5C8E54AD1063AAC5880267FEF858511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:38:d2:6b:69:88:0c:04:67:3f:f3:a8:de:
                    ad:13:db:ae:9d:e8:83:bb:a6:28:0b:4e:6d:e3:81:
                    22:c9:93:c0:d7:8f:4b:1c:53:58:af:e5:51:65:53:
                    5c:ae:d7:48:ee:53:d8:94:db:b7:c3:84:ea:33:45:
                    25:10:2a:3a:5c:23:cf:78:7f:70:b7:60:8c:50:52:
                    d7:fb:b2:39:5d:d4:30:b0:70:55:46:f6:fc:60:cb:
                    ac:65:4d:f9:f2:49:45:d1:8c:c0:60:52:9e:3d:43:
                    e3:56:64:bd:9f:f6:39:c4:ff:a5:13:ed:70:1f:35:
                    43:fe:ff:c7:c5:67:be:56:36:21:9c:c0:8b:f4:70:
                    7c:8b:ef:b4:23:54:aa:85:51:91:8d:f4:cf:2a:11:
                    e6:25:1e:15:24:c8:44:8d:3b:84:84:51:f2:98:01:
                    51:c9:26:bd:79:cf:27:1a:cd:e4:0e:38:6c:5b:0b:
                    99:62:71:a0:31:ce:ef:a6:74:2d:ae:34:d4:3d:4c:
                    62:6c:78:60:06:f1:e3:93:f6:79:84:a1:3e:9a:1d:
                    00:6d:57:99:04:ef:e4:7e:d8:ca:52:67:3a:76:98:
                    3e:e5:53:97:7e:64:58:a2:91:b7:28:f1:2d:19:bb:
                    76:5f:ba:b4:6c:20:a9:62:2a:f3:3a:0f:f7:18:0d:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4A:FB:99:C5:C8:E5:4A:D1:06:3A:AC:58:80:26:7F:EF:85:85:11
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.15.0/24
                  157.254.27.0/24
                  157.254.144.0/21
                  157.254.166.0/24
                  157.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:24:79:60:4c:73:9d:20:6d:c8:e2:05:ae:be:0f:cb:b4:9f:
         77:c1:d5:be:ec:b4:2b:4c:97:97:30:d7:a1:7e:28:43:5e:2b:
         c5:ba:67:e0:e8:1f:17:0f:0f:bf:a3:63:14:1d:c5:f5:ce:1a:
         14:85:fb:b6:0a:d2:2a:47:b3:31:c4:60:cf:e0:7f:25:dd:87:
         38:94:56:27:e3:13:cf:32:f3:66:b2:f4:12:f2:3e:b3:65:8b:
         97:e6:a0:8d:84:21:de:94:6a:96:5d:bd:7c:92:0e:6c:05:64:
         db:05:a6:26:20:92:71:e3:e3:56:9b:91:c8:b2:c9:63:68:d0:
         f2:09:61:35:f7:fe:da:54:46:a2:65:36:a0:c8:cd:98:cb:ea:
         3c:b3:f2:87:b9:a1:e9:d2:25:08:75:4d:ac:45:00:43:7c:1c:
         39:71:bd:33:be:fe:17:43:3e:76:51:d5:33:c3:01:e1:e9:f8:
         b2:0a:09:ca:6f:ff:81:2f:b2:e5:af:2c:a0:25:2d:e7:66:bd:
         8b:c4:1f:1f:5b:eb:c1:63:72:f8:65:d1:4b:f7:e7:b2:19:79:
         6e:33:07:b1:e2:69:c6:88:1a:2b:bb:bc:b0:06:b3:99:d0:07:
         d9:0c:0c:69:49:27:6f:f4:e9:ff:90:b5:86:a8:6d:df:01:5d:
         d3:02:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:44:50 2025 by rpki-client