Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          egg/Cx5uOhcjptD+QOAMaegY3Pb4GEYAyagUh+QGJCM=
Subject key identifier:   E9:14:3F:17:D0:B3:83:7A:FF:7D:A5:33:DC:67:0E:D4:EA:DD:2B:24
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       46C29BD25ABE97CE42F6A428EC8F3FA66A29C753
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Mon 20 Oct 2025 17:14:49 +0000
ROA not before:           Mon 20 Oct 2025 17:09:49 +0000
ROA not after:            Mon 19 Oct 2026 17:14:49 +0000
asID:                     834
IP address blocks:        40.27.12.0/22 maxlen: 24
                          40.27.18.0/23 maxlen: 24
                          40.27.20.0/24 maxlen: 24
                          40.27.22.0/23 maxlen: 24
                          40.27.26.0/23 maxlen: 24
                          40.27.28.0/22 maxlen: 24
                          40.27.51.0/24 maxlen: 24
                          40.27.64.0/21 maxlen: 24
                          40.27.72.0/22 maxlen: 24
                          40.27.80.0/21 maxlen: 24
                          40.27.89.0/24 maxlen: 24
                          40.27.90.0/23 maxlen: 24
                          40.27.92.0/24 maxlen: 24
                          40.27.94.0/23 maxlen: 24
                          40.27.104.0/23 maxlen: 24
                          40.27.107.0/24 maxlen: 24
                          40.27.108.0/24 maxlen: 24
                          40.27.110.0/23 maxlen: 24
                          40.27.112.0/21 maxlen: 24
                          40.27.124.0/22 maxlen: 24
                          40.27.130.0/23 maxlen: 24
                          40.27.132.0/24 maxlen: 24
                          40.27.135.0/24 maxlen: 24
                          40.27.136.0/24 maxlen: 24
                          40.27.138.0/23 maxlen: 24
                          40.27.140.0/22 maxlen: 24
                          40.27.144.0/24 maxlen: 24
                          40.27.146.0/23 maxlen: 24
                          40.27.148.0/22 maxlen: 24
                          40.27.152.0/22 maxlen: 24
                          40.27.156.0/23 maxlen: 24
                          40.27.159.0/24 maxlen: 24
                          40.27.164.0/22 maxlen: 24
                          40.27.170.0/23 maxlen: 24
                          40.27.172.0/23 maxlen: 24
                          40.27.175.0/24 maxlen: 24
                          40.27.176.0/21 maxlen: 24
                          40.27.188.0/24 maxlen: 24
                          40.27.191.0/24 maxlen: 24
                          40.27.192.0/22 maxlen: 24
                          40.27.209.0/24 maxlen: 24
                          40.27.210.0/23 maxlen: 24
                          40.27.212.0/22 maxlen: 24
                          40.27.216.0/24 maxlen: 24
                          40.27.218.0/23 maxlen: 24
                          40.27.224.0/23 maxlen: 24
                          40.27.227.0/24 maxlen: 24
                          40.27.228.0/24 maxlen: 24
                          40.183.92.0/23 maxlen: 24
                          40.183.94.0/24 maxlen: 24
                          40.183.96.0/22 maxlen: 24
                          40.183.101.0/24 maxlen: 24
                          40.183.102.0/23 maxlen: 24
                          40.183.104.0/21 maxlen: 24
                          40.183.112.0/22 maxlen: 24
                          40.183.118.0/23 maxlen: 24
                          40.183.120.0/23 maxlen: 24
                          40.183.122.0/24 maxlen: 24
                          40.183.124.0/22 maxlen: 24
                          40.183.136.0/22 maxlen: 24
                          40.183.140.0/23 maxlen: 24
                          40.183.144.0/22 maxlen: 24
                          40.183.148.0/23 maxlen: 24
                          40.183.151.0/24 maxlen: 24
                          40.183.152.0/24 maxlen: 24
                          40.183.154.0/23 maxlen: 24
                          40.183.156.0/23 maxlen: 24
                          40.183.158.0/24 maxlen: 24
