Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          ww+b//OZttIcD0GcbhyF1nEipqIjbFWg4d+6TFffKbM=
Subject key identifier:   A9:CD:82:29:66:2A:CC:06:79:11:46:D6:15:32:BF:85:C9:F2:1D:D1
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       44C2193EC8FF5B705B201BA20D2E244786A947EC
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time:             Tue 02 Sep 2025 08:50:18 +0000
ROA not before:           Tue 02 Sep 2025 08:45:18 +0000
ROA not after:            Tue 01 Sep 2026 08:50:18 +0000
asID:                     834
IP address blocks:        140.99.48.0/24 maxlen: 24
                          140.99.114.0/24 maxlen: 24
                          140.99.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 20:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:19:3e:c8:ff:5b:70:5b:20:1b:a2:0d:2e:24:47:86:a9:47:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep  2 08:45:18 2025 GMT
            Not After : Sep  1 08:50:18 2026 GMT
        Subject: CN=A9CD8229662ACC06791146D61532BF85C9F21DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:1e:57:99:e6:bd:d9:ef:c0:36:a0:35:e4:
                    3c:04:e9:b5:4c:31:c0:bf:e8:f7:52:a8:39:25:b6:
                    31:91:25:1c:8a:ef:00:37:fc:8c:0d:f8:c1:9c:cc:
                    9a:6e:50:8e:10:19:90:b5:6c:47:6d:ec:27:86:c8:
                    2f:c2:cf:67:59:67:94:b0:21:48:81:d0:92:a8:ed:
                    5a:57:e2:78:03:53:11:d1:71:96:4a:cc:54:fa:00:
                    f2:db:c6:6f:c3:f3:0e:42:5e:87:64:07:f4:4c:ba:
                    71:aa:45:b8:17:3d:6f:a9:97:8f:d0:2a:db:c9:ca:
                    d2:2d:4e:ce:ea:1e:27:22:d5:1b:a0:23:a9:4c:42:
                    5a:28:a8:21:66:c8:de:36:bb:aa:63:b6:bf:a0:d8:
                    90:d2:8c:99:77:2a:a0:3c:92:15:e7:b4:26:a4:f7:
                    99:63:ef:8c:51:19:51:5b:10:8c:eb:58:42:81:9b:
                    ed:da:88:a4:b9:66:27:c6:13:73:0e:1b:f1:bc:c0:
                    4e:66:f6:37:e2:4b:74:2c:09:30:f5:02:e2:ca:fa:
                    79:44:0a:40:f9:47:ab:72:50:aa:12:5d:d9:42:02:
                    cf:01:71:82:57:91:f4:28:df:77:41:88:c9:ba:27:
                    a2:24:85:08:ee:5e:a2:95:b0:c3:c5:51:2e:09:83:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CD:82:29:66:2A:CC:06:79:11:46:D6:15:32:BF:85:C9:F2:1D:D1
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.48.0/24
                  140.99.114.0/24
                  140.99.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:26:c8:55:e4:40:84:ba:b9:b9:da:8a:8a:8a:3a:d0:a5:e2:
         7e:83:92:ec:e5:a8:e0:bb:ff:12:4d:54:22:d5:0d:cd:2e:f2:
         9a:0f:2d:6c:7d:1f:2f:eb:8a:2f:1e:59:d8:85:2f:b4:01:71:
         de:91:57:c9:ab:62:30:cb:1d:fd:f8:69:be:68:28:97:2e:68:
         04:55:f8:8a:47:ee:06:44:df:1e:1f:f7:af:87:a5:29:65:1b:
         49:9d:1d:83:11:1b:72:e0:6f:b7:2e:a7:70:91:e8:15:26:ed:
         3d:10:84:97:b3:2a:e8:c5:78:65:bb:b4:b7:a8:5f:5c:76:f7:
         38:f0:54:2a:a0:ea:14:38:0f:da:ad:53:9b:bd:aa:53:01:66:
         98:61:3c:3e:7c:00:54:c3:88:06:ca:4c:9a:37:ea:ad:55:3b:
         c9:6a:97:74:22:63:7f:17:63:d2:01:0d:2f:35:70:cf:cc:5a:
         5c:4a:82:04:59:33:69:c4:2d:96:06:80:f0:76:44:73:fc:b6:
         60:c0:00:8f:04:a7:c8:16:cc:f0:f9:70:76:a7:07:71:36:8d:
         8f:5c:09:98:e0:8a:f6:de:e8:22:3f:1d:f2:0b:12:bd:e4:38:
         4c:3e:90:d7:8e:b7:4c:b6:f7:d9:0a:fc:7a:10:bc:74:f5:05:
         86:44:5d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:08:02 2025 by rpki-client