Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          g19G+fyCIUtTnRrQyl6kXnCj7AwFSPQRPZzL1D5IrOs=
Subject key identifier:   FB:32:A3:3F:34:34:A4:3F:4D:AF:24:9D:2F:C2:2C:35:49:A1:C5:FE
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       4D0D7ABB602C9191428407D2CA7D753B4F411AE8
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Sat 04 Oct 2025 07:28:12 +0000
ROA not before:           Sat 04 Oct 2025 07:23:12 +0000
ROA not after:            Sat 03 Oct 2026 07:28:12 +0000
asID:                     834
IP address blocks:        66.225.226.0/24 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.176.0/24 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          216.246.20.0/23 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.66.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0d:7a:bb:60:2c:91:91:42:84:07:d2:ca:7d:75:3b:4f:41:1a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct  4 07:23:12 2025 GMT
            Not After : Oct  3 07:28:12 2026 GMT
        Subject: CN=FB32A33F3434A43F4DAF249D2FC22C3549A1C5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:2b:9c:c7:1c:f9:f6:4a:f1:02:f6:b4:32:
                    b6:28:8a:72:2d:30:f0:fb:e5:c3:e2:54:ff:e1:cd:
                    88:b6:b8:3b:00:fe:02:f6:09:f4:77:81:b1:39:30:
                    bb:9b:16:28:db:4a:d5:0a:f4:ac:b1:61:25:69:de:
                    c9:6f:33:0e:fc:49:de:8a:06:7c:fe:ac:7f:3a:96:
                    15:a8:94:ad:7b:32:7e:e9:77:09:d5:ca:ef:e0:05:
                    a3:8c:b8:ca:00:f9:97:ea:af:ce:35:96:cc:e1:16:
                    14:32:a9:50:63:b6:c8:d5:63:e1:a1:e9:24:5f:5e:
                    dd:40:9a:5e:82:16:5e:d0:7f:44:55:3d:b9:d7:fb:
                    10:15:2d:34:2e:ec:80:ef:99:6a:f1:21:c3:16:7d:
                    f4:e5:aa:92:62:6b:e8:5f:aa:94:a9:ff:d3:5b:32:
                    6c:51:87:3b:47:51:4e:5e:3c:9f:4c:a3:22:ca:d9:
                    11:5e:c8:cd:ae:7c:97:b7:42:df:93:1e:e9:7a:8b:
                    85:a2:df:9d:8c:2f:81:9a:46:fc:63:1f:c7:0c:d0:
                    19:f3:3f:e6:85:8f:62:3d:4f:ba:e0:c8:f7:99:17:
                    ad:38:40:8e:60:dd:54:a5:25:df:7e:27:f7:a6:d6:
                    50:b9:9d:a7:f8:94:df:9b:87:95:e6:6f:a5:f2:b7:
                    26:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:32:A3:3F:34:34:A4:3F:4D:AF:24:9D:2F:C2:2C:35:49:A1:C5:FE
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/24
                  75.102.49.0-75.102.50.255
                  205.234.156.0/23
                  205.234.176.0/24
                  205.234.200.0/23
                  205.234.222.0/23
                  205.234.252.0/24
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.66.0/23
                  216.246.90.0/23
                  216.246.103.0/24
                  216.246.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:96:f1:cf:27:f0:33:d6:69:75:da:1f:da:3a:a5:68:f2:
         23:c2:c1:27:1d:0a:81:c5:e0:59:ea:ba:d0:df:7b:2a:4d:ef:
         97:a3:04:e9:27:13:f2:46:0e:1d:40:2d:69:a3:99:68:9f:a5:
         19:f5:b9:cb:60:7c:7c:e8:4f:0a:b5:ba:06:13:76:09:9c:37:
         54:66:72:16:57:f5:a6:03:a7:c1:2b:a5:cd:51:0b:b5:4d:1b:
         4a:ed:6d:6a:5f:ea:5f:01:38:2f:a6:dd:e7:30:85:25:98:e1:
         8b:d7:5c:e0:41:7a:8d:6b:b5:4b:e3:6d:cf:7d:65:2e:bc:60:
         4b:3e:1c:94:e4:0d:0d:33:ef:13:84:0e:4d:5a:b6:66:58:e5:
         3f:7a:25:8b:54:84:17:5d:94:fe:27:9f:c2:66:71:e7:11:d5:
         73:97:16:35:9c:c2:46:5c:05:29:1e:bf:b4:72:08:b2:3d:f4:
         10:fa:00:00:7b:36:ff:0c:82:08:b5:45:a4:2a:2a:5b:1b:45:
         94:64:0d:1c:81:8d:8a:fd:a8:be:07:1f:87:55:da:4f:94:ea:
         1f:18:0f:27:f1:71:0a:73:08:06:45:55:99:ac:95:bf:d4:4e:
         2a:42:f8:8a:98:ee:c0:89:76:f6:9a:9b:45:0f:3c:f7:e7:df:
         5e:33:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:43:34 2025 by rpki-client