Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          yrH14tBgVH0/bjlw6ezujGwlQro9UhZvgnsTenWBpq8=
Subject key identifier:   4F:BC:0E:D7:6F:79:B9:93:82:2D:40:3B:F4:37:76:73:79:C0:D5:73
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       40A613FDB4C7377DE58A0BAC488C415DFCE45F10
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Thu 16 Apr 2026 06:58:25 +0000
ROA not before:           Thu 16 Apr 2026 06:53:25 +0000
ROA not after:            Thu 15 Apr 2027 06:58:25 +0000
asID:                     834
IP address blocks:        40.27.0.0/23 maxlen: 24
                          40.27.22.0/24 maxlen: 24
                          40.27.29.0/24 maxlen: 24
                          40.27.34.0/23 maxlen: 24
                          40.27.47.0/24 maxlen: 24
                          40.27.51.0/24 maxlen: 24
                          40.27.56.0/24 maxlen: 24
                          40.27.58.0/23 maxlen: 24
                          40.27.68.0/23 maxlen: 24
                          40.27.71.0/24 maxlen: 24
                          40.27.73.0/24 maxlen: 24
                          40.27.75.0/24 maxlen: 24
                          40.27.80.0/23 maxlen: 24
                          40.27.82.0/24 maxlen: 24
                          40.27.104.0/23 maxlen: 24
                          40.27.107.0/24 maxlen: 24
                          40.27.113.0/24 maxlen: 24
                          40.27.115.0/24 maxlen: 24
                          40.27.125.0/24 maxlen: 24
                          40.27.127.0/24 maxlen: 24
                          40.27.132.0/24 maxlen: 24
                          40.27.134.0/23 maxlen: 24
                          40.27.174.0/24 maxlen: 24
                          40.27.216.0/24 maxlen: 24
                          40.27.218.0/23 maxlen: 24
                          40.27.228.0/24 maxlen: 24
                          40.27.230.0/23 maxlen: 24
                          40.183.88.0/22 maxlen: 24
                          40.183.92.0/24 maxlen: 24
                          40.183.95.0/24 maxlen: 24
                          40.183.97.0/24 maxlen: 24
                          40.183.99.0/24 maxlen: 24
                          40.183.103.0/24 maxlen: 24
                          40.183.104.0/22 maxlen: 24
                          40.183.110.0/23 maxlen: 24
                          40.183.112.0/22 maxlen: 24
                          40.183.116.0/23 maxlen: 24
                          40.183.119.0/24 maxlen: 24
                          40.183.123.0/24 maxlen: 24
                          40.183.124.0/24 maxlen: 24
                          40.183.126.0/23 maxlen: 24
                          40.183.142.0/23 maxlen: 24
                          40.183.144.0/22 maxlen: 24
                          40.183.149.0/24 maxlen: 24
                          40.183.150.0/24 maxlen: 24
                          40.183.153.0/24 maxlen: 24
                          40.183.159.0/24 maxlen: 24
                          40.183.160.0/19 maxlen: 24
                          40.183.192.0/23 maxlen: 24
                          40.183.198.0/24 maxlen: 24
                          40.183.200.0/23 maxlen: 24
                          40.183.205.0/24 maxlen: 24
                          40.183.206.0/23 maxlen: 24
                          40.183.212.0/23 maxlen: 24
                          40.183.214.0/24 maxlen: 24
                          40.183.224.0/23 maxlen: 24
                          40.183.228.0/22 maxlen: 24
                          40.183.232.0/23 maxlen: 24
                          40.183.237.0/24 maxlen: 24
