Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          AULU/TFzLVfU0ZBJCCTQfRrGO51vQjePMgRVknQwb5A=
Subject key identifier:   56:10:9C:84:8F:4D:F2:02:D5:63:27:4D:99:0A:BB:BB:DF:8A:D0:CD
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4756295533FA78765220F2C05179521A84F93ECF
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time:             Fri 26 Jun 2026 00:02:22 +0000
ROA not before:           Thu 25 Jun 2026 23:57:22 +0000
ROA not after:            Fri 25 Jun 2027 00:02:22 +0000
asID:                     834
IP address blocks:        140.99.27.0/24 maxlen: 24
                          140.99.39.0/24 maxlen: 24
                          140.99.44.0/24 maxlen: 24
                          140.99.47.0/24 maxlen: 24
                          140.99.48.0/24 maxlen: 24
                          140.99.59.0/24 maxlen: 24
                          140.99.84.0/23 maxlen: 24
                          140.99.114.0/24 maxlen: 24
                          140.99.118.0/23 maxlen: 24
                          140.99.123.0/24 maxlen: 24
                          140.99.151.0/24 maxlen: 24
                          140.99.184.0/23 maxlen: 24
                          140.99.211.0/24 maxlen: 24
                          140.99.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 05:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:56:29:55:33:fa:78:76:52:20:f2:c0:51:79:52:1a:84:f9:3e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun 25 23:57:22 2026 GMT
            Not After : Jun 25 00:02:22 2027 GMT
        Subject: CN=56109C848F4DF202D563274D990ABBBBDF8AD0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:4e:ce:e9:79:cb:9f:f4:88:98:ed:4e:dd:
                    46:12:fd:f5:40:9e:b8:84:cc:1f:ae:04:ae:05:c5:
                    9b:7e:ce:e9:03:e1:34:cb:a8:83:f2:e1:65:a4:47:
                    b3:81:6c:44:ef:63:b6:9a:b4:09:a6:26:2a:32:e9:
                    61:ea:14:7e:9b:46:9c:50:56:1a:23:42:5e:d6:aa:
                    2a:18:f9:01:9c:d9:b4:e8:6e:dd:8e:04:89:be:29:
                    4a:97:19:34:38:b8:23:c7:9d:ad:18:e5:c6:45:9c:
                    7f:c0:9c:9c:d1:56:32:bc:5e:7f:98:ce:b9:57:0f:
                    a4:f3:a6:7e:9f:a8:eb:c2:7d:73:8c:09:d3:be:b8:
                    e9:4d:ea:dd:41:e5:18:25:13:1a:b6:7e:de:ee:44:
                    a1:ff:19:56:5a:c3:4f:b8:ee:fe:0e:d7:7d:a1:9b:
                    42:6f:69:31:9c:bc:32:2e:4b:6a:00:f6:55:45:2a:
                    34:da:04:9b:3a:76:b2:1d:72:96:d8:92:e3:db:06:
                    1d:da:b5:d9:36:d2:db:36:3d:d7:1f:75:3e:42:82:
                    d2:5f:f5:ba:5d:2b:01:8c:c7:0a:41:1e:5a:e1:f3:
                    c1:e5:04:c6:45:95:36:fb:55:7a:da:cc:a7:10:57:
                    84:a3:7f:fe:6b:75:5b:06:32:c4:3a:6b:c3:c8:03:
                    13:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:10:9C:84:8F:4D:F2:02:D5:63:27:4D:99:0A:BB:BB:DF:8A:D0:CD
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.27.0/24
                  140.99.39.0/24
                  140.99.44.0/24
                  140.99.47.0-140.99.48.255
                  140.99.59.0/24
                  140.99.84.0/23
                  140.99.114.0/24
                  140.99.118.0/23
                  140.99.123.0/24
                  140.99.151.0/24
                  140.99.184.0/23
                  140.99.211.0/24
                  140.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:ad:0e:00:0e:cc:c9:a9:b3:b6:f6:3b:fa:24:8b:b7:1a:e2:
         31:37:54:d0:33:75:02:38:e7:9f:13:73:e8:c4:ad:bd:53:a1:
         f7:3f:fd:14:ee:3c:96:43:41:cf:0f:c8:09:c1:a4:99:8d:20:
         69:ab:c2:58:fb:16:2f:bc:44:f9:38:3b:ac:05:a4:75:80:a1:
         94:94:4b:66:6c:58:a0:53:3b:c7:65:ef:13:a1:7e:8d:8d:cc:
         e6:d7:fd:90:cb:5c:9e:47:8d:55:c5:a3:c2:8b:14:59:41:ac:
         96:2a:1e:fa:36:c8:6f:05:4b:15:db:e3:40:67:0e:4d:1b:1c:
         fb:c6:6f:40:30:23:3d:d4:4f:11:aa:91:d8:52:b3:5e:1a:21:
         22:f4:c4:92:53:35:2c:b3:89:8a:ac:d7:00:c1:8c:22:09:0a:
         cd:c5:5e:fc:79:77:80:92:41:ab:c4:bd:34:3c:20:cf:82:04:
         41:69:7c:e1:e2:38:a0:e1:e8:14:33:2a:93:7c:0f:ef:6e:37:
         7f:ac:bd:4c:b2:4d:71:59:0e:ff:0f:76:37:82:f2:a0:3a:5c:
         6a:81:e7:77:56:88:1a:34:e7:2f:cb:79:14:87:e0:77:9f:75:
         a9:fb:44:69:cd:3a:d1:49:1b:66:20:69:21:ce:73:30:62:ba:
         df:aa:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:57 2026 by rpki-client