Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          UEK2MOFfdcbZcxtA7oOUfck0MnBLCcEb++73VRTOP0U=
Subject key identifier:   69:02:50:80:F6:40:F0:9C:77:09:A3:AB:27:C0:A7:A4:24:CB:89:FE
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       686AF825CB4E5E218185824227CE67002786399C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa
Signing time:             Sat 21 Mar 2026 04:04:10 +0000
ROA not before:           Sat 21 Mar 2026 03:59:10 +0000
ROA not after:            Sat 20 Mar 2027 04:04:10 +0000
asID:                     834
IP address blocks:        157.254.144.0/21 maxlen: 24
                          157.254.155.0/24 maxlen: 24
                          157.254.161.0/24 maxlen: 24
                          157.254.184.0/24 maxlen: 24
                          157.254.191.0/24 maxlen: 24
                          157.254.192.0/23 maxlen: 24
                          157.254.208.0/24 maxlen: 24
                          157.254.210.0/24 maxlen: 24
                          157.254.214.0/23 maxlen: 24
                          157.254.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6a:f8:25:cb:4e:5e:21:81:85:82:42:27:ce:67:00:27:86:39:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 21 03:59:10 2026 GMT
            Not After : Mar 20 04:04:10 2027 GMT
        Subject: CN=69025080F640F09C7709A3AB27C0A7A424CB89FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:fe:aa:a8:a2:6b:bc:85:b3:6f:1e:c6:4f:
                    aa:b0:dc:4e:e6:0d:4c:fb:b3:aa:50:ee:63:24:a1:
                    c0:11:e3:ef:6e:7c:0f:c9:fd:07:57:8f:61:2b:39:
                    35:a0:6e:fd:2f:c9:35:da:51:4a:06:a2:57:97:b5:
                    28:72:5c:fb:fc:4b:43:12:b1:99:f8:9f:d6:74:11:
                    d9:02:9f:47:10:21:81:1c:34:14:c5:26:bf:8e:b4:
                    6e:e0:19:18:ea:54:cc:b0:d3:5c:35:a0:e5:76:3f:
                    ea:9a:6b:9a:9f:45:dc:d4:8e:fe:25:f8:f0:15:42:
                    0d:51:85:8d:37:14:9a:d0:3f:21:fa:1c:44:6e:38:
                    37:5f:38:e0:29:24:df:61:de:4a:07:e5:db:b9:6d:
                    ad:b2:1a:ab:57:7e:be:b7:fa:d5:25:86:6d:7c:84:
                    2d:a7:5c:5d:27:11:9e:a2:ee:6e:43:2f:0f:b2:f6:
                    b1:41:f0:c1:4c:bc:72:2d:88:fc:4c:44:35:b7:d0:
                    c2:5b:29:d7:68:b8:47:7a:4b:44:2c:88:8d:03:02:
                    46:ef:a3:b7:5a:13:c8:36:b8:32:87:10:b5:14:62:
                    d6:be:dc:85:c8:f7:85:56:9b:9e:27:d4:d0:81:fd:
                    43:29:d4:7b:1c:8e:74:ed:2d:4e:3f:bb:6e:5b:91:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:50:80:F6:40:F0:9C:77:09:A3:AB:27:C0:A7:A4:24:CB:89:FE