                          40.183.239.0/24 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/23 maxlen: 24
                          40.183.244.0/22 maxlen: 24
                          40.183.252.0/23 maxlen: 24
                          40.223.5.0/24 maxlen: 24
                          40.223.7.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.12.0/24 maxlen: 24
                          40.223.14.0/23 maxlen: 24
                          40.223.16.0/21 maxlen: 24
                          40.223.80.0/21 maxlen: 24
                          40.223.122.0/24 maxlen: 24
                          40.223.157.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.184.0/21 maxlen: 24
                          40.223.192.0/23 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 08:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a6:13:fd:b4:c7:37:7d:e5:8a:0b:ac:48:8c:41:5d:fc:e4:5f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 16 06:53:25 2026 GMT
            Not After : Apr 15 06:58:25 2027 GMT
        Subject: CN=4FBC0ED76F79B993822D403BF437767379C0D573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:b0:59:d0:6c:74:c9:6c:24:42:f7:c5:b7:
                    51:62:c9:5f:ec:92:87:e3:bf:01:de:ae:bc:d0:64:
                    d7:8e:e8:52:4c:1b:f2:1f:34:52:14:19:e4:c6:5e:
                    14:ce:3d:fb:64:76:31:4a:01:17:5c:fc:76:8f:13:
                    56:6c:3a:f9:ff:ac:4f:9a:f8:d3:ee:06:df:54:fc:
                    cf:da:03:a4:c1:51:8a:7b:74:20:17:8e:50:4a:ae:
                    09:58:55:18:23:f1:99:ad:fa:f4:ab:55:7b:5a:8b:
                    f5:e0:63:67:12:eb:83:6e:0e:35:79:a2:99:d8:dd:
                    07:72:fc:70:87:82:a1:d2:a0:b4:4f:13:7e:f1:c8:
                    20:77:1f:db:cf:53:6a:8a:48:bf:7b:29:9d:fa:7b:
                    fb:12:48:85:ac:2c:3f:c6:c7:80:4e:f8:14:9e:3a:
                    a9:52:36:52:f8:8b:13:79:59:95:3a:be:0b:15:a8:
                    de:75:17:15:99:41:0a:7e:5c:5f:d2:9b:2f:39:40:
                    49:7d:fa:f9:de:96:6d:0d:b5:94:bc:6d:67:bf:21:
                    c2:94:9d:59:4a:55:f6:b6:e5:72:f6:9e:e7:1c:80:
                    14:56:c7:5f:7b:05:26:ba:91:54:52:8e:59:78:b1:
                    e6:b0:48:75:05:e7:c6:e2:46:f1:39:0b:51:41:65:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BC:0E:D7:6F:79:B9:93:82:2D:40:3B:F4:37:76:73:79:C0:D5:73
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.0.0/23
                  40.27.22.0/24
                  40.27.29.0/24
                  40.27.34.0/23
                  40.27.47.0/24
                  40.27.51.0/24
                  40.27.56.0/24
                  40.27.58.0/23
                  40.27.68.0/23
                  40.27.71.0/24
                  40.27.73.0/24
                  40.27.75.0/24
                  40.27.80.0-40.27.82.255
                  40.27.104.0/23
                  40.27.107.0/24
                  40.27.113.0/24
                  40.27.115.0/24
                  40.27.125.0/24
                  40.27.127.0/24
                  40.27.132.0/24
                  40.27.134.0/23
                  40.27.174.0/24
                  40.27.216.0/24
                  40.27.218.0/23
                  40.27.228.0/24
                  40.27.230.0/23
                  40.183.88.0-40.183.92.255
                  40.183.95.0/24
                  40.183.97.0/24
                  40.183.99.0/24
                  40.183.103.0-40.183.107.255
                  40.183.110.0-40.183.117.255
                  40.183.119.0/24
                  40.183.123.0-40.183.124.255
                  40.183.126.0/23
                  40.183.142.0-40.183.147.255
                  40.183.149.0-40.183.150.255
