Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          Cm9UtO7E7rBiRmFSUN8aHl5hNOgW+VV+2hJqTxDfce4=
Subject key identifier:   05:8E:6B:0E:7D:8D:F7:82:76:A3:39:7F:21:71:91:1A:49:87:06:0B
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       084F66C1CC0E1F3A9768A2372F1E8AEF9F611EFA
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS834.roa
Signing time:             Thu 05 Nov 2026 14:57:43 +0000
ROA not before:           Thu 05 Nov 2026 14:52:43 +0000
ROA not after:            Thu 04 Nov 2027 14:57:43 +0000
asID:                     834
IP address blocks:        199.235.3.0/24 maxlen: 24
                          199.235.4.0/22 maxlen: 24
                          199.235.8.0/21 maxlen: 24
                          199.235.16.0/20 maxlen: 24
                          199.235.32.0/21 maxlen: 24
                          199.235.40.0/22 maxlen: 24
                          199.235.45.0/24 maxlen: 24
                          199.235.46.0/24 maxlen: 24
                          199.235.48.0/23 maxlen: 24
                          199.235.54.0/23 maxlen: 24
                          199.235.57.0/24 maxlen: 24
                          199.235.58.0/23 maxlen: 24
                          199.235.60.0/24 maxlen: 24
                          199.235.62.0/23 maxlen: 24
                          199.235.64.0/23 maxlen: 24
                          199.235.67.0/24 maxlen: 24
                          199.235.72.0/22 maxlen: 24
                          199.235.76.0/23 maxlen: 24
                          199.235.78.0/24 maxlen: 24
                          199.235.81.0/24 maxlen: 24
                          199.235.83.0/24 maxlen: 24
                          199.235.84.0/22 maxlen: 24
                          199.235.89.0/24 maxlen: 24
                          199.235.90.0/24 maxlen: 24
                          199.235.92.0/22 maxlen: 24
                          199.235.96.0/24 maxlen: 24
                          199.235.98.0/23 maxlen: 24
                          199.235.100.0/22 maxlen: 24
                          199.235.104.0/21 maxlen: 24
                          199.235.112.0/20 maxlen: 24
                          199.235.128.0/24 maxlen: 24
                          199.235.130.0/23 maxlen: 24
                          199.235.132.0/24 maxlen: 24
                          199.235.136.0/21 maxlen: 24
                          199.235.144.0/24 maxlen: 24
                          199.235.147.0/24 maxlen: 24
                          199.235.148.0/22 maxlen: 24
                          199.235.160.0/24 maxlen: 24
                          199.235.162.0/23 maxlen: 24
                          199.235.164.0/22 maxlen: 24
                          199.235.168.0/22 maxlen: 24
                          199.235.172.0/23 maxlen: 24
                          199.235.175.0/24 maxlen: 24
                          199.235.176.0/20 maxlen: 24
                          199.235.192.0/19 maxlen: 24
                          199.235.224.0/20 maxlen: 24
                          199.235.240.0/21 maxlen: 24
                          199.235.248.0/22 maxlen: 24
                          199.235.252.0/24 maxlen: 24
                          199.235.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 02:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4f:66:c1:cc:0e:1f:3a:97:68:a2:37:2f:1e:8a:ef:9f:61:1e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Nov  5 14:52:43 2026 GMT
