Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          g4BVKKEjnNs1Twt8j7iDHbBAOQfx+OPyni1eGYM9LhI=
Subject key identifier:   E7:50:CB:FE:8C:40:2F:59:81:EB:4A:84:C1:FA:2B:23:66:FC:D2:33
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       32EA5E2AB0F267A3177A8290D5505306BCF4CA09
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Tue 10 Nov 2026 10:24:51 +0000
ROA not before:           Tue 10 Nov 2026 10:19:51 +0000
ROA not after:            Tue 09 Nov 2027 10:24:51 +0000
asID:                     834
IP address blocks:        157.254.0.0/24 maxlen: 24
                          157.254.130.0/24 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.191.0/24 maxlen: 24
                          157.254.204.0/24 maxlen: 24
                          157.254.206.0/24 maxlen: 24
                          157.254.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 06:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ea:5e:2a:b0:f2:67:a3:17:7a:82:90:d5:50:53:06:bc:f4:ca:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov 10 10:19:51 2026 GMT
            Not After : Nov  9 10:24:51 2027 GMT
        Subject: CN=E750CBFE8C402F5981EB4A84C1FA2B2366FCD233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:3f:fd:ff:3e:7d:27:fe:57:52:12:1d:47:
                    59:3c:3c:fc:e1:d7:ad:25:f6:8b:6a:03:e0:23:cf:
                    c6:d5:4f:40:d1:3a:af:93:d2:98:1b:e8:f8:8c:86:
                    f9:8f:ee:99:66:63:39:76:bb:35:28:0d:1c:b7:37:
                    2c:cb:f2:52:78:7d:fe:3c:95:97:e6:33:b7:1e:2f:
                    e4:3c:1c:96:67:c5:08:44:5a:db:89:36:a1:3c:b5:
                    58:9d:fa:d8:5e:ad:e5:93:e3:c8:4f:88:57:b4:c0:
                    79:34:f6:0c:d0:24:d6:b0:09:eb:43:53:81:93:08:
                    d3:4e:6d:20:c5:83:11:b8:ec:50:9c:7a:3e:92:27:
                    3f:c0:fd:d6:c7:1b:2b:39:61:cb:2f:2a:45:ff:fe:
                    ff:e4:6e:63:34:6a:69:5c:20:5c:40:86:a9:5d:28:
                    81:84:9a:95:0d:77:61:14:0f:cd:f9:3d:5b:0c:f2:
                    19:9a:f2:e9:1d:5f:e2:57:ee:fe:dd:71:9f:3e:84:
                    a9:0f:56:d8:17:12:a5:31:32:3b:13:db:60:ee:b2:
                    f5:23:78:68:a8:53:c5:f3:ca:34:bb:9f:66:4f:98:
                    c6:68:bf:c6:38:84:fd:0e:1a:cd:b5:fa:37:cb:d7:
                    7f:68:8a:26:83:77:4c:eb:ec:13:1e:61:d3:86:08:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:50:CB:FE:8C:40:2F:59:81:EB:4A:84:C1:FA:2B:23:66:FC:D2:33
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/24
                  157.254.130.0/24
                  157.254.144.0/21
                  157.254.191.0/24
                  157.254.204.0/24
                  157.254.206.0/24
                  157.254.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:59:5f:45:2f:94:b3:00:8b:2e:5a:72:59:21:fc:75:1d:39:
         da:75:4b:b7:5d:3b:11:8f:37:c9:dd:1c:d3:62:5d:7b:1c:34:
         38:86:51:3c:1a:b2:07:e9:ea:40:48:a9:c3:3b:24:27:89:01:
         7b:47:7d:d4:22:77:01:3e:b0:2d:28:54:f2:df:c8:46:0c:27:
         76:95:12:d5:13:33:00:6c:61:ee:1d:af:dd:5d:d3:63:e6:3d:
         37:22:e3:48:c6:01:84:2f:f4:89:af:72:af:7a:8e:57:c9:25:
         a7:aa:35:a9:a2:1f:bf:48:bb:83:9e:9c:da:e1:38:27:79:c2:
         ed:02:17:79:24:5f:f4:b6:7e:42:a2:ef:de:2e:4d:2b:a8:fe:
         08:22:aa:c3:98:3b:49:65:ac:f4:59:b2:73:dc:de:67:75:59:
         82:41:e9:03:d9:23:c3:86:56:7f:c1:35:b3:6d:75:4c:23:b0:
         38:63:21:7c:d0:e9:ae:36:e9:b5:b6:3c:d5:79:06:b9:c9:30:
         e3:80:46:98:41:cb:70:84:4d:fb:10:bd:65:16:eb:97:d3:45:
         45:f5:7b:ad:1f:d3:a5:3a:84:cb:fc:e0:07:02:3c:4d:69:60:
         48:67:bc:d2:49:32:aa:af:8d:a6:51:26:28:ac:d1:f5:ac:bb:
         14:3d:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:43:56 2026 by rpki-client