Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          dH20BvR/8lY+UypqxhAyoOT7TD6MAkLxtFYlvhORLXs=
Subject key identifier:   CF:8D:8A:51:CE:DC:3B:9D:33:47:0B:75:4E:FA:5B:9B:E7:28:1F:AE
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       289D283819BA7D3F478B1E03BFB7D631AF4D435E
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Fri 16 Oct 2026 11:34:18 +0000
ROA not before:           Fri 16 Oct 2026 11:29:18 +0000
ROA not after:            Fri 15 Oct 2027 11:34:18 +0000
asID:                     834
IP address blocks:        66.225.226.0/23 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          205.234.233.0/24 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          216.246.20.0/23 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.30.0/24 maxlen: 24
                          216.246.66.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9d:28:38:19:ba:7d:3f:47:8b:1e:03:bf:b7:d6:31:af:4d:43:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 16 11:29:18 2026 GMT
            Not After : Oct 15 11:34:18 2027 GMT
        Subject: CN=CF8D8A51CEDC3B9D33470B754EFA5B9BE7281FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:af:e6:8c:22:d3:3c:13:18:a2:ab:b2:b3:
                    23:38:90:4b:0c:ac:ba:3c:41:85:b4:dc:fc:a0:2b:
                    55:e4:17:5f:92:ab:cf:56:28:df:03:22:36:ee:20:
                    8a:17:07:1f:98:0b:8a:95:0d:22:f2:43:88:e2:c3:
                    30:4b:e5:c4:2b:57:88:b1:02:18:58:ef:22:db:b2:
                    f4:42:18:6e:b3:e7:ee:7f:40:af:73:50:e3:83:c3:
                    5b:52:14:08:1b:11:0c:a7:b9:99:4e:82:34:9c:9a:
                    58:6e:b4:d6:06:9a:d0:eb:eb:b6:c3:50:70:be:ed:
                    0b:6b:21:d3:60:ae:20:6f:7c:df:4e:52:5a:65:f6:
                    ab:2f:2f:2b:14:6c:0d:37:57:49:bf:71:85:89:31:
                    33:4d:81:f7:e0:6d:ae:81:dd:15:28:dd:34:4e:de:
                    22:50:60:51:9b:9b:c4:51:ce:6d:79:df:4f:23:50:
                    85:9b:ee:63:24:cd:79:b8:0b:62:94:a4:cc:cd:dc:
                    84:24:61:17:d8:95:5d:a9:9f:b3:35:cb:f0:4c:9a:
                    aa:ed:01:94:bb:18:f9:82:c5:75:aa:46:22:57:55:
                    fa:73:95:2e:5e:01:6f:b1:dd:df:69:ba:21:3c:bb:
                    a9:dd:c2:21:f8:53:bc:3b:d2:d9:46:1e:90:25:3f:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:8A:51:CE:DC:3B:9D:33:47:0B:75:4E:FA:5B:9B:E7:28:1F:AE
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/23
                  75.102.49.0-75.102.50.255
                  205.234.156.0/23
                  205.234.200.0/23
                  205.234.222.0/23
                  205.234.233.0/24
                  205.234.252.0/24
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.30.0/24
                  216.246.66.0/23
                  216.246.90.0/23
                  216.246.103.0/24
                  216.246.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:25:19:6e:ba:b3:f9:c0:1c:3f:25:9e:fe:1a:38:9b:91:e5:
         b6:25:8a:0b:32:c2:81:b1:7d:58:53:1c:a7:6e:67:2e:94:91:
         09:51:a4:41:b1:02:1e:18:1f:9c:5e:a2:87:be:58:c6:a6:db:
         74:70:74:2e:e3:53:4c:06:3b:32:d1:a1:56:66:f3:01:2d:73:
         b0:88:4b:b3:44:34:60:53:e4:34:58:4f:67:d6:fb:51:c5:70:
         6a:3c:87:de:ad:8c:a8:69:ad:75:38:b3:33:03:1b:e9:5e:f5:
         ae:a6:8b:71:24:79:50:da:04:78:78:28:de:d1:32:00:6f:49:
         af:67:a7:16:68:fb:47:71:ae:d7:3f:22:ad:c5:38:6d:0c:c3:
         b8:85:25:76:18:59:2d:1c:30:88:13:f9:a3:80:e4:4e:48:35:
         2c:d3:c0:0e:ec:c4:04:24:61:bc:6b:0e:66:4d:1b:a2:cb:36:
         06:17:7b:44:e0:31:37:3c:24:52:04:fb:6f:5e:06:09:c2:0a:
         a6:8c:6b:ef:03:05:e8:c7:a2:49:18:69:e4:fa:53:70:08:f5:
         fd:fb:f5:a2:ce:d2:88:42:e2:4f:3e:89:9e:34:ea:d1:69:cb:
         9f:ea:d8:60:27:9b:d9:c4:ab:29:0f:ea:e0:64:c4:a2:86:28:
         9b:0e:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:33:05 2026 by rpki-client