            Not After : Nov  4 14:57:43 2027 GMT
        Subject: CN=058E6B0E7D8DF78276A3397F2171911A4987060B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:46:ce:35:5c:b0:35:83:12:f2:3c:ff:1b:
                    c3:15:e5:af:29:a2:b8:ef:e8:8c:80:1c:62:36:88:
                    6b:36:ac:41:98:ed:99:8f:f5:51:07:4e:22:48:ef:
                    7b:ad:53:9e:f4:c5:61:4c:c7:56:61:89:a2:22:90:
                    c3:8d:59:7e:2b:5a:c0:40:ae:ee:c7:44:01:48:6d:
                    2c:e3:72:bb:88:b5:87:a3:e7:3d:5d:5d:96:16:88:
                    fa:bf:d4:e7:ff:d0:5a:01:ae:35:e4:17:e9:c9:05:
                    a0:1f:07:ba:5d:e1:65:12:40:60:7c:21:5a:a2:d1:
                    92:af:01:41:97:36:03:f2:4c:f1:75:c0:30:b5:1a:
                    91:82:87:47:4e:91:8c:b3:a6:38:56:ca:44:a8:b8:
                    c2:5c:42:12:49:c2:4f:a7:27:d5:a7:6d:ba:95:1c:
                    0d:71:bb:e2:aa:af:fb:2c:c0:e4:94:70:08:dd:3c:
                    57:6b:c1:64:8e:f4:73:b8:57:c9:35:ed:7d:5c:3d:
                    3a:49:16:f5:86:14:bd:26:03:b2:39:2c:5c:b4:95:
                    0e:e4:2c:70:eb:33:bc:0e:65:57:95:34:01:2c:95:
                    10:0b:b9:99:a0:34:58:80:8c:c2:83:23:02:6c:35:
                    ab:1d:48:e1:b1:7f:dd:54:ab:85:f8:c2:76:8c:c8:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8E:6B:0E:7D:8D:F7:82:76:A3:39:7F:21:71:91:1A:49:87:06:0B
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.3.0-199.235.43.255
                  199.235.45.0-199.235.46.255
                  199.235.48.0/23
                  199.235.54.0/23
                  199.235.57.0-199.235.60.255
                  199.235.62.0-199.235.65.255
                  199.235.67.0/24
                  199.235.72.0-199.235.78.255
                  199.235.81.0/24
                  199.235.83.0-199.235.87.255
                  199.235.89.0-199.235.90.255
                  199.235.92.0-199.235.96.255
                  199.235.98.0-199.235.128.255
                  199.235.130.0-199.235.132.255
                  199.235.136.0-199.235.144.255
                  199.235.147.0-199.235.151.255
                  199.235.160.0/24
                  199.235.162.0-199.235.173.255
                  199.235.175.0-199.235.252.255
                  199.235.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c9:82:94:8d:ec:20:77:77:40:ba:8f:a3:65:f7:72:76:cc:
         f8:78:0a:62:d9:87:3f:24:ab:a4:49:61:31:0f:14:4d:a7:0d:
         46:f5:ad:c8:36:d5:0e:e0:65:1d:54:87:31:52:0b:96:29:18:
         79:5a:b8:15:31:aa:c6:b1:8e:92:c4:cf:4a:e2:78:e1:e0:e3:
         02:64:a0:f2:51:06:3e:74:5f:43:07:55:b6:6a:81:09:2c:dd:
         c0:20:f8:e5:ec:55:1a:9b:1e:85:cf:c2:73:5c:8d:c9:1e:07:
         f5:ac:ea:d6:ba:e5:04:fd:e5:56:18:b4:7d:98:56:28:3d:2f:
         d0:5c:a2:64:ec:64:bd:cf:c2:87:04:6f:62:b0:84:93:9f:cd:
         22:41:26:92:d6:2d:f3:1b:17:3e:5f:af:b1:cf:4b:61:25:03:
         e1:5b:2e:15:8b:8e:db:fa:2e:00:96:6a:d8:86:ea:ff:24:ff:
         42:21:04:1e:f7:69:98:8c:a6:3b:5e:a0:ba:66:a9:f0:20:5c:
         18:f4:93:ef:93:51:ea:0c:66:62:24:91:d2:e2:27:3a:76:19:
         b4:bc:0c:96:2a:f7:d6:f5:21:a1:36:9e:73:4b:c2:4d:cd:73:
         28:d8:30:2d:90:c3:67:c9:b0:70:fb:e8:26:04:5d:10:1f:7a:
         a7:9d:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 15:42:38 2026 by rpki-client