Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          Zo7RG4Ft37zqOLVJtX62WUofT6C36BHDaAN5VvgtwXo=
Subject key identifier:   DC:B9:21:1C:85:41:73:62:C9:3E:0B:9E:68:C6:E1:5E:D7:E0:01:C3
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6690DC1D6DF6190DA46BA08327BDC4C75BEC5C5B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Wed 01 May 2024 00:03:48 +0000
ROA not before:           Tue 30 Apr 2024 23:58:48 +0000
ROA not after:            Wed 30 Apr 2025 00:03:48 +0000
asID:                     834
IP address blocks:        64.50.160.0/22 maxlen: 24
                          64.50.164.0/23 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.180.0/22 maxlen: 24
                          64.50.184.0/23 maxlen: 24
                          64.50.186.0/24 maxlen: 24
                          64.50.188.0/22 maxlen: 24
                          67.210.96.0/22 maxlen: 24
                          67.210.100.0/23 maxlen: 24
                          67.210.103.0/24 maxlen: 24
                          67.210.104.0/22 maxlen: 24
                          67.210.108.0/23 maxlen: 24
                          67.210.111.0/24 maxlen: 24
                          67.210.121.0/24 maxlen: 24
                          67.210.126.0/24 maxlen: 24
                          74.50.4.0/23 maxlen: 24
                          74.50.7.0/24 maxlen: 24
                          74.50.12.0/22 maxlen: 24
                          89.35.92.0/22 maxlen: 24
                          162.213.0.0/22 maxlen: 24
                          192.228.112.0/24 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.120.0/23 maxlen: 24
                          192.228.123.0/24 maxlen: 24
                          192.228.126.0/23 maxlen: 24
                          208.76.40.0/22 maxlen: 24
                          209.200.224.0/22 maxlen: 24
                          209.200.228.0/23 maxlen: 24
                          209.200.232.0/23 maxlen: 24
                          209.200.235.0/24 maxlen: 24
                          209.200.236.0/23 maxlen: 24
                          209.200.238.0/24 maxlen: 24
                          209.200.240.0/24 maxlen: 24
                          209.200.242.0/23 maxlen: 24
                          209.200.244.0/23 maxlen: 24
                          209.200.251.0/24 maxlen: 24
                          209.200.252.0/22 maxlen: 24
                          216.97.224.0/22 maxlen: 24
                          216.97.228.0/23 maxlen: 24
                          216.97.235.0/24 maxlen: 24
                          216.227.208.0/22 maxlen: 24
                          216.227.212.0/22 maxlen: 24
                          216.227.216.0/23 maxlen: 24
                          216.227.218.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 02:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:90:dc:1d:6d:f6:19:0d:a4:6b:a0:83:27:bd:c4:c7:5b:ec:5c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 30 23:58:48 2024 GMT
            Not After : Apr 30 00:03:48 2025 GMT
        Subject: CN=DCB9211C85417362C93E0B9E68C6E15ED7E001C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:79:ad:53:d8:4e:3a:cf:26:52:48:de:0f:
                    e4:9d:6d:1d:72:de:36:98:2c:c6:08:c8:b6:a2:13:
                    ff:ab:d5:f8:b4:e7:65:09:87:51:f8:12:d9:86:a0:
                    7c:bc:f0:05:16:41:d8:5c:fb:25:b8:17:8c:89:70:
                    28:91:10:34:c5:08:2a:a1:2b:19:b9:79:8d:30:71:
                    0a:f6:07:ae:94:d0:92:cf:8e:f7:d3:91:02:99:96:
                    19:0d:a0:5a:1d:5f:4a:5f:a6:f1:13:78:27:3f:70:
                    86:e2:34:9f:c5:9f:b9:5a:c5:ea:70:e0:c2:21:d3:
                    9b:a1:ca:72:b7:b1:44:b2:a4:79:af:96:8a:d3:5c:
                    68:bf:73:e7:e2:b4:5a:95:6d:8c:fb:ab:3a:6e:be:
                    fd:a1:70:f0:63:04:ac:3d:3e:d4:d0:c7:20:a7:67:
                    57:6f:12:aa:d0:ee:51:f1:2e:d6:74:0f:d0:90:bb:
                    4c:a3:91:ff:f3:9f:6c:c1:24:46:52:7f:7c:d0:3f:
                    29:64:1b:55:93:10:bb:c2:c5:b0:af:81:c8:bd:cb:
                    69:c5:12:09:89:67:8a:44:0a:7b:bc:44:3b:f4:ac:
                    b8:57:a4:16:a9:73:2c:17:ec:00:d4:95:be:1c:d7:
                    04:bc:e1:c7:90:e9:45:f7:a0:da:ae:2c:6c:af:2c:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B9:21:1C:85:41:73:62:C9:3E:0B:9E:68:C6:E1:5E:D7:E0:01:C3
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.160.0-64.50.166.255
                  64.50.180.0-64.50.186.255
                  64.50.188.0/22
                  67.210.96.0-67.210.101.255
                  67.210.103.0-67.210.109.255
                  67.210.111.0/24
                  67.210.121.0/24
                  67.210.126.0/24
                  74.50.4.0/23
                  74.50.7.0/24
                  74.50.12.0/22
                  89.35.92.0/22
                  162.213.0.0/22
                  192.228.112.0/24
                  192.228.115.0/24
                  192.228.120.0/23
                  192.228.123.0/24
                  192.228.126.0/23
                  208.76.40.0/22
                  209.200.224.0-209.200.229.255
                  209.200.232.0/23
                  209.200.235.0-209.200.238.255
                  209.200.240.0/24
                  209.200.242.0-209.200.245.255
                  209.200.251.0-209.200.255.255
                  216.97.224.0-216.97.229.255
                  216.97.235.0/24
                  216.227.208.0-216.227.218.255
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:3c:21:ea:53:00:91:a0:8a:87:33:7c:14:d3:11:71:fe:
         f9:14:30:6c:11:3a:db:db:38:18:51:ae:2f:f3:ab:f3:83:5a:
         eb:b7:6d:07:ec:d8:2a:7b:94:97:42:d6:1c:26:5b:3b:78:cc:
         a8:d9:1b:69:5b:d0:56:a5:48:f6:c3:ad:ba:13:ef:34:a9:8c:
         59:d4:55:d9:24:d8:22:37:bf:7d:f6:a7:22:81:71:37:7b:66:
         c8:4b:75:5d:17:7d:3c:e7:3c:84:01:33:a3:11:95:a7:13:e9:
         21:4f:1f:62:39:91:85:03:c2:2b:61:3d:13:eb:14:8a:a3:e4:
         5d:38:54:a8:d7:ef:a3:f8:77:46:53:c9:44:07:9a:b1:fa:45:
         ca:d3:43:52:fc:a6:58:a1:6c:be:f8:a5:6e:f5:cf:3a:e6:2e:
         bf:2a:83:04:ce:32:63:be:3f:fb:ab:bf:18:f6:e9:d3:66:cf:
         6f:c6:62:26:3e:c2:c7:70:98:65:51:f2:61:9d:80:4e:3f:00:
         61:7a:ad:12:f4:f2:de:cf:18:49:89:7d:03:95:ef:eb:91:7a:
         10:05:91:34:83:a0:0b:6a:5f:db:67:2c:01:a7:0b:f1:9f:10:
         7d:e6:32:b4:46:b1:e3:63:e7:cf:de:5a:49:a6:a6:8f:90:8e:
         94:e7:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:35:08 2024 by rpki-client on console-ams.rpki-client.org