Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          HH1qn0Yjot6jvgjpx2IAqeP0uLsIN1wMwvE6W+mnkKM=
Subject key identifier:   E7:15:5F:C9:A0:67:74:D6:A1:35:72:10:CA:31:8D:B7:A4:50:1E:F4
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       6487FC15C022D0582FFDE00FB917945122901242
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Thu 05 Jun 2025 00:03:43 +0000
ROA not before:           Wed 04 Jun 2025 23:58:43 +0000
ROA not after:            Thu 04 Jun 2026 00:03:43 +0000
asID:                     834
IP address blocks:        66.225.226.0/24 maxlen: 24
                          66.225.228.0/24 maxlen: 24
                          75.102.49.0/24 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          205.234.252.0/24 maxlen: 24
                          216.246.20.0/23 maxlen: 24
                          216.246.25.0/24 maxlen: 24
                          216.246.66.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
                          216.246.103.0/24 maxlen: 24
                          216.246.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 03:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:87:fc:15:c0:22:d0:58:2f:fd:e0:0f:b9:17:94:51:22:90:12:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Jun  4 23:58:43 2025 GMT
            Not After : Jun  4 00:03:43 2026 GMT
        Subject: CN=E7155FC9A06774D6A1357210CA318DB7A4501EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:71:25:b2:04:2f:70:0c:c4:1c:b3:24:f7:
                    91:41:4c:a2:53:b8:31:20:94:3d:29:bf:ec:fa:bd:
                    27:d2:17:9e:fc:2e:fc:f5:72:cb:56:e9:68:c9:58:
                    3a:2b:f8:db:f9:42:c9:52:41:cc:13:ab:b8:23:1f:
                    3c:15:1b:82:46:1c:ae:d4:77:62:57:69:47:dd:e7:
                    3d:23:48:23:a5:b7:0a:1e:36:e2:cf:09:d5:c4:ff:
                    32:d4:da:6a:7a:0a:51:54:0b:b3:4d:51:0e:98:a3:
                    78:cf:42:39:02:ec:0e:7f:7b:d1:51:e6:71:da:f9:
                    e5:4c:7c:b1:f8:a2:25:51:f5:36:31:e3:50:82:a4:
                    15:54:40:01:96:c7:ce:bb:3b:de:a0:0e:e5:64:bf:
                    65:95:34:f1:b2:df:96:71:dd:63:f2:fb:52:81:85:
                    4b:a7:ac:61:a1:22:40:f1:68:70:a6:54:28:fd:ea:
                    3c:cd:8c:49:02:ae:ce:11:39:40:45:a6:7f:1b:e8:
                    e9:62:a5:0c:ff:40:06:16:9a:4f:8a:21:a7:b9:d9:
                    2a:8f:fb:01:61:70:8e:f9:bb:3e:d2:7b:ce:7f:9c:
                    d5:ef:29:66:82:b8:0e:51:e5:fb:39:39:01:2b:4c:
                    03:36:cc:27:7f:19:f6:d1:19:da:24:f0:43:24:b1:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:5F:C9:A0:67:74:D6:A1:35:72:10:CA:31:8D:B7:A4:50:1E:F4
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.226.0/24
                  66.225.228.0/24
                  75.102.49.0-75.102.50.255
                  205.234.156.0/23
                  205.234.200.0/23
                  205.234.222.0/23
                  205.234.252.0/24
                  216.246.20.0/23
                  216.246.25.0/24
                  216.246.66.0/23
                  216.246.90.0/23
                  216.246.103.0/24
                  216.246.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:85:8a:c0:73:be:8b:06:b3:08:d3:5c:b8:93:94:d6:1a:fd:
         32:ea:a3:0a:ab:89:f4:3e:5f:b1:b3:15:21:b8:e1:d8:2d:6c:
         c4:3f:48:b2:e5:4e:aa:aa:3b:91:b9:83:7b:8f:d3:b0:0b:48:
         23:b9:54:50:5e:a1:c8:ae:14:70:8f:71:bb:f9:c6:be:d3:5f:
         ab:68:a4:9d:cf:99:a3:7a:bd:6c:30:83:51:e7:6f:b3:2d:f6:
         b3:39:83:c9:bc:9b:20:64:82:cd:38:de:0b:db:a4:d4:be:91:
         ea:dd:53:3a:28:e0:cb:a9:9a:63:09:e2:68:6f:9c:a3:ad:7e:
         79:ef:28:e2:ff:79:05:2f:3d:dd:ec:76:c8:e1:a2:41:63:55:
         79:1a:fa:a2:c1:25:d3:6a:a5:fe:4e:81:36:bd:21:8b:5e:cb:
         21:1b:53:15:96:d9:65:88:be:c4:dd:38:65:8d:73:e0:de:f2:
         93:e0:eb:95:ec:2e:a2:11:81:38:21:90:7b:fb:af:a6:cd:94:
         d8:b1:83:3b:fc:54:e3:6f:62:f1:3a:84:62:5c:69:93:be:7d:
         06:d3:da:1a:3b:c4:4b:2e:2d:a5:8c:ce:2b:f8:6f:b5:d1:03:
         f7:7d:15:5c:4f:62:b7:c7:6f:6c:89:93:f7:04:45:ed:8c:b3:
         6e:44:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:20 2025 by rpki-client