Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          KuLeVUk/7Hz+N5sFTfz5N2wraA8JOeciDbCdMdI3MLo=
Subject key identifier:   DB:26:AC:1E:C5:06:5E:59:8C:E7:D1:16:AE:B1:BC:2E:FE:9A:88:22
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       13C73E9A18D26B632AA838D9FF3F4B7BEFE6B88F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time:             Fri 05 Jun 2026 13:10:32 +0000
ROA not before:           Fri 05 Jun 2026 13:05:32 +0000
ROA not after:            Fri 04 Jun 2027 13:10:32 +0000
asID:                     834
IP address blocks:        104.234.42.0/24 maxlen: 24
                          104.234.58.0/24 maxlen: 24
                          104.234.102.0/24 maxlen: 24
                          104.234.136.0/24 maxlen: 24
                          104.234.192.0/23 maxlen: 24
                          104.234.194.0/24 maxlen: 24
                          104.234.196.0/24 maxlen: 24
                          104.234.198.0/23 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.202.0/23 maxlen: 24
                          104.234.206.0/23 maxlen: 24
                          104.234.243.0/24 maxlen: 24
                          206.53.56.0/24 maxlen: 24
                          206.53.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 15:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c7:3e:9a:18:d2:6b:63:2a:a8:38:d9:ff:3f:4b:7b:ef:e6:b8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  5 13:05:32 2026 GMT
            Not After : Jun  4 13:10:32 2027 GMT
        Subject: CN=DB26AC1EC5065E598CE7D116AEB1BC2EFE9A8822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:30:28:57:47:b5:77:c1:ff:f1:ea:e5:20:
                    5c:31:d3:00:9f:f2:d4:89:ee:9b:ee:ca:5c:b8:d8:
                    07:e1:66:e9:32:00:b6:a4:50:2c:ce:a4:7c:63:b0:
                    4c:3f:08:15:03:b0:fe:32:99:3d:88:ad:09:38:33:
                    71:40:49:30:e3:21:fa:5f:20:77:0f:2a:68:56:2b:
                    ae:49:6f:37:21:22:c6:58:de:fc:b8:7a:f3:79:20:
                    52:9b:c8:94:42:84:52:34:9c:f9:d6:f3:d3:b0:3c:
                    87:71:0c:36:65:1f:89:e4:12:e7:15:3b:8b:f1:71:
                    12:c2:ea:cf:d9:22:11:59:47:cf:47:9b:e9:6c:c1:
                    05:2e:25:b4:9b:33:58:58:41:bb:ae:a5:87:5f:3a:
                    2f:98:f6:ae:81:ce:a5:70:c8:13:07:dd:83:08:bc:
                    2a:3e:c6:d8:ba:bf:ce:87:67:df:34:2e:49:68:8d:
                    31:fd:20:e3:cd:71:cf:e3:4f:04:06:9b:6f:20:6a:
                    a3:55:fc:1e:f2:bc:47:92:7e:95:fb:18:cf:bb:38:
                    51:3a:ac:b4:94:b4:dc:af:f2:b0:0c:7e:18:ff:fd:
                    69:d7:de:31:10:dd:99:32:7d:9e:1e:f5:5e:06:50:
                    78:6a:a5:d5:63:1b:4d:32:61:d3:4a:c5:12:aa:b5:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:26:AC:1E:C5:06:5E:59:8C:E7:D1:16:AE:B1:BC:2E:FE:9A:88:22
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.42.0/24
                  104.234.58.0/24
                  104.234.102.0/24
                  104.234.136.0/24
                  104.234.192.0-104.234.194.255
                  104.234.196.0/24
                  104.234.198.0/23
                  104.234.201.0-104.234.203.255
                  104.234.206.0/23
                  104.234.243.0/24
                  206.53.56.0/24
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:52:cf:ea:e5:73:b3:0d:25:3e:94:67:1b:04:d6:55:0d:10:
         ad:94:61:0e:f0:80:84:10:19:f4:89:e7:0e:02:18:1f:ab:c2:
         aa:40:4b:11:5f:34:8d:bb:04:34:6a:c4:39:a8:a4:08:9b:63:
         af:c4:e7:9c:24:5c:6f:7d:3c:68:c0:cb:19:52:8d:d1:fa:65:
         46:18:19:ed:7b:04:2f:f2:b1:96:18:67:6f:08:42:4e:c5:cd:
         b4:7a:64:f3:c6:1a:ce:c5:85:a3:e5:6e:bf:28:3e:be:76:c2:
         2f:cb:32:4e:24:8c:1a:9b:df:8c:7a:f8:a8:9d:bf:22:17:e2:
         84:35:62:5e:d5:3e:68:b9:f8:d7:b0:ee:b2:d2:e0:6b:80:54:
         6a:1f:d7:ca:b0:8c:c2:4b:ab:c3:45:f3:8f:43:06:0e:f4:70:
         05:b7:40:38:ae:a3:5c:88:3e:63:b3:c4:b0:35:86:ce:9a:c6:
         da:49:eb:75:3a:a7:d3:fa:07:9f:c6:31:9f:ed:ea:34:24:47:
         56:68:5a:a1:b8:a1:5a:bb:fa:f1:2a:e2:89:ba:91:aa:4f:a9:
         26:b8:7a:fb:11:cf:13:2e:e6:e6:9d:85:74:60:fd:44:dd:ac:
         21:31:6f:fe:16:75:47:f5:3a:28:9f:8d:13:a6:80:7c:b3:a0:
         5c:58:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:21 2026 by rpki-client