Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          qsn7X75cLxOGWddxlJaoZUBQSPKRgi52eW0f8kWTjzw=
Subject key identifier:   A3:91:24:D5:86:30:BE:07:C3:27:20:B0:32:1D:A4:28:B0:3E:8A:BB
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       604489790DADAA0FFC93BC9185ED8D56CF99820E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Wed 24 Jun 2026 12:44:14 +0000
ROA not before:           Wed 24 Jun 2026 12:39:14 +0000
ROA not after:            Wed 23 Jun 2027 12:44:14 +0000
asID:                     834
IP address blocks:        157.254.2.0/24 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.155.0/24 maxlen: 24
                          157.254.191.0/24 maxlen: 24
                          157.254.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 16:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:44:89:79:0d:ad:aa:0f:fc:93:bc:91:85:ed:8d:56:cf:99:82:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun 24 12:39:14 2026 GMT
            Not After : Jun 23 12:44:14 2027 GMT
        Subject: CN=A39124D58630BE07C32720B0321DA428B03E8ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:e2:f0:02:e7:9e:4d:f5:e8:85:85:57:16:
                    75:ff:9f:1b:6d:7f:9e:4d:cb:1d:71:cf:07:53:4d:
                    6a:2e:c8:25:43:8d:b3:43:0d:fb:89:29:00:8a:2a:
                    79:65:cf:93:cc:51:65:43:17:97:98:fd:d5:b4:2f:
                    ba:d7:a3:77:9f:0f:b8:38:14:d5:45:30:95:4b:3a:
                    c1:78:9d:72:9c:d8:b4:69:06:d7:78:ed:58:5d:94:
                    91:fc:7b:aa:3c:23:1b:0f:7d:bd:cc:c9:13:9f:60:
                    43:b5:6b:46:02:4a:a0:df:0e:57:af:fd:e2:58:3a:
                    e0:94:78:58:82:ed:a7:f4:04:d3:c6:23:47:7f:87:
                    84:11:96:a8:39:55:fc:0f:49:c2:34:69:86:ad:50:
                    97:e7:03:b8:7a:4b:ba:d1:ed:d6:da:a6:81:9b:ba:
                    7f:90:f4:98:52:16:e8:d1:10:82:d3:ae:34:d8:67:
                    3c:33:b9:a5:18:f2:73:41:1d:80:e9:d3:f3:86:29:
                    2a:4c:24:15:f3:0b:38:ca:1c:75:83:a1:ea:da:a4:
                    b3:bf:ea:65:31:c0:5a:06:e2:c9:ee:cc:98:ef:f7:
                    78:07:22:71:3f:63:cc:87:5d:40:ce:73:fc:0e:bc:
                    e3:bf:f0:80:c6:f4:b9:7b:72:ba:82:e1:b4:2c:6d:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:91:24:D5:86:30:BE:07:C3:27:20:B0:32:1D:A4:28:B0:3E:8A:BB
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.2.0/24
                  157.254.144.0/21
                  157.254.155.0/24
                  157.254.191.0/24
                  157.254.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:ed:e2:7a:26:83:1b:b8:6a:20:68:df:c3:69:e5:20:3a:6d:
         26:1e:b0:e0:ad:0d:9d:a9:2f:15:a9:ca:bd:7c:3e:1b:56:8d:
         f7:f1:4f:f2:27:bd:7c:aa:31:1e:3e:57:6c:57:2c:02:05:19:
         d2:04:fe:b2:b2:55:87:c5:a2:ac:35:66:c2:17:04:72:3a:3c:
         c0:38:b3:e2:38:50:cd:39:0f:9e:d4:6a:8c:d2:fe:3f:81:cf:
         54:b7:64:04:cf:7a:d5:e1:1f:81:d7:66:e0:c2:93:d4:22:6d:
         d4:53:66:8a:94:a6:47:ad:78:8a:ef:e1:f4:ad:9c:df:2d:d7:
         78:b6:fe:28:9d:bc:eb:b4:23:3d:c7:1c:90:5c:12:e8:58:14:
         4e:eb:5a:1d:87:39:bd:58:1a:e9:c0:9d:50:a3:02:b3:c7:4d:
         7e:07:00:36:c3:21:75:d1:91:3c:33:ef:73:43:04:5d:71:30:
         93:f6:a7:04:70:31:0d:4a:35:c0:1a:ae:ab:08:df:66:9a:95:
         b7:fd:fc:de:d8:1e:e5:21:d4:30:30:06:fb:cb:37:4f:a1:2e:
         42:1f:dd:4e:af:18:51:90:78:15:01:07:b8:7d:98:10:b9:35:
         97:27:b1:9a:bc:85:76:ac:ce:d9:96:92:0b:8d:1a:a2:33:75:
         5f:ae:fb:28
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIUYESJeQ2tqg/8k7yRhe2NVs+Zgg4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNjI0MTIzOTE0WhcNMjcwNjIzMTI0NDE0
WjAzMTEwLwYDVQQDEyhBMzkxMjRENTg2MzBCRTA3QzMyNzIwQjAzMjFEQTQyOEIw
M0U4QUJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0vi8ALnnk31
6IWFVxZ1/58bbX+eTcsdcc8HU01qLsglQ42zQw37iSkAiip5Zc+TzFFlQxeXmP3V
tC+616N3nw+4OBTVRTCVSzrBeJ1ynNi0aQbXeO1YXZSR/HuqPCMbD329zMkTn2BD
tWtGAkqg3w5Xr/3iWDrglHhYgu2n9ATTxiNHf4eEEZaoOVX8D0nCNGmGrVCX5wO4
eku60e3W2qaBm7p/kPSYUhbo0RCC06402Gc8M7mlGPJzQR2A6dPzhikqTCQV8ws4
yhx1g6Hq2qSzv+plMcBaBuLJ7syY7/d4ByJxP2PMh11AznP8Drzjv/CAxvS5e3K6
guG0LG00EQIDAQABo4IClDCCApAwHQYDVR0OBBYEFKORJNWGML4HwycgsDIdpCiw
Poq7MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3Bggr
BgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAJ3+AgMEA53+kAMEAJ3+mwMEAJ3+vwME
AJ3+0jANBgkqhkiG9w0BAQsFAAOCAQEAn+3ieiaDG7hqIGjfw2nlIDptJh6w4K0N
nakvFanKvXw+G1aN9/FP8ie9fKoxHj5XbFcsAgUZ0gT+srJVh8WirDVmwhcEcjo8
wDiz4jhQzTkPntRqjNL+P4HPVLdkBM961eEfgddm4MKT1CJt1FNmipSmR614iu/h
9K2c3y3XeLb+KJ2867QjPccckFwS6FgUTutaHYc5vVga6cCdUKMCs8dNfgcANsMh
ddGRPDPvc0MEXXEwk/anBHAxDUo1wBquqwjfZpqVt/383tge5SHUMDAG+8s3T6Eu
Qh/dTq8YUZB4FQEHuH2YELk1lyexmryFdqzO2ZaSC40aojN1X677KA==
-----END CERTIFICATE-----
Generated at Thu Jun 25 02:57:15 2026 by rpki-client