Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          ebl9lnIhORthXP0TWDCRZsBoZ3QXOwB3wtzFN4unhhk=
Subject key identifier:   7C:0A:F8:0C:C7:02:D7:5A:46:6F:EB:44:2F:03:7E:3D:7D:87:9E:24
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       21B3E0EEEE5B70BE83D84ECB90408E1BB3002F77
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Fri 25 Jul 2025 10:14:26 +0000
ROA not before:           Fri 25 Jul 2025 10:09:26 +0000
ROA not after:            Fri 24 Jul 2026 10:14:26 +0000
asID:                     834
IP address blocks:        64.50.166.0/24 maxlen: 24
                          64.50.176.0/22 maxlen: 24
                          64.50.182.0/23 maxlen: 24
                          64.50.188.0/24 maxlen: 24
                          67.210.107.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.120.0/24 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.237.0/24 maxlen: 24
                          209.200.240.0/24 maxlen: 24
                          216.97.227.0/24 maxlen: 24
                          216.97.228.0/23 maxlen: 24
                          216.97.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b3:e0:ee:ee:5b:70:be:83:d8:4e:cb:90:40:8e:1b:b3:00:2f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 25 10:09:26 2025 GMT
            Not After : Jul 24 10:14:26 2026 GMT
        Subject: CN=7C0AF80CC702D75A466FEB442F037E3D7D879E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:08:69:8b:dd:4b:e9:62:c0:c9:97:b1:b1:
                    0d:2d:af:64:54:dc:a6:19:31:29:ea:1e:da:97:4e:
                    09:db:82:ba:df:2e:7c:2c:fe:9e:6a:e5:e3:c0:ec:
                    94:36:be:31:db:5f:21:d6:8d:d5:ff:68:b7:26:8d:
                    5a:b0:9b:cb:64:a2:ad:43:2a:a8:f0:f2:04:62:cf:
                    6c:85:6d:c6:87:01:80:77:13:f9:a1:82:b6:4e:28:
                    ee:65:f8:9c:5f:53:d9:78:7b:bd:3b:6b:b3:82:da:
                    5a:7a:74:8d:af:e6:1b:e3:8c:f0:94:6d:26:e2:81:
                    17:f3:95:7c:6e:13:d9:c2:76:0b:7f:89:3c:23:26:
                    7f:72:72:69:60:fe:af:f5:08:ca:7e:57:45:58:94:
                    df:63:57:34:1d:47:68:43:10:41:c5:84:59:76:bd:
                    af:93:ad:7c:cb:24:d7:0c:a4:4b:25:5e:b8:5a:4a:
                    10:5b:50:2b:27:d9:c1:c1:49:78:22:d8:48:d8:a1:
                    54:6a:22:87:bb:a9:a5:a2:b1:c7:b7:6d:ef:37:8a:
                    94:1b:b4:14:4f:ff:1d:59:3e:04:5d:cc:d2:20:9f:
                    dd:c2:6f:30:bb:7a:d3:e4:96:a5:06:88:75:26:eb:
                    e8:a5:72:bd:db:8f:a8:5e:52:89:73:0b:a5:c6:85:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0A:F8:0C:C7:02:D7:5A:46:6F:EB:44:2F:03:7E:3D:7D:87:9E:24
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.166.0/24
                  64.50.176.0/22
                  64.50.182.0/23
                  64.50.188.0/24
                  67.210.107.0/24
                  190.92.165.0-190.92.167.255
                  192.228.115.0/24
                  192.228.120.0/24
                  198.23.186.0/24
                  209.200.237.0/24
                  209.200.240.0/24
                  216.97.227.0-216.97.229.255
                  216.97.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:54:4c:9f:56:79:9f:76:cd:41:0f:ad:0e:38:6b:93:c8:8e:
         0b:5a:e6:62:91:93:e2:e4:e9:9e:a3:f1:67:1f:39:dc:c8:6a:
         e6:df:a2:e7:16:81:55:3b:33:c4:b6:21:14:99:3f:29:36:1b:
         ee:09:de:15:6c:3e:2a:c3:81:eb:a1:16:07:9b:d1:c7:a6:8c:
         0e:49:bf:6e:7a:2a:9e:e7:02:a0:e4:94:91:0d:cf:7d:0b:76:
         c9:a0:83:64:cc:26:e7:96:14:c3:70:ce:21:dd:58:e3:f9:45:
         4d:45:be:71:6c:be:08:8f:ec:32:43:39:3b:62:09:1e:d4:f7:
         5f:ed:22:70:a1:81:ea:09:59:31:83:0f:6a:35:03:96:1a:e6:
         b9:b9:8e:6c:d9:fd:79:c8:c5:69:aa:8d:4c:a7:b1:ed:ff:73:
         e4:fa:4a:30:e1:c0:7b:a2:37:d4:05:9e:b0:ef:5d:4e:3b:f2:
         99:7d:e7:88:0f:03:ec:80:1e:de:b0:9e:b4:66:8d:27:bc:55:
         db:a2:6d:cc:f4:a4:2a:15:68:c8:2c:f5:21:5d:c0:c5:f2:54:
         48:c8:ad:f6:c8:86:6f:c6:28:a7:ad:d0:0c:f9:22:8a:77:a0:
         13:82:d7:1e:d7:80:99:02:10:26:b7:83:2b:94:c8:05:96:2c:
         91:3b:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:36:08 2025 by rpki-client