Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          3uax2xzBgZmQBjlCgA+7sV5EYgMEpEmMMp7si7NFHgY=
Subject key identifier:   BE:75:B7:55:22:D3:31:12:05:E4:BC:22:9D:49:7C:4B:8B:2A:3C:AD
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       42804127EA414AD0F84D2055A7F4A5B0954B71FA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa
Signing time:             Mon 20 Oct 2025 13:32:29 +0000
ROA not before:           Mon 20 Oct 2025 13:27:29 +0000
ROA not after:            Mon 19 Oct 2026 13:32:29 +0000
asID:                     834
IP address blocks:        104.234.40.0/23 maxlen: 24
                          104.234.104.0/24 maxlen: 24
                          104.234.136.0/24 maxlen: 24
                          104.234.184.0/24 maxlen: 24
                          104.234.192.0/24 maxlen: 24
                          104.234.194.0/24 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.202.0/23 maxlen: 24
                          104.234.206.0/23 maxlen: 24
                          104.234.209.0/24 maxlen: 24
                          206.53.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:80:41:27:ea:41:4a:d0:f8:4d:20:55:a7:f4:a5:b0:95:4b:71:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 20 13:27:29 2025 GMT
            Not After : Oct 19 13:32:29 2026 GMT
        Subject: CN=BE75B75522D3311205E4BC229D497C4B8B2A3CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:a6:d3:ca:1e:32:30:92:05:d1:58:a4:df:
                    c7:61:72:ee:50:4e:4d:35:00:07:9c:db:00:37:39:
                    ec:af:1d:93:1f:b8:2c:b7:07:78:ad:7f:96:9b:0d:
                    0e:e7:9e:44:aa:ee:fb:b3:08:73:7c:28:7b:0e:ca:
                    98:d3:c9:e6:dc:8f:1d:6a:0d:73:78:36:a9:fa:b2:
                    fa:45:64:04:2d:fd:14:86:3e:5b:60:ca:0a:26:5e:
                    54:79:65:e9:19:67:93:6c:b4:bb:8f:b7:63:f7:45:
                    b9:1f:52:ad:fa:0f:e7:c7:bd:de:2f:eb:70:a5:f8:
                    a8:5e:f3:1f:1a:da:05:7e:39:74:8e:38:cd:5f:b5:
                    30:ad:97:22:7e:d6:56:c6:97:11:b4:c9:1b:87:a9:
                    a0:a8:9c:ec:2b:5a:1c:73:ac:cd:1f:d7:ce:f5:3c:
                    1c:cc:80:1c:33:21:55:f9:df:4f:4c:b2:bc:5a:69:
                    53:31:0b:4c:25:05:7c:5b:86:54:79:d6:7f:e5:79:
                    62:b1:b8:a4:fb:1e:5b:52:f3:07:cd:fc:bf:ae:cc:
                    b2:38:85:5a:61:4d:3c:2f:af:9e:53:9b:f2:de:0a:
                    6e:7b:23:50:9f:79:35:eb:ff:f3:c6:d2:9e:a3:d7:
                    d9:68:43:00:73:6e:bd:f1:e6:e2:44:b6:88:ca:81:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:75:B7:55:22:D3:31:12:05:E4:BC:22:9D:49:7C:4B:8B:2A:3C:AD
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.40.0/23
                  104.234.104.0/24
                  104.234.136.0/24
                  104.234.184.0/24
                  104.234.192.0/24
                  104.234.194.0/24
                  104.234.201.0-104.234.203.255
                  104.234.206.0/23
                  104.234.209.0/24
                  206.53.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c6:ef:3c:f5:ed:01:b3:30:37:c4:af:08:88:da:03:5a:24:
         7e:a6:c1:f6:a3:e7:7f:56:ad:2c:73:cb:36:94:ce:6a:ed:8f:
         c3:07:fc:03:b4:9f:64:e5:95:d4:ff:b7:a0:c0:6e:94:c4:fe:
         8c:a0:e8:40:ca:58:b3:05:a1:39:c9:d9:d6:c8:f4:0b:67:2d:
         38:69:5c:ad:66:9d:94:c9:34:73:8b:14:2e:72:80:1e:9d:64:
         59:a2:38:7d:c6:ec:83:2e:e2:af:93:8a:4a:a1:c1:94:68:a2:
         0e:15:14:5b:3b:8c:c9:b9:ec:d2:7e:7c:20:81:2e:83:a2:92:
         12:39:59:5f:b6:78:a2:8c:c5:ca:6f:d5:4f:08:97:2e:af:4e:
         9a:4d:63:17:8d:ba:ee:73:a8:3f:61:98:82:d1:f8:a2:bb:c8:
         c6:0a:19:ad:a2:64:14:b0:d5:14:41:1a:52:66:52:5d:8a:4e:
         e9:85:f7:d8:6b:60:66:61:ca:98:1f:1c:9d:f4:8e:cf:7f:c4:
         1c:78:64:a2:f3:e2:f1:49:5a:67:bd:ee:1c:81:33:e9:3b:65:
         d1:1d:73:f4:33:c9:9a:e3:c9:f9:f2:9f:ee:92:44:e2:88:4f:
         45:43:e7:52:76:e8:70:b2:68:31:5f:72:08:a1:af:32:f4:8d:
         78:30:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:46:01 2025 by rpki-client