Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          3USXccBAScaoRuI0q21ivyRdL1srsKdzsKTTgZAaydk=
Subject key identifier:   7F:FE:DB:60:7A:31:8B:33:33:73:72:AE:C9:D7:A4:1A:C2:9A:63:F6
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       26D2E001CD787C8E3CFE3758D062C39969EBE048
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa
Signing time:             Mon 22 Jun 2026 14:37:21 +0000
ROA not before:           Mon 22 Jun 2026 14:32:21 +0000
ROA not after:            Mon 21 Jun 2027 14:37:21 +0000
asID:                     834
IP address blocks:        207.180.4.0/24 maxlen: 24
                          207.180.12.0/24 maxlen: 24
                          207.180.22.0/24 maxlen: 24
                          207.180.25.0/24 maxlen: 24
                          207.180.45.0/24 maxlen: 24
                          207.180.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 17:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d2:e0:01:cd:78:7c:8e:3c:fe:37:58:d0:62:c3:99:69:eb:e0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jun 22 14:32:21 2026 GMT
            Not After : Jun 21 14:37:21 2027 GMT
        Subject: CN=7FFEDB607A318B33337372AEC9D7A41AC29A63F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:b5:eb:de:33:90:e6:29:b6:17:95:15:0a:
                    34:15:37:fe:56:a2:7b:6d:17:a0:80:48:a7:54:00:
                    f1:7b:01:48:f1:70:e6:4d:f8:27:76:f4:40:42:1c:
                    46:8f:6d:32:d4:88:24:f6:4e:b8:33:89:87:49:38:
                    29:59:4a:20:57:ec:33:85:82:9c:cf:a9:89:ce:4f:
                    c9:85:73:c7:d8:a3:a9:c5:7c:1e:bb:d2:bb:68:11:
                    b6:f6:da:2f:09:12:be:24:6f:0a:ab:4f:5f:7e:96:
                    a9:d9:7a:df:af:eb:fd:d2:21:6d:03:90:7d:3f:59:
                    d5:ed:b8:5a:c1:1c:10:06:3f:80:a9:ea:83:7a:f8:
                    29:be:4d:2a:72:fc:2d:05:3c:1d:51:2e:47:d6:04:
                    2a:b6:09:d5:5f:55:2a:c0:7c:2a:c1:a0:2d:31:70:
                    0b:ed:1a:a2:20:5c:87:a4:23:b3:14:14:d0:e9:14:
                    84:ce:ac:bb:13:2c:11:08:39:4e:14:d5:f4:65:c7:
                    06:43:ef:ad:0c:39:40:d0:16:a2:d1:c8:3a:48:f8:
                    b4:87:f3:ce:ae:3d:27:b0:3e:7a:eb:ba:8d:89:15:
                    ba:d1:db:2d:bd:00:4b:05:03:00:63:a3:8a:01:1a:
                    9b:42:79:48:c1:17:14:49:40:84:c0:3f:8e:05:ac:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FE:DB:60:7A:31:8B:33:33:73:72:AE:C9:D7:A4:1A:C2:9A:63:F6
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.4.0/24
                  207.180.12.0/24
                  207.180.22.0/24
                  207.180.25.0/24
                  207.180.45.0/24
                  207.180.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:65:07:d1:f7:72:6f:cf:14:e5:94:b2:0d:aa:23:fc:fa:1c:
         48:6a:ff:05:0a:bf:3f:03:90:17:f1:a4:84:42:f4:ae:be:17:
         5f:e3:1a:98:21:e9:0e:66:96:0a:a0:87:d4:76:e3:3b:24:9f:
         fb:38:ba:72:2f:63:c6:5f:48:b1:7b:ad:36:f8:63:f8:62:41:
         1c:d7:f0:b4:dc:d2:e7:1d:14:22:ff:92:45:f1:e1:59:13:44:
         55:e4:6f:c6:c9:e2:59:69:e5:fc:e4:1d:86:48:c6:99:ad:f3:
         b5:e4:b2:63:a3:fa:4c:dc:74:e6:d6:4a:1f:46:86:fc:5b:af:
         f9:b6:2d:4a:35:b1:95:1a:b7:47:34:8d:63:41:61:c6:3b:c5:
         40:48:64:dc:3b:08:01:94:7f:24:c6:5a:9a:11:bd:30:0a:f4:
         59:26:e1:69:43:e9:fa:96:c9:d3:bc:13:2d:2a:3b:39:55:cf:
         95:e8:32:24:e6:96:83:76:98:05:2d:da:0a:3e:5c:cf:61:fc:
         a2:39:c5:89:c2:df:9f:18:45:1f:47:fb:83:ce:f3:ca:36:26:
         62:8f:69:32:81:b6:69:88:22:7b:a1:1a:c7:43:30:61:a0:6a:
         5e:01:91:d4:fb:18:36:11:73:e7:ff:3a:5c:b6:e2:b6:6a:66:
         86:c1:e6:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 22 20:05:04 2026 by rpki-client