Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          3TvwKwGjK/xzssA/AsQRzhNh45758BM1dAXbj1D7IvA=
Subject key identifier:   40:C4:5C:4A:B1:05:6B:26:BB:EC:6B:D4:14:E8:1C:3D:B7:FD:ED:35
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       46F32877F6B036E4F22646938B1F29565162C5FF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Tue 10 Nov 2026 08:26:34 +0000
ROA not before:           Tue 10 Nov 2026 08:21:34 +0000
ROA not after:            Tue 09 Nov 2027 08:26:34 +0000
asID:                     834
IP address blocks:        64.50.162.0/23 maxlen: 24
                          64.50.178.0/24 maxlen: 24
                          64.50.180.0/24 maxlen: 24
                          64.50.182.0/24 maxlen: 24
                          64.50.185.0/24 maxlen: 24
                          74.50.1.0/24 maxlen: 24
                          74.50.3.0/24 maxlen: 24
                          74.50.4.0/24 maxlen: 24
                          74.50.8.0/24 maxlen: 24
                          74.50.10.0/23 maxlen: 24
                          74.50.14.0/23 maxlen: 24
                          89.35.92.0/24 maxlen: 24
                          162.213.0.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.120.0/23 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          209.200.229.0/24 maxlen: 24
                          209.200.232.0/24 maxlen: 24
                          209.200.236.0/24 maxlen: 24
                          216.227.208.0/22 maxlen: 24
                          216.227.217.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Nov 2026 16:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f3:28:77:f6:b0:36:e4:f2:26:46:93:8b:1f:29:56:51:62:c5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 10 08:21:34 2026 GMT
            Not After : Nov  9 08:26:34 2027 GMT
        Subject: CN=40C45C4AB1056B26BBEC6BD414E81C3DB7FDED35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:95:ea:c9:a7:09:8a:78:1f:1d:f5:ec:bd:
                    06:15:29:16:cc:38:c7:3a:7c:7d:81:3c:bc:06:d9:
                    05:ee:26:97:08:38:6e:42:ce:90:7d:85:dc:c9:84:
                    bb:94:ad:bf:9e:fd:e9:ef:7d:52:7b:c4:5c:4e:aa:
                    32:18:4c:63:8b:ef:a0:0b:99:dd:ef:8f:95:08:85:
                    f2:d5:f0:3a:7c:65:71:d3:c1:df:09:b9:85:de:d5:
                    13:8a:b7:eb:0f:c7:c9:e5:eb:89:74:6f:9c:13:1b:
                    d4:96:cf:f6:b0:43:37:87:8e:dc:74:e8:d8:87:88:
                    fc:5f:9b:ba:8c:cb:b0:a2:63:25:7d:de:c2:99:d8:
                    ab:5d:3f:b9:3f:f7:7c:4b:82:a7:fa:7a:c7:cb:c9:
                    24:28:e0:4d:b4:02:40:31:9f:46:8b:3e:0c:c0:52:
                    1c:09:2b:0d:10:cb:83:06:2b:54:80:d9:cc:c6:0c:
                    2d:58:9b:13:5f:d5:0b:5e:de:5b:35:2c:73:63:ba:
                    b3:08:16:87:f5:b9:5a:52:42:69:aa:c5:d0:54:c8:
                    2e:c2:c4:87:5a:62:fd:eb:b4:39:2d:b1:73:9d:15:
                    29:ab:49:f9:6d:1d:00:c5:c5:10:6c:b8:ca:37:36:
                    12:10:f3:1b:be:09:15:45:c7:02:d6:f4:2c:ad:e0:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C4:5C:4A:B1:05:6B:26:BB:EC:6B:D4:14:E8:1C:3D:B7:FD:ED:35
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.162.0/23
                  64.50.178.0/24
                  64.50.180.0/24
                  64.50.182.0/24
                  64.50.185.0/24
                  74.50.1.0/24
                  74.50.3.0-74.50.4.255
                  74.50.8.0/24
                  74.50.10.0/23
                  74.50.14.0/23
                  89.35.92.0/24
                  162.213.0.0/24
                  190.92.165.0-190.92.167.255
                  192.228.120.0/23
                  198.23.186.0/24
                  209.200.229.0/24
                  209.200.232.0/24
                  209.200.236.0/24
                  216.227.208.0/22
                  216.227.217.0/24
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:98:0f:ac:fe:16:52:21:d2:27:47:50:d0:56:90:5f:14:96:
         53:65:58:42:bb:de:b2:cc:6e:06:5a:4a:e0:4c:7b:c9:c6:bc:
         2e:8d:6d:8b:41:1c:c2:85:0b:de:21:95:40:10:92:5a:d8:dd:
         1a:44:30:d9:63:d7:cc:f1:34:c8:38:a4:0e:5a:1f:2e:3f:4d:
         f4:55:40:aa:b8:d2:61:22:16:dd:7a:e3:d6:52:87:11:cf:40:
         a6:e8:8f:d8:cf:74:3b:9b:28:7c:95:65:b3:91:b8:e0:9c:1c:
         c6:48:8e:f1:a2:8c:3b:f5:df:f7:45:c2:f4:88:46:a3:f0:10:
         f0:f2:db:c9:15:0e:4b:0d:f8:1e:30:02:91:a8:a5:7a:44:f4:
         d0:8a:1f:b6:4f:3b:41:48:5c:ca:65:14:38:d8:28:dd:13:b8:
         cd:4b:a2:a1:f1:e6:fc:55:4f:9c:97:8b:91:e2:3c:5c:6b:ee:
         9d:88:8a:2e:1f:ef:72:f0:bf:5c:57:2f:ad:ff:89:4c:da:4c:
         c0:0e:59:7a:a6:67:eb:81:c0:ff:ea:2e:ef:40:8a:9b:67:31:
         31:ad:66:1a:74:d3:51:e7:e1:38:0d:01:88:0c:cb:d2:e6:4e:
         95:f4:c2:54:bf:e2:f5:f0:3d:e9:4f:7c:11:29:e3:f6:32:76:
         99:72:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:42:31 2026 by rpki-client