Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          5f0iEouELBaXnqW3hJ01tfxLkRXAQy+x/1FrJdgyhCk=
Subject key identifier:   23:B9:F2:50:63:AB:A0:DB:BC:28:52:BE:DC:2A:28:54:C0:87:40:09
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       6983B438A08A722A9F060B3C0A082AB94E207BB3
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Wed 16 Jul 2025 00:01:32 +0000
ROA not before:           Tue 15 Jul 2025 23:56:32 +0000
ROA not after:            Wed 15 Jul 2026 00:01:32 +0000
asID:                     834
IP address blocks:        66.225.226.0/24 maxlen: 24
                          66.225.228.0/24 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.176.0/24 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          216.246.20.0/23 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.66.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 01:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:83:b4:38:a0:8a:72:2a:9f:06:0b:3c:0a:08:2a:b9:4e:20:7b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Jul 15 23:56:32 2025 GMT
            Not After : Jul 15 00:01:32 2026 GMT
        Subject: CN=23B9F25063ABA0DBBC2852BEDC2A2854C0874009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:69:f3:cd:0d:18:c2:6a:3c:a5:58:7f:6f:
                    ce:e9:9c:ea:df:cb:45:d4:60:9d:c3:05:f0:8c:cc:
                    2d:1e:ec:b8:40:18:bc:6e:9e:02:2a:f1:6b:f4:ff:
                    b5:b7:49:4b:69:a6:da:89:36:98:b6:d0:c8:2b:9b:
                    19:7b:b8:39:6d:9e:85:a3:54:47:b4:bb:46:44:da:
                    c8:2a:a6:bc:cc:05:56:2f:da:8d:26:48:31:f3:66:
                    d3:da:4d:5a:a7:54:17:3c:49:1b:d5:3a:10:7f:92:
                    b4:a8:f5:c8:93:66:39:eb:4b:6d:bb:7c:6e:6f:5b:
                    ad:d6:ca:30:a1:62:87:f3:80:a6:4f:fd:12:09:41:
                    13:13:19:fe:ab:eb:d6:e5:0e:11:d9:62:82:06:bf:
                    6c:38:f0:f9:6b:18:08:00:94:3c:e5:ec:00:7f:80:
                    f2:d1:3b:13:6b:4b:9e:d4:91:66:7b:90:f4:e3:db:
                    26:70:91:f5:74:f1:84:8c:55:52:0b:5e:1e:dd:67:
                    f0:e9:e8:d0:82:06:8b:50:0c:34:7a:43:f7:ad:07:
                    4d:82:a9:8b:72:15:e8:77:94:9c:e4:67:2c:40:f8:
                    ca:d7:de:06:80:4a:41:4a:30:91:14:6b:ee:b8:ef:
                    5c:18:f1:6f:05:af:6e:12:58:93:f6:96:d8:f3:08:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:F2:50:63:AB:A0:DB:BC:28:52:BE:DC:2A:28:54:C0:87:40:09
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/24
                  66.225.228.0/24
                  75.102.49.0-75.102.50.255
                  205.234.156.0/23
                  205.234.176.0/24
                  205.234.200.0/23
                  205.234.222.0/23
                  205.234.252.0/24
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.66.0/23
                  216.246.90.0/23
                  216.246.103.0/24
                  216.246.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:12:bb:c3:0c:54:84:6a:c0:4f:79:14:2e:35:dc:8a:87:
         42:39:04:5e:da:25:1b:f0:a5:04:fe:0c:5a:c2:7c:4f:3c:89:
         7a:2a:5a:bf:e6:bf:8e:eb:cf:a5:5e:50:55:d3:3c:ad:5a:ac:
         9a:23:94:19:1e:06:82:3a:89:42:0b:6c:9f:93:9c:42:3f:ed:
         57:e7:ee:23:3c:c7:f6:d6:79:56:b0:9d:ef:97:5d:34:28:4d:
         5c:15:12:25:6f:0c:ce:22:c4:a4:5a:79:f2:64:c1:da:57:d2:
         cd:ee:fb:23:d6:5c:e3:58:68:90:3a:60:b2:fc:79:2f:ed:72:
         09:b3:da:1d:82:1a:8c:48:4b:e9:66:f9:af:ae:bc:fc:04:c5:
         2a:da:c5:69:1e:4d:e0:7c:f7:68:48:ad:df:e2:df:f9:77:c6:
         c2:6e:17:e9:80:43:8c:79:d0:4a:29:e0:c0:0f:95:5f:e4:e2:
         15:29:67:0b:53:e0:82:e2:cd:f1:42:ce:52:5a:8e:6b:09:64:
         56:71:e1:2c:cc:54:50:84:4d:d6:56:6b:bd:db:a4:17:b9:13:
         e5:2e:45:07:3b:88:07:11:c6:35:36:da:3f:fc:2a:b7:1a:4b:
         90:c3:cf:a5:5f:2c:71:9b:1d:90:5f:ae:3a:0c:d7:8a:ae:59:
         2f:31:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:14 2025 by rpki-client