Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          NL7dLQP93ieSZD1KIXU5ECP3Gyd0P8szG2re/jhgbTE=
Subject key identifier:   18:45:E3:DC:35:D8:29:35:E1:0A:4B:D6:43:E1:78:B8:78:F5:5E:A7
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       186FBBAAC9A01D78F144F504E0A04540EE7AC105
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS834.roa
Signing time:             Tue 30 Apr 2024 10:53:54 +0000
ROA not before:           Tue 30 Apr 2024 10:48:54 +0000
ROA not after:            Tue 29 Apr 2025 10:53:54 +0000
asID:                     834
IP address blocks:        64.202.96.0/24 maxlen: 24
                          66.225.200.0/24 maxlen: 24
                          66.225.226.0/23 maxlen: 24
                          66.225.228.0/23 maxlen: 24
                          75.102.48.0/23 maxlen: 24
                          75.102.50.0/23 maxlen: 24
                          204.93.187.0/24 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          205.234.232.0/22 maxlen: 24
                          216.246.28.0/24 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.102.0/24 maxlen: 24
                          216.246.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6f:bb:aa:c9:a0:1d:78:f1:44:f5:04:e0:a0:45:40:ee:7a:c1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 30 10:48:54 2024 GMT
            Not After : Apr 29 10:53:54 2025 GMT
        Subject: CN=1845E3DC35D82935E10A4BD643E178B878F55EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:ba:ae:0f:da:de:2d:25:e4:92:c6:d8:9c:
                    f8:65:e6:07:cf:f1:d4:c8:ea:42:c8:ae:e0:29:56:
                    d8:45:b1:92:dd:56:c3:79:81:42:bb:47:c1:53:f0:
                    72:89:07:49:8a:0a:0c:95:6d:82:54:17:8e:d9:a9:
                    6d:b3:88:45:f9:3a:f7:30:a7:cb:be:bf:90:cd:16:
                    f5:d4:e9:f4:49:01:56:2c:a2:ec:36:d1:70:cd:23:
                    b1:b7:0a:fb:d9:1f:46:79:7a:e0:f1:06:c0:25:35:
                    b7:d2:11:b3:0e:ad:be:3d:1e:42:80:e2:e1:49:ae:
                    77:8a:34:de:bc:33:85:0d:e0:d2:3f:21:ea:7d:fd:
                    5a:45:f7:4e:de:96:d4:df:0c:dc:30:d1:87:51:18:
                    24:db:06:e1:f2:a5:4b:aa:df:68:48:2c:ed:0b:a4:
                    ff:35:76:56:3e:d3:db:04:ae:c2:3c:35:b2:df:27:
                    66:fe:53:99:73:64:2f:fd:24:4c:cb:0b:56:29:a5:
                    67:81:3a:88:3c:b2:31:05:5b:bc:4c:e6:a7:f5:d5:
                    9a:f1:ba:dd:9f:62:b6:40:04:6a:a0:e1:ce:6a:ef:
                    ec:06:af:e7:91:3e:1c:10:d2:4d:77:3f:e5:c8:5a:
                    17:32:3c:64:a5:31:2f:83:33:f8:a6:2a:3a:e5:03:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:45:E3:DC:35:D8:29:35:E1:0A:4B:D6:43:E1:78:B8:78:F5:5E:A7
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.96.0/24
                  66.225.200.0/24
                  66.225.226.0-66.225.229.255
                  75.102.48.0/22
                  204.93.187.0/24
                  205.234.200.0/23
                  205.234.222.0/23
                  205.234.232.0/22
                  216.246.28.0/24
                  216.246.90.0/23
                  216.246.102.0/24
                  216.246.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:d8:e1:ef:20:5b:1c:85:f2:a8:53:90:61:f7:2e:fc:b7:e9:
         4b:ae:87:77:ee:8d:95:f0:f3:c3:91:9c:c7:46:22:75:a4:96:
         84:cb:70:32:51:be:85:b3:63:df:19:1d:0b:2f:68:0f:a9:31:
         fc:16:8b:25:96:7c:33:38:57:05:41:bf:ad:c9:13:ae:69:bb:
         74:e7:9e:cc:c3:4a:c2:d8:32:e3:a0:61:30:67:83:85:d6:be:
         29:10:38:b5:a2:19:8b:ea:7b:58:b7:e5:18:cd:19:4d:56:8a:
         7a:85:93:31:df:dc:13:3d:99:02:5a:6f:c9:a3:c3:23:aa:2d:
         1a:b9:f3:95:40:6b:5c:0a:81:2b:98:17:aa:04:fd:53:0d:7a:
         b9:19:e2:f0:96:25:23:57:36:ff:ee:9d:6a:2d:53:f4:e7:c1:
         ef:43:70:c1:bf:25:d1:60:b9:6b:85:aa:71:49:86:5d:45:b8:
         bc:65:78:bc:37:ba:23:44:6a:da:95:0a:1a:26:f3:ec:3b:d9:
         35:54:b6:5e:d1:be:d4:92:6a:20:68:2d:b6:a3:7f:06:82:f7:
         59:bb:32:01:9b:0f:04:d9:4a:4a:fc:7e:42:32:73:7f:f0:2b:
         53:bb:b4:89:9a:73:31:ba:2b:a0:45:e5:6f:dc:28:e0:3a:4f:
         00:3e:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:05:21 2024 by rpki-client on console-fra.rpki-client.org