Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          s5JKYsa84kwbfR8OUCFmA6Yq283txOrkvAGxKW9jL74=
Subject key identifier:   61:EF:57:AC:E4:64:94:BD:CA:7F:38:1C:B1:7E:D3:EB:E2:04:01:B0
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       65F9F49841798E5F1E2CCB2C7F43966616971565
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time:             Fri 04 Sep 2026 11:12:42 +0000
ROA not before:           Fri 04 Sep 2026 11:07:42 +0000
ROA not after:            Fri 03 Sep 2027 11:12:42 +0000
asID:                     834
IP address blocks:        104.234.136.0/24 maxlen: 24
                          104.234.177.0/24 maxlen: 24
                          104.234.194.0/24 maxlen: 24
                          104.234.229.0/24 maxlen: 24
                          104.234.238.0/24 maxlen: 24
                          206.53.56.0/24 maxlen: 24
                          206.53.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 22:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f9:f4:98:41:79:8e:5f:1e:2c:cb:2c:7f:43:96:66:16:97:15:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  4 11:07:42 2026 GMT
            Not After : Sep  3 11:12:42 2027 GMT
        Subject: CN=61EF57ACE46494BDCA7F381CB17ED3EBE20401B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:72:bf:7f:ee:19:fa:ce:22:d1:97:35:bd:
                    46:8a:94:09:bb:e9:3d:d3:dd:d0:9d:c1:f8:cd:12:
                    87:6b:24:cb:66:44:cd:d4:4e:fd:13:c5:4f:08:f4:
                    55:03:5b:a1:bb:65:4f:81:c5:dc:e0:63:86:b3:b7:
                    63:98:43:51:c8:a2:f7:d0:76:da:63:8a:33:50:62:
                    b4:88:b5:11:05:9b:24:74:ab:f9:78:6f:54:78:48:
                    11:38:4f:cb:90:03:1c:80:d3:b4:52:ad:92:ab:4e:
                    f3:d8:ea:d4:e2:9e:54:5f:6a:b9:4a:41:c5:3c:a7:
                    64:95:87:04:c2:1a:72:26:ff:90:37:51:27:38:e6:
                    98:a8:0c:a2:f0:73:07:70:32:fc:c9:f2:97:93:16:
                    a4:8b:98:e2:6f:e3:b9:19:10:ff:88:37:f4:19:5f:
                    6c:5b:19:29:43:de:f5:05:bc:8b:3c:63:3c:16:01:
                    9c:91:8a:cf:ea:34:2c:4a:bb:8d:dd:0b:be:cc:51:
                    81:0b:f2:18:10:0b:49:71:d6:b1:80:b8:3f:ac:ea:
                    c3:8b:3e:84:75:4b:80:be:f3:ec:35:ab:ff:be:92:
                    8f:4c:33:ce:9d:f7:36:e6:8d:4a:d5:0e:78:1d:a9:
                    5d:4f:03:ef:45:32:59:a3:77:9f:46:2c:cb:6d:ba:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EF:57:AC:E4:64:94:BD:CA:7F:38:1C:B1:7E:D3:EB:E2:04:01:B0
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.136.0/24
                  104.234.177.0/24
                  104.234.194.0/24
                  104.234.229.0/24
                  104.234.238.0/24
                  206.53.56.0/24
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ba:5e:99:aa:a5:a3:b9:ac:d5:0e:01:eb:ad:94:66:a1:d9:
         6d:b0:35:af:82:26:bb:90:70:c8:28:7e:61:04:2c:4d:e9:c9:
         80:f9:8c:a9:f8:36:17:80:00:93:42:36:b5:bf:2f:2c:22:1a:
         00:f8:a1:19:ea:03:3b:2b:e2:4a:c8:01:f5:69:2e:b0:a8:8a:
         7e:94:99:e7:8b:7b:22:76:27:66:40:d5:41:eb:17:7a:c7:dc:
         4e:49:72:6e:8a:c3:a2:27:c2:d1:62:c4:1b:75:9e:66:3a:5c:
         a3:77:8f:b0:a5:4d:50:ec:5c:53:06:fb:5c:09:eb:0a:15:9b:
         61:0c:aa:bf:66:2c:81:e8:52:3a:13:b4:e6:03:b5:af:a5:4d:
         6a:7f:d6:49:d9:73:eb:fa:37:b3:d2:97:fd:a1:69:d2:ce:64:
         ca:5c:d3:2c:b0:e4:b4:ab:e5:f6:86:e8:79:e7:85:f8:52:19:
         e8:52:ed:26:e8:44:09:85:6c:76:06:4a:58:2c:19:75:d3:40:
         77:dd:4b:df:13:be:22:3f:d3:be:c8:c2:94:92:ba:c3:e4:12:
         a1:04:c0:71:13:da:bb:a7:e5:51:0b:6a:ba:71:3b:97:4a:91:
         cc:84:b5:cc:be:5d:83:6e:f3:36:29:67:bf:30:0a:a0:a4:c5:
         ce:87:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:33:35 2026 by rpki-client