Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          ZZbkYE8fn4H8ErnlWbNTgGTw5ueeVCcIh2v9b8DqkOI=
Subject key identifier:   1C:BC:05:9D:65:8D:73:4B:87:AD:AC:9E:AF:B6:10:76:74:22:61:52
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5E8960686C5B89A4EC09AE496C4C63C3AB66A5CD
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Thu 31 Jul 2025 00:03:03 +0000
ROA not before:           Wed 30 Jul 2025 23:58:03 +0000
ROA not after:            Thu 30 Jul 2026 00:03:03 +0000
asID:                     834
IP address blocks:        157.254.10.0/24 maxlen: 24
                          157.254.15.0/24 maxlen: 24
                          157.254.25.0/24 maxlen: 24
                          157.254.29.0/24 maxlen: 24
                          157.254.144.0/21 maxlen: 24
                          157.254.166.0/24 maxlen: 24
                          157.254.230.0/24 maxlen: 24
                          199.103.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:89:60:68:6c:5b:89:a4:ec:09:ae:49:6c:4c:63:c3:ab:66:a5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 30 23:58:03 2025 GMT
            Not After : Jul 30 00:03:03 2026 GMT
        Subject: CN=1CBC059D658D734B87ADAC9EAFB6107674226152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:f6:b1:c0:ba:8c:54:af:07:e8:3f:00:5b:
                    46:b4:0b:24:a3:45:c1:78:5f:27:ab:68:a3:0b:ed:
                    a6:35:8f:38:19:73:2b:5e:ec:9f:98:5b:ca:98:51:
                    cc:03:c4:7d:87:72:8e:d3:83:49:b2:84:e4:a4:a2:
                    18:65:60:c9:a8:f4:57:0f:b1:89:f5:5b:1c:ed:32:
                    2f:67:ff:5a:0a:99:49:14:74:1a:d6:54:6a:1e:23:
                    fa:c1:c9:e9:d1:84:ad:13:7f:93:3f:da:6b:0d:19:
                    1f:7e:7a:68:4e:88:5c:53:85:d2:31:cd:24:d0:c5:
                    2a:1f:ef:3e:d5:4a:85:e3:87:a3:d0:77:76:0b:7d:
                    31:f7:a2:a3:5a:42:6e:a5:b9:4d:07:90:42:82:9a:
                    ac:06:90:d9:33:d6:b2:38:8a:1f:bd:bd:b3:c4:8c:
                    e1:17:1b:f3:b9:24:b2:1c:8b:1f:fe:cc:ed:3c:6d:
                    a2:61:4e:1e:ba:e7:3d:3e:2a:2e:33:d6:df:54:60:
                    83:b5:00:23:a7:11:70:7c:53:be:b6:5b:5a:74:02:
                    e6:8a:d5:a0:1d:e8:69:d9:a2:3f:a8:78:20:78:44:
                    cc:c5:7b:52:35:b5:ae:56:62:f0:c9:f7:c8:5e:b5:
                    5a:80:7e:86:6e:01:49:b5:37:4b:41:cc:c1:cc:fa:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BC:05:9D:65:8D:73:4B:87:AD:AC:9E:AF:B6:10:76:74:22:61:52
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.10.0/24
                  157.254.15.0/24
                  157.254.25.0/24
                  157.254.29.0/24
                  157.254.144.0/21
                  157.254.166.0/24
                  157.254.230.0/24
                  199.103.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:c8:e5:62:72:d1:ed:62:5e:c8:fd:b7:37:f9:d4:60:f4:
         ab:fe:dc:4d:0b:07:a8:d6:a5:66:63:d0:fe:4b:b5:18:09:6b:
         de:25:aa:fa:6f:9c:37:67:38:61:e2:0b:2a:4f:8c:0f:e2:7e:
         77:3f:ab:8c:4e:42:57:98:42:47:c3:d8:75:70:d2:2c:d6:2b:
         88:8f:ae:c4:2d:1a:80:63:57:d6:55:01:1d:aa:22:0f:e6:ed:
         62:14:73:9d:c7:45:8d:b3:be:c8:d0:24:fb:89:b7:a1:97:d3:
         8e:a1:56:80:23:e3:ac:4d:1d:14:00:23:19:73:94:a3:f1:39:
         43:f2:32:67:c7:88:16:9f:25:18:4a:62:a8:11:e4:68:ff:8b:
         e6:d2:db:ba:ae:69:c7:fe:7b:97:7f:8e:9c:c0:90:4b:ba:d4:
         3b:ae:50:ad:d5:8a:f3:86:3b:13:ff:6c:ac:39:20:67:c3:60:
         65:b7:ab:d1:d2:95:05:f1:f3:2f:ea:dc:dc:24:0b:df:4f:09:
         03:7e:2a:38:a1:30:09:88:9d:08:c7:24:b7:b9:ae:03:c2:d7:
         d2:c9:68:40:43:66:52:9f:ea:38:94:69:5b:3e:90:20:39:33:
         60:0f:e2:f2:08:66:59:af:4c:ce:ea:4c:8a:72:0e:f7:13:04:
         93:b3:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:29:42 2025 by rpki-client