Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          EiXXLzEkIstBpNauWGielgYEMYR4rKBOmpladUqbXhE=
Subject key identifier:   49:31:1E:F3:2B:0D:19:43:24:95:D8:69:18:D5:F3:E4:35:DE:AF:C2
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       5D1159B15998428B8C5E57803A3AB3D45C6D32B4
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time:             Tue 11 Aug 2026 13:55:00 +0000
ROA not before:           Tue 11 Aug 2026 13:50:00 +0000
ROA not after:            Tue 10 Aug 2027 13:55:00 +0000
asID:                     834
IP address blocks:        140.99.27.0/24 maxlen: 24
                          140.99.39.0/24 maxlen: 24
                          140.99.44.0/24 maxlen: 24
                          140.99.47.0/24 maxlen: 24
                          140.99.48.0/24 maxlen: 24
                          140.99.59.0/24 maxlen: 24
                          140.99.84.0/23 maxlen: 24
                          140.99.114.0/24 maxlen: 24
                          140.99.119.0/24 maxlen: 24
                          140.99.123.0/24 maxlen: 24
                          140.99.151.0/24 maxlen: 24
                          140.99.172.0/22 maxlen: 24
                          140.99.184.0/23 maxlen: 24
                          140.99.211.0/24 maxlen: 24
                          140.99.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 06:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:11:59:b1:59:98:42:8b:8c:5e:57:80:3a:3a:b3:d4:5c:6d:32:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug 11 13:50:00 2026 GMT
            Not After : Aug 10 13:55:00 2027 GMT
        Subject: CN=49311EF32B0D19432495D86918D5F3E435DEAFC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:13:90:e3:3f:ee:1a:91:4d:7f:c1:04:64:
                    fa:ff:4e:88:00:29:96:4d:d1:1d:2f:18:49:7e:54:
                    94:d3:cc:a6:f6:ed:90:db:e0:06:95:d6:12:ac:ee:
                    87:a1:d2:80:ec:60:91:4a:1a:ca:e1:04:53:c4:9e:
                    ce:62:5e:ec:dd:6b:9a:79:18:52:3b:ef:bf:69:35:
                    6c:a6:bd:4c:91:d4:1b:f8:a4:63:c6:55:51:b4:73:
                    3e:e6:17:9a:bd:04:fb:70:b3:4b:24:c7:ba:e0:c6:
                    b0:a9:63:c1:f8:06:3b:cf:74:81:45:dd:08:76:65:
                    c9:f3:28:9c:71:d7:c1:af:81:62:61:b9:d7:79:f4:
                    71:31:e5:3c:91:3f:bf:e2:65:9e:3f:67:18:a6:9f:
                    93:79:61:6a:c3:f1:e1:a9:58:c8:85:41:d6:be:cc:
                    2a:39:b0:33:5a:13:2d:da:86:eb:76:b9:d2:9a:44:
                    f8:06:02:e1:a6:8d:21:d9:29:86:42:62:45:aa:a0:
                    96:36:95:c3:81:4d:d6:74:5b:33:58:c0:30:34:ca:
                    fd:0e:af:8b:96:79:59:46:31:31:b8:33:3c:30:07:
                    d0:db:8c:53:44:0b:08:4e:7e:e4:d8:ef:b9:19:0b:
                    55:83:9d:66:35:45:a7:d9:2f:b8:d1:6b:01:de:fd:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:31:1E:F3:2B:0D:19:43:24:95:D8:69:18:D5:F3:E4:35:DE:AF:C2
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.27.0/24
                  140.99.39.0/24
                  140.99.44.0/24
                  140.99.47.0-140.99.48.255
                  140.99.59.0/24
                  140.99.84.0/23
                  140.99.114.0/24
                  140.99.119.0/24
                  140.99.123.0/24
                  140.99.151.0/24
                  140.99.172.0/22
                  140.99.184.0/23
                  140.99.211.0/24
                  140.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ed:7e:27:13:3b:db:a5:c5:7c:21:8e:6a:b6:1f:c8:fc:e3:
         de:e4:4d:a3:bc:89:76:57:8c:33:5d:39:b2:c9:c9:55:3b:6f:
         a9:ce:b7:54:15:d3:90:7e:1e:f8:80:fe:ed:2d:80:df:42:af:
         37:aa:32:07:8a:cf:79:b7:de:d3:16:48:25:68:62:b1:ba:b7:
         e2:cb:25:12:0e:38:af:a2:53:75:49:5d:ed:71:55:d9:b9:2b:
         2f:fc:68:18:fe:25:b7:2d:98:54:d7:5b:6f:36:b9:63:a0:cb:
         74:3f:20:60:65:e3:8f:b7:e6:01:93:25:08:96:8e:97:fe:61:
         63:0e:b2:e3:c6:18:e2:51:6e:ab:de:69:8f:82:73:73:16:77:
         77:f3:a4:84:72:d8:2e:58:ec:23:a1:c2:2a:fb:d6:61:ad:c0:
         60:fa:9d:9a:ac:25:7c:df:bc:03:c7:30:71:08:4c:1d:dc:4f:
         ed:f0:1b:dc:b1:3f:c8:1d:21:4f:97:60:66:fb:c8:af:ec:94:
         45:b9:23:13:f5:cd:f4:b7:aa:97:54:f7:32:51:b6:e7:2f:04:
         1c:b0:89:a2:a1:2e:c2:d3:d0:d8:aa:87:d0:11:87:c7:06:37:
         0a:13:d0:2d:2e:ab:6a:74:c5:61:ec:86:a9:95:6a:38:55:35:
         2b:1e:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:54 2026 by rpki-client