Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          ohxeJiCkOLOeND6hSKFGmwGdGBu/KqpFO7mTUZzDlv8=
Subject key identifier:   F2:A1:D1:05:59:3F:EA:62:79:A1:0C:1D:52:C8:5A:DA:6E:0F:8A:53
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       63263D39ECCC71B441899E5478E8F903450FE5BD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa
Signing time:             Tue 23 Jun 2026 19:16:12 +0000
ROA not before:           Tue 23 Jun 2026 19:11:12 +0000
ROA not after:            Tue 22 Jun 2027 19:16:12 +0000
asID:                     834
IP address blocks:        64.50.162.0/23 maxlen: 24
                          64.50.165.0/24 maxlen: 24
                          64.50.177.0/24 maxlen: 24
                          64.50.179.0/24 maxlen: 24
                          64.50.182.0/24 maxlen: 24
                          64.50.185.0/24 maxlen: 24
                          64.50.186.0/24 maxlen: 24
                          67.210.101.0/24 maxlen: 24
                          67.210.105.0/24 maxlen: 24
                          67.210.121.0/24 maxlen: 24
                          74.50.1.0/24 maxlen: 24
                          74.50.3.0/24 maxlen: 24
                          74.50.4.0/24 maxlen: 24
                          74.50.8.0/24 maxlen: 24
                          190.92.165.0/24 maxlen: 24
                          190.92.166.0/23 maxlen: 24
                          192.228.112.0/24 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.123.0/24 maxlen: 24
                          198.23.186.0/24 maxlen: 24
                          208.76.43.0/24 maxlen: 24
                          209.200.228.0/23 maxlen: 24
                          209.200.236.0/24 maxlen: 24
                          209.200.240.0/24 maxlen: 24
                          216.97.225.0/24 maxlen: 24
                          216.97.226.0/23 maxlen: 24
                          216.97.228.0/23 maxlen: 24
                          216.97.235.0/24 maxlen: 24
                          216.227.216.0/23 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 15:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:26:3d:39:ec:cc:71:b4:41:89:9e:54:78:e8:f9:03:45:0f:e5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 23 19:11:12 2026 GMT
            Not After : Jun 22 19:16:12 2027 GMT
        Subject: CN=F2A1D105593FEA6279A10C1D52C85ADA6E0F8A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:ed:f2:09:52:5d:8e:50:03:d9:4c:98:df:
                    73:7f:0b:e8:c9:3b:7d:21:da:93:69:8b:6b:c4:e5:
                    78:92:e0:70:31:88:e3:ac:1e:9a:78:00:23:27:18:
                    99:45:38:c1:b3:4e:c2:11:e3:a4:1a:8c:70:3d:a6:
                    b3:3d:ac:fb:d6:a8:78:cb:dc:fe:58:e4:12:78:c5:
                    33:70:45:0c:0d:13:fa:73:ef:a6:2b:d7:f8:05:b8:
                    b6:77:0d:c3:e4:92:e3:13:7b:09:0d:ec:63:63:d8:
                    f4:3b:cd:87:1f:57:0b:75:c5:93:64:3c:79:1d:95:
                    7b:8a:2d:e5:21:da:bd:2b:80:8d:20:78:80:65:d7:
                    bb:d5:9b:58:33:82:4d:8a:00:d1:08:8b:b8:e6:17:
                    1a:98:49:ec:c8:06:e0:f5:b4:6d:15:84:8e:57:9c:
                    d8:28:40:e5:1e:03:9d:67:25:59:05:81:32:0a:9d:
                    be:5b:03:52:13:b1:04:4c:62:9d:23:33:99:87:b7:
                    3b:bf:02:9d:f8:dc:e1:29:c8:0e:94:29:20:50:f4:
                    b0:fa:7f:9c:b2:5e:0d:d5:47:2e:97:87:5f:f1:e0:
                    01:8d:2d:13:3f:f4:3c:0e:e7:a5:25:27:c8:1b:b8:
                    09:41:1c:e3:ab:d1:99:82:2f:c4:de:53:2b:e0:90:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:D1:05:59:3F:EA:62:79:A1:0C:1D:52:C8:5A:DA:6E:0F:8A:53
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.162.0/23
                  64.50.165.0/24
                  64.50.177.0/24
                  64.50.179.0/24
                  64.50.182.0/24
                  64.50.185.0-64.50.186.255
                  67.210.101.0/24
                  67.210.105.0/24
                  67.210.121.0/24
                  74.50.1.0/24
                  74.50.3.0-74.50.4.255
                  74.50.8.0/24
                  190.92.165.0-190.92.167.255
                  192.228.112.0/24
                  192.228.115.0/24
                  192.228.123.0/24
                  198.23.186.0/24
                  208.76.43.0/24
                  209.200.228.0/23
                  209.200.236.0/24
                  209.200.240.0/24
                  216.97.225.0-216.97.229.255
                  216.97.235.0/24
                  216.227.216.0/23
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:76:7f:e2:f7:d8:6e:cc:a5:96:a1:17:59:14:55:70:38:ae:
         b1:ea:aa:cf:a8:61:d1:43:34:56:81:6b:3a:e6:c3:55:28:cb:
         3e:a4:19:8e:1a:d5:ad:c7:03:7b:f4:2c:9b:65:9a:59:f7:92:
         04:be:7e:99:b7:6d:b9:80:06:8f:35:e5:80:ab:83:09:32:a2:
         4e:5a:71:d6:ae:74:1d:a2:43:68:8e:c6:94:13:ec:21:3f:26:
         7d:0f:aa:d3:d6:24:f8:87:ea:f1:20:10:ba:6b:ed:29:66:c1:
         67:bb:88:a8:06:2d:c5:dc:d5:af:8d:d5:41:df:92:e8:2f:a8:
         25:a8:9d:95:84:d5:3e:f3:f6:29:f4:70:b6:10:36:a6:3c:13:
         a0:ee:3a:c6:6a:b5:4a:73:56:fa:f5:0c:50:1e:d1:75:88:bd:
         b5:5d:e1:20:b7:11:0c:10:84:96:2b:64:df:7f:64:61:4b:23:
         2c:ac:fc:d9:b3:6c:c4:67:7d:a5:cd:ca:49:df:01:56:70:49:
         f7:fb:3b:3e:ed:7e:37:75:75:ca:f8:fd:eb:c6:f9:5d:c4:ef:
         8c:0d:2c:6e:85:4e:0f:7e:45:52:c6:81:35:6e:fe:1e:1a:73:
         3b:19:a7:16:f6:49:71:17:78:80:b6:2a:f4:42:8c:71:83:12:
         09:8b:f0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 02:54:53 2026 by rpki-client