Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          MqWGstCjTEvzlvevtHVlPuRSElFvujxhrFyWVvlr5j4=
Subject key identifier:   55:04:3C:D4:50:3A:C3:3F:4D:19:23:3D:FC:C9:C5:11:87:38:1E:5D
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       3C5E5572E0B0AF5DE92AE841F75DF8DFC86589A0
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Sat 23 Aug 2025 00:05:47 +0000
ROA not before:           Sat 23 Aug 2025 00:00:47 +0000
ROA not after:            Sat 22 Aug 2026 00:05:47 +0000
asID:                     834
IP address blocks:        66.225.226.0/24 maxlen: 24
                          66.225.228.0/24 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          216.246.3.0/24 maxlen: 24
                          216.246.20.0/23 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.66.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:55:72:e0:b0:af:5d:e9:2a:e8:41:f7:5d:f8:df:c8:65:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Aug 23 00:00:47 2025 GMT
            Not After : Aug 22 00:05:47 2026 GMT
        Subject: CN=55043CD4503AC33F4D19233DFCC9C51187381E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:fa:ad:f7:ad:eb:50:53:00:4e:19:2e:33:
                    7d:69:c9:a9:ec:98:62:bc:47:ae:95:11:da:90:59:
                    25:ed:da:4b:09:f6:72:e9:68:70:e1:e7:82:ca:8f:
                    ee:c9:a9:0b:48:d4:80:fa:ac:9f:85:87:7f:61:df:
                    a1:9a:bc:e6:a2:04:17:b1:2e:57:34:18:9a:fd:b1:
                    e2:11:b7:15:33:b6:88:1d:cd:9b:2e:49:2a:85:ea:
                    13:e1:6a:7f:ac:10:02:1e:94:b6:1f:90:81:9c:32:
                    19:25:48:26:76:8a:0d:2e:3a:ac:6a:7c:80:22:09:
                    1c:2e:96:01:94:a8:18:29:83:2d:1e:a0:1d:09:4f:
                    c2:87:23:1b:f0:3e:e6:e3:66:a5:49:0c:1d:18:38:
                    c3:fd:b9:fb:db:9d:ab:ed:dc:cc:29:89:d8:04:db:
                    11:ce:53:56:fa:2b:cc:b4:67:2d:31:7f:7c:a9:be:
                    57:6f:60:0f:65:f7:66:f1:1b:f4:44:1a:ba:a4:0c:
                    ed:c3:3a:70:24:47:94:70:68:18:48:3d:06:64:e9:
                    bd:3b:33:86:ee:64:7e:78:0e:8f:e2:d3:c8:19:a4:
                    e1:c4:71:be:96:be:3f:d6:6f:ea:47:d0:8f:35:6f:
                    70:80:7b:29:a6:ee:55:f8:bf:d9:12:00:12:5a:b1:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:04:3C:D4:50:3A:C3:3F:4D:19:23:3D:FC:C9:C5:11:87:38:1E:5D
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/24
                  66.225.228.0/24
                  75.102.49.0-75.102.50.255
                  205.234.156.0/23
                  205.234.200.0/23
                  205.234.222.0/23
                  205.234.252.0/24
                  216.246.3.0/24
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.66.0/23
                  216.246.90.0/23
                  216.246.103.0/24
                  216.246.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:5f:9a:27:6f:88:b0:4f:4f:33:a1:ec:4d:d4:fe:b9:49:
         eb:c0:b9:b0:ce:d5:82:72:20:a8:30:8c:b3:0c:58:15:7e:57:
         00:1f:7a:67:39:10:3b:b8:e3:45:e6:de:54:bb:42:59:ac:d0:
         f9:cd:d4:9b:ab:59:46:03:5a:41:9f:51:d1:19:55:46:bb:f6:
         28:d8:db:ac:ec:85:a7:dc:6c:35:13:81:9a:28:53:e4:9d:fe:
         ac:e9:8f:8f:7b:23:17:ea:20:8f:d1:81:97:39:ac:e9:3c:9f:
         8b:dc:0b:e7:be:80:ff:10:c6:63:98:3c:09:5f:80:3e:30:a1:
         5c:38:4c:68:6f:08:d2:c3:dd:26:64:dd:00:ac:9c:07:3e:64:
         e9:93:0f:c6:97:54:e9:7c:4d:6c:bb:b6:b9:ba:93:47:e8:7f:
         dc:22:36:5a:7c:84:c5:33:22:0e:25:26:82:36:15:3a:f1:45:
         d8:0c:57:fc:d4:b9:d8:87:aa:29:a0:b9:9e:ad:c4:55:0f:cd:
         b7:35:c4:18:aa:9d:98:57:12:c1:79:1c:4d:c0:f3:6a:d0:3c:
         ea:a2:e5:15:d6:77:83:5e:f9:a1:04:63:91:da:d2:d3:b1:9d:
         12:dd:eb:bc:de:00:40:c3:fb:42:5e:c6:2a:3b:bf:5b:09:4b:
         7f:fb:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:58:38 2025 by rpki-client