Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          XL4v9/VUOvhK5w5YhIt/5Gvc2wVXRSiRH5pkF4q8koc=
Subject key identifier:   BA:E0:80:C4:DC:CA:E0:15:AF:60:AE:56:B7:51:89:3F:BB:E8:F7:62
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       574BB047B1158044869D3630A3B3257E4ACB5123
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Thu 03 Apr 2025 22:50:41 +0000
ROA not before:           Thu 03 Apr 2025 22:45:41 +0000
ROA not after:            Thu 02 Apr 2026 22:50:41 +0000
asID:                     834
IP address blocks:        64.50.161.0/24 maxlen: 24
                          64.50.162.0/23 maxlen: 24
                          64.50.164.0/23 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.185.0/24 maxlen: 24
                          64.50.186.0/24 maxlen: 24
                          67.210.96.0/22 maxlen: 24
                          67.210.100.0/24 maxlen: 24
                          67.210.103.0/24 maxlen: 24
                          67.210.106.0/24 maxlen: 24
                          67.210.111.0/24 maxlen: 24
                          67.210.121.0/24 maxlen: 24
                          67.210.126.0/24 maxlen: 24
                          74.50.7.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.112.0/24 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.119.0/24 maxlen: 24
                          192.228.120.0/23 maxlen: 24
                          192.228.123.0/24 maxlen: 24
                          192.228.126.0/23 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.233.0/24 maxlen: 24
                          209.200.235.0/24 maxlen: 24
                          209.200.236.0/23 maxlen: 24
                          209.200.238.0/24 maxlen: 24
                          209.200.242.0/23 maxlen: 24
                          209.200.244.0/23 maxlen: 24
                          209.200.251.0/24 maxlen: 24
                          209.200.253.0/24 maxlen: 24
                          209.200.254.0/24 maxlen: 24
                          216.97.224.0/23 maxlen: 24
                          216.97.226.0/24 maxlen: 24
                          216.97.228.0/23 maxlen: 24
                          216.97.235.0/24 maxlen: 24
                          216.227.218.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4b:b0:47:b1:15:80:44:86:9d:36:30:a3:b3:25:7e:4a:cb:51:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr  3 22:45:41 2025 GMT
            Not After : Apr  2 22:50:41 2026 GMT
        Subject: CN=BAE080C4DCCAE015AF60AE56B751893FBBE8F762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:e0:37:56:8e:3f:6c:01:4d:7f:b9:05:06:
                    9a:c5:7b:c7:cf:48:83:88:7f:29:b8:ee:a4:83:78:
                    c4:9c:b5:5a:03:22:c1:a4:4f:9a:eb:4b:d4:75:cf:
                    09:f1:29:70:c4:77:0f:26:33:a9:ae:ab:87:f3:b9:
                    63:ef:9b:1e:c8:65:0b:c6:56:5c:b3:80:8b:cd:97:
                    a7:c2:f8:2f:cd:2e:24:9f:79:6b:44:e6:db:30:dc:
                    6a:67:56:cb:b4:95:30:4e:be:d5:5f:df:05:47:5c:
                    df:95:f6:f5:7e:5f:47:d7:53:8b:35:18:9b:7b:3f:
                    bd:af:b9:1f:9d:83:6c:19:6b:43:0a:cb:7a:20:f3:
                    af:da:af:d0:c4:06:74:67:4d:b4:6a:98:19:81:39:
                    08:86:e0:58:64:45:36:eb:58:87:26:c6:6c:26:28:
                    ac:f9:6d:23:76:53:02:61:e5:e2:9d:2f:50:80:e4:
                    ef:28:51:64:b1:78:99:1c:02:e3:24:52:30:90:44:
                    82:78:79:76:e7:45:16:19:f4:e4:53:28:be:4b:a6:
                    b9:94:6d:90:7c:c5:ee:94:2a:18:c8:d6:f4:33:f9:
                    17:52:e1:39:c8:be:68:34:c9:f5:cc:40:94:38:60:
                    42:94:44:b1:d4:1e:fc:14:0d:c3:8b:39:47:77:84:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E0:80:C4:DC:CA:E0:15:AF:60:AE:56:B7:51:89:3F:BB:E8:F7:62
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.161.0-64.50.166.255
                  64.50.185.0-64.50.186.255
                  67.210.96.0-67.210.100.255
                  67.210.103.0/24
                  67.210.106.0/24
                  67.210.111.0/24
                  67.210.121.0/24
                  67.210.126.0/24
                  74.50.7.0/24
                  190.92.165.0-190.92.167.255
                  192.228.112.0/24
                  192.228.115.0/24
                  192.228.119.0-192.228.121.255
                  192.228.123.0/24
                  192.228.126.0/23
                  198.23.186.0/24
                  209.200.233.0/24
                  209.200.235.0-209.200.238.255
                  209.200.242.0-209.200.245.255
                  209.200.251.0/24
                  209.200.253.0-209.200.254.255
                  216.97.224.0-216.97.226.255
                  216.97.228.0/23
                  216.97.235.0/24
                  216.227.218.0/24
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:e8:cb:80:ac:da:81:45:6f:4d:5e:77:d1:1d:cc:7a:05:
         c8:c9:14:65:a7:39:12:09:eb:cd:03:17:d5:8c:f7:71:7e:20:
         07:36:c6:bf:89:68:b9:d5:5b:3a:0e:e4:97:f5:20:c8:77:c1:
         9e:08:6b:56:3c:73:1a:8a:25:68:cc:ca:08:49:a6:fe:ef:d7:
         2d:6d:50:57:4c:9f:1b:f7:82:86:0c:48:00:67:55:ed:9e:c3:
         7a:75:b8:13:08:07:ec:69:92:ab:7c:93:20:29:a1:28:70:9f:
         a2:f1:fe:4a:aa:ab:7d:20:2a:5d:13:a6:28:61:8a:92:bd:2e:
         0f:41:3b:77:f0:bb:23:43:ab:dd:b0:83:46:e1:0a:b5:af:91:
         cf:ba:66:31:78:dc:92:c5:f1:9d:9b:07:8d:e3:6c:cd:85:15:
         30:18:d6:61:15:f8:0b:35:ed:48:43:6f:10:43:55:cc:61:30:
         bd:37:df:72:ed:47:43:bf:89:82:ff:57:57:71:ab:d4:06:b9:
         e5:56:23:a8:34:10:84:cd:61:d6:fc:d8:d5:9b:d0:f8:f6:4a:
         b1:1b:a8:e2:b4:c4:95:94:09:d4:91:71:ae:78:c3:a0:61:95:
         84:93:a0:00:1c:fd:36:eb:21:e5:db:7c:b7:aa:f7:1a:ae:3c:
         d8:a3:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:50:26 2025 by rpki-client