Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          ly5tDYz0JLTgZmpeq4D04bIpONr8ViCUxER0NV2dB4c=
Subject key identifier:   A4:20:80:0B:F2:53:84:91:0E:34:3D:E2:41:73:32:29:77:4A:83:AD
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       68944E95E16AB2C18FAA5F8BE19F35660894981A
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Fri 13 Mar 2026 15:28:55 +0000
ROA not before:           Fri 13 Mar 2026 15:23:55 +0000
ROA not after:            Fri 12 Mar 2027 15:28:55 +0000
asID:                     834
IP address blocks:        66.225.226.0/24 maxlen: 24
                          66.225.228.0/24 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          205.234.233.0/24 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          216.246.20.0/23 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.30.0/24 maxlen: 24
                          216.246.66.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 10:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:94:4e:95:e1:6a:b2:c1:8f:aa:5f:8b:e1:9f:35:66:08:94:98:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Mar 13 15:23:55 2026 GMT
            Not After : Mar 12 15:28:55 2027 GMT
        Subject: CN=A420800BF25384910E343DE241733229774A83AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:10:47:e8:c2:50:77:5e:ad:43:f1:57:30:
                    2f:4c:14:90:3b:e3:26:7c:24:10:ae:7d:e4:d0:c3:
                    3e:fa:fa:4b:0b:82:78:7f:57:2d:d0:60:69:97:63:
                    3a:a8:e4:f2:bd:15:d3:d9:fc:37:f2:4f:86:5c:39:
                    1a:75:40:01:1a:0d:33:1a:da:1e:ec:db:fe:35:ad:
                    85:20:07:d6:c7:38:34:4c:b3:f4:af:04:18:99:f4:
                    e0:2f:b7:59:8e:f9:e6:76:38:47:4f:9b:00:11:a0:
                    e8:99:a0:c1:2e:fb:49:0a:bb:0f:d0:c3:a5:5c:4a:
                    67:a5:1e:49:87:bc:c8:96:98:4d:4f:3c:ab:21:1a:
                    df:88:33:88:06:91:a4:13:b1:48:e8:fd:2e:9e:0a:
                    9e:8d:92:7e:7e:33:bf:21:80:23:a3:13:7a:ac:0f:
                    59:cf:80:24:d6:fc:cc:35:30:01:41:8d:df:b4:28:
                    10:74:e5:a3:25:f7:3f:2c:93:be:05:73:3f:6a:8d:
                    39:f6:e8:b3:a0:7f:83:84:61:b1:31:f8:26:c4:50:
                    6c:dc:d6:ab:1d:ea:a0:a4:ff:98:01:04:0c:82:55:
                    5d:94:13:da:3b:3a:66:3d:6f:19:13:d2:98:aa:ff:
                    0c:84:87:3b:0e:ce:34:60:fa:9f:59:f4:96:61:07:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:20:80:0B:F2:53:84:91:0E:34:3D:E2:41:73:32:29:77:4A:83:AD
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/24
                  66.225.228.0/24
                  75.102.49.0-75.102.50.255
                  205.234.156.0/23
                  205.234.200.0/23
                  205.234.222.0/23
                  205.234.233.0/24
                  205.234.252.0/24
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.30.0/24
                  216.246.66.0/23
                  216.246.90.0/23
                  216.246.103.0/24
                  216.246.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:89:0b:0a:b0:c0:58:0b:8a:a8:89:d5:18:b7:1a:a1:8e:59:
         8d:ad:d0:60:09:19:f0:6c:76:6a:70:ef:05:a9:67:3f:64:00:
         11:1f:99:89:44:66:9b:93:85:26:6f:b4:9c:38:40:ed:f7:68:
         a0:96:d4:06:be:db:25:cb:fd:f4:99:b3:b4:88:99:07:b4:cc:
         a3:52:7a:c2:1f:b8:85:f0:7b:a1:72:5b:30:1e:4d:ac:50:b0:
         f3:f5:58:f8:8d:f0:6d:10:b4:75:29:d8:80:52:09:b1:18:55:
         94:2d:f1:1e:89:fa:3f:05:53:f8:73:c8:43:22:37:cf:e5:2f:
         1b:f5:45:4b:1a:4a:f3:1b:86:bb:82:05:c4:df:83:4f:ba:0c:
         5f:c6:55:33:c4:db:2b:e3:d3:f0:0d:50:22:d6:da:b6:ad:52:
         49:24:de:36:e1:39:ba:ce:a8:3a:58:cc:52:3d:50:2e:01:0e:
         41:69:bd:d3:bc:8e:9b:1b:20:ee:a7:d1:83:53:b4:10:30:ef:
         bf:e5:2f:8f:14:f1:53:a0:47:54:71:f7:60:f2:7d:0b:55:24:
         64:27:42:37:be:dd:77:e3:7c:88:6d:5d:4d:2a:10:5e:50:56:
         31:6a:1b:d9:8b:fb:57:9b:ae:c2:f5:65:9d:e4:84:fe:8f:de:
         03:cd:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:38:02 2026 by rpki-client