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.144.0/21
                  157.254.155.0/24
                  157.254.161.0/24
                  157.254.184.0/24
                  157.254.191.0-157.254.193.255
                  157.254.208.0/24
                  157.254.210.0/24
                  157.254.214.0/23
                  157.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:13:49:4e:fa:dd:9f:fc:93:01:66:d5:db:5e:5c:b4:4c:10:
         a4:31:1f:bc:ac:c7:f0:81:b2:ea:bc:0f:72:ba:8b:7a:61:55:
         07:24:9e:1c:6f:91:a4:a1:bd:0d:8b:ff:b7:16:13:60:a0:3f:
         f5:e7:ce:6c:c7:04:8d:77:16:bb:be:c1:cc:1c:6d:90:3e:e8:
         bd:75:a0:3c:65:aa:5a:3f:27:cd:e3:c5:33:e5:7c:9e:fc:05:
         22:bf:8e:d9:17:ec:ab:93:08:96:bc:b8:90:ba:41:aa:6b:a8:
         10:17:5d:98:61:4a:6e:28:57:9d:e5:09:c0:e7:64:3e:87:6c:
         76:0e:85:89:a4:cc:cf:9f:4c:97:f9:79:ce:21:45:ed:1f:f1:
         63:98:52:6b:4b:d6:35:ea:2e:3d:2b:9b:42:de:c5:cc:c8:5d:
         c2:5c:c6:6e:79:5d:25:45:7b:68:a9:e8:64:fc:47:fc:0a:70:
         97:89:ae:86:9f:b6:7f:45:60:9e:00:62:da:11:98:27:82:b0:
         fc:e0:15:20:37:7c:a2:e9:9f:7b:00:cc:cd:c8:c8:dd:1a:13:
         27:d9:3a:39:66:2c:d1:56:36:4c:68:4f:4c:11:ab:64:2c:c9:
         34:16:62:4d:35:f6:4b:3f:17:8d:d6:78:03:c2:29:6d:11:ed:
         2e:7d:d7:55
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUaGr4JctOXiGBhYJCJ85nACeGOZwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzIxMDM1OTEwWhcNMjcwMzIwMDQwNDEw
WjAzMTEwLwYDVQQDEyg2OTAyNTA4MEY2NDBGMDlDNzcwOUEzQUIyN0MwQTdBNDI0
Q0I4OUZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zr+qqiia7yF
s28exk+qsNxO5g1M+7OqUO5jJKHAEePvbnwPyf0HV49hKzk1oG79L8k12lFKBqJX
l7Uoclz7/EtDErGZ+J/WdBHZAp9HECGBHDQUxSa/jrRu4BkY6lTMsNNcNaDldj/q
mmuan0Xc1I7+JfjwFUINUYWNNxSa0D8h+hxEbjg3XzjgKSTfYd5KB+XbuW2tshqr
V36+t/rVJYZtfIQtp1xdJxGeou5uQy8PsvaxQfDBTLxyLYj8TEQ1t9DCWynXaLhH
ektELIiNAwJG76O3WhPINrgyhxC1FGLWvtyFyPeFVpueJ9TQgf1DKdR7HI507S1O
P7tuW5HA2wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGkCUID2QPCcdwmjqyfAp6Qk
y4n+MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBXBggr
BgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEA53+kAMEAJ3+mwMEAJ3+oQMEAJ3+uDAM
AwQAnf6/AwQBnf7AAwQAnf7QAwQAnf7SAwQBnf7WAwQAnf7aMA0GCSqGSIb3DQEB
CwUAA4IBAQBRE0lO+t2f/JMBZtXbXly0TBCkMR+8rMfwgbLqvA9yuot6YVUHJJ4c
b5Gkob0Ni/+3FhNgoD/1585sxwSNdxa7vsHMHG2QPui9daA8ZapaPyfN48Uz5Xye
/AUiv47ZF+yrkwiWvLiQukGqa6gQF12YYUpuKFed5QnA52Q+h2x2DoWJpMzPn0yX
+XnOIUXtH/FjmFJrS9Y16i49K5tC3sXMyF3CXMZueV0lRXtoqehk/Ef8CnCXia6G
n7Z/RWCeAGLaEZgngrD84BUgN3yi6Z97AMzNyMjdGhMn2To5ZizRVjZMaE9MEatk
LMk0FmJNNfZLPxeN1ngDwiltEe0ufddV
-----END CERTIFICATE-----
Generated at Mon Mar 23 04:35:27 2026 by rpki-client