                  40.183.153.0/24
                  40.183.159.0-40.183.193.255
                  40.183.198.0/24
                  40.183.200.0/23
                  40.183.205.0-40.183.207.255
                  40.183.212.0-40.183.214.255
                  40.183.224.0/23
                  40.183.228.0-40.183.233.255
                  40.183.237.0/24
                  40.183.239.0/24
                  40.183.241.0-40.183.247.255
                  40.183.252.0/23
                  40.223.5.0/24
                  40.223.7.0/24
                  40.223.9.0/24
                  40.223.12.0/24
                  40.223.14.0-40.223.23.255
                  40.223.80.0/21
                  40.223.122.0/24
                  40.223.157.0/24
                  40.223.183.0-40.223.194.255
                  40.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:8a:0f:3f:9a:85:39:31:d4:cf:8c:87:9e:63:04:fa:44:53:
         29:6e:6a:68:ca:09:f8:f3:66:22:5b:ce:b1:45:ef:b8:33:2c:
         9b:26:90:15:29:f0:a2:b2:9f:b6:19:ce:c0:4a:74:eb:92:12:
         51:75:f0:6d:68:99:f9:07:ab:de:c7:30:a5:53:29:0e:c6:9a:
         ea:ee:85:b2:a9:cd:eb:cc:13:67:42:b9:a9:c5:da:ba:c9:1e:
         0e:b6:fa:82:04:9c:a8:7f:a8:85:ae:db:47:b9:4c:60:03:83:
         47:e8:e2:ed:c5:35:44:c0:db:5e:95:2b:7e:78:90:59:d1:b3:
         a7:21:a0:08:0e:c2:7d:c7:f0:68:64:7b:6d:8a:1e:76:56:b8:
         43:de:ee:f7:12:a0:5b:49:6a:69:3f:0a:82:09:c9:8c:32:37:
         e7:f6:7b:a8:f0:fb:f5:43:6d:03:f9:89:c8:f2:55:09:53:b7:
         6e:83:8a:3f:3f:e8:53:29:c0:86:45:c3:36:bb:ec:06:b7:08:
         b0:08:e6:7b:1c:7b:14:08:f1:83:44:c0:31:e8:f4:bf:cf:a7:
         57:7e:62:e8:c2:bb:25:ec:2b:3c:92:c9:3a:00:93:f4:dc:8a:
         d1:19:6b:8b:31:66:c6:21:29:1b:0d:5a:07:fa:1b:73:ac:c6:
         ec:22:01:9b
-----BEGIN CERTIFICATE-----
MIIHUjCCBjqgAwIBAgIUQKYT/bTHN33ligusSIxBXfzkXxAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDE2MDY1MzI1WhcNMjcwNDE1MDY1ODI1
WjAzMTEwLwYDVQQDEyg0RkJDMEVENzZGNzlCOTkzODIyRDQwM0JGNDM3NzY3Mzc5
QzBENTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNawWdBsdMls
JEL3xbdRYslf7JKH478B3q680GTXjuhSTBvyHzRSFBnkxl4Uzj37ZHYxSgEXXPx2
jxNWbDr5/6xPmvjT7gbfVPzP2gOkwVGKe3QgF45QSq4JWFUYI/GZrfr0q1V7Wov1
4GNnEuuDbg41eaKZ2N0Hcvxwh4Kh0qC0TxN+8cggdx/bz1Nqiki/eymd+nv7EkiF
rCw/xseATvgUnjqpUjZS+IsTeVmVOr4LFajedRcVmUEKflxf0psvOUBJffr53pZt
DbWUvG1nvyHClJ1ZSlX2tuVy9p7nHIAUVsdfewUmupFUUo5ZeLHmsEh1BefG4kbx
OQtRQWV7dQIDAQABo4IEUjCCBE4wHQYDVR0OBBYEFE+8DtdvebmTgi1AO/Q3dnN5
wNVzMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAfMG
CCsGAQUFBwEHAQH/BIIB4jCCAd4wggHaBAIAATCCAdIDBAEoGwADBAAoGxYDBAAo
Gx0DBAEoGyIDBAAoGy8DBAAoGzMDBAAoGzgDBAEoGzoDBAEoG0QDBAAoG0cDBAAo
G0kDBAAoG0swDAMEBCgbUAMEACgbUgMEASgbaAMEACgbawMEACgbcQMEACgbcwME
ACgbfQMEACgbfwMEACgbhAMEASgbhgMEACgbrgMEACgb2AMEASgb2gMEACgb5AME
ASgb5jAMAwQDKLdYAwQAKLdcAwQAKLdfAwQAKLdhAwQAKLdjMAwDBAAot2cDBAIo
t2gwDAMEASi3bgMEASi3dAMEACi3dzAMAwQAKLd7AwQAKLd8AwQBKLd+MAwDBAEo
t44DBAIot5AwDAMEACi3lQMEACi3lgMEACi3mTAMAwQAKLefAwQBKLfAAwQAKLfG
AwQBKLfIMAwDBAAot80DBAQot8AwDAMEAii31AMEACi31gMEASi34DAMAwQCKLfk
AwQBKLfoAwQAKLftAwQAKLfvMAwDBAAot/EDBAMot/ADBAEot/wDBAAo3wUDBAAo
3wcDBAAo3wkDBAAo3wwwDAMEASjfDgMEAyjfEAMEAyjfUAMEACjfegMEACjfnTAM
AwQAKN+3AwQAKN/CAwQEKN/wMA0GCSqGSIb3DQEBCwUAA4IBAQAGig8/moU5MdTP
jIeeYwT6RFMpbmpoygn482YiW86xRe+4MyybJpAVKfCisp+2Gc7ASnTrkhJRdfBt
aJn5B6vexzClUykOxprq7oWyqc3rzBNnQrmpxdq6yR4OtvqCBJyof6iFrttHuUxg
A4NH6OLtxTVEwNtelSt+eJBZ0bOnIaAIDsJ9x/BoZHttih52VrhD3u73EqBbSWpp
PwqCCcmMMjfn9nuo8Pv1Q20D+YnI8lUJU7dug4o/P+hTKcCGRcM2u+wGtwiwCOZ7
HHsUCPGDRMAx6PS/z6dXfmLowrsl7Cs8ksk6AJP03IrRGWuLMWbGISkbDVoH+htz
rMbsIgGb
-----END CERTIFICATE-----
Generated at Thu Apr 16 16:34:16 2026 by rpki-client