                          40.183.192.0/22 maxlen: 24
                          40.183.196.0/23 maxlen: 24
                          40.183.199.0/24 maxlen: 24
                          40.183.202.0/23 maxlen: 24
                          40.183.204.0/24 maxlen: 24
                          40.183.208.0/22 maxlen: 24
                          40.183.212.0/23 maxlen: 24
                          40.183.215.0/24 maxlen: 24
                          40.183.234.0/23 maxlen: 24
                          40.183.236.0/24 maxlen: 24
                          40.183.238.0/23 maxlen: 24
                          40.183.240.0/24 maxlen: 24
                          40.223.7.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.12.0/24 maxlen: 24
                          40.223.17.0/24 maxlen: 24
                          40.223.18.0/23 maxlen: 24
                          40.223.20.0/24 maxlen: 24
                          40.223.22.0/23 maxlen: 24
                          40.223.81.0/24 maxlen: 24
                          40.223.82.0/23 maxlen: 24
                          40.223.84.0/23 maxlen: 24
                          40.223.87.0/24 maxlen: 24
                          40.223.122.0/24 maxlen: 24
                          40.223.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c2:9b:d2:5a:be:97:ce:42:f6:a4:28:ec:8f:3f:a6:6a:29:c7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct 20 17:09:49 2025 GMT
            Not After : Oct 19 17:14:49 2026 GMT
        Subject: CN=E9143F17D0B3837AFF7DA533DC670ED4EADD2B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:5f:45:31:d0:58:d4:bf:7b:57:a8:e6:75:
                    f5:64:65:1a:b3:dd:69:a6:ac:5b:33:3b:ba:4e:73:
                    13:fe:06:a3:a3:2b:5b:21:6c:7b:e6:f0:7f:da:bb:
                    1c:0d:5b:25:32:e3:6e:96:66:ce:d2:80:54:4f:0c:
                    5f:8c:85:e9:80:a2:57:85:27:29:09:61:4d:ec:4f:
                    22:a8:85:c9:39:fa:28:01:68:30:3c:40:60:5a:33:
                    41:88:b0:ea:10:0b:11:0b:45:23:7d:77:9a:e2:af:
                    7c:27:85:a3:68:a7:90:2b:2f:7d:ab:2a:e7:4b:26:
                    3f:ad:69:a5:89:7f:8b:79:ab:49:7b:24:fd:10:c9:
                    b6:bd:83:e6:2c:6a:12:6e:d7:93:b5:33:24:03:26:
                    43:6a:61:d9:eb:d6:e1:07:a6:ce:68:88:a8:88:95:
                    2b:71:c7:7e:6f:3a:39:44:96:7c:85:1e:e4:08:38:
                    30:df:e1:58:e1:31:10:4b:54:35:71:66:55:5a:f9:
                    0b:ee:71:27:1f:e5:8e:a5:1e:99:eb:b7:d4:eb:0b:
                    45:78:76:76:8d:98:c4:03:35:ab:9c:57:16:f3:f5:
                    55:81:f0:d0:02:11:92:8c:5c:9e:d2:39:49:22:71:
                    73:89:cc:52:95:89:89:06:49:50:52:6d:0f:83:0b:
                    16:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:14:3F:17:D0:B3:83:7A:FF:7D:A5:33:DC:67:0E:D4:EA:DD:2B:24
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.12.0/22
                  40.27.18.0-40.27.20.255
                  40.27.22.0/23
                  40.27.26.0-40.27.31.255
                  40.27.51.0/24
                  40.27.64.0-40.27.75.255
                  40.27.80.0/21
                  40.27.89.0-40.27.92.255
                  40.27.94.0/23
                  40.27.104.0/23
                  40.27.107.0-40.27.108.255
                  40.27.110.0-40.27.119.255
                  40.27.124.0/22
                  40.27.130.0-40.27.132.255
                  40.27.135.0-40.27.136.255
                  40.27.138.0-40.27.144.255
                  40.27.146.0-40.27.157.255
                  40.27.159.0/24
                  40.27.164.0/22
                  40.27.170.0-40.27.173.255
                  40.27.175.0-40.27.183.255
                  40.27.188.0/24
                  40.27.191.0-40.27.195.255
                  40.27.209.0-40.27.216.255
                  40.27.218.0/23
                  40.27.224.0/23
                  40.27.227.0-40.27.228.255
                  40.183.92.0-40.183.94.255
                  40.183.96.0/22
                  40.183.101.0-40.183.115.255
                  40.183.118.0-40.183.122.255
                  40.183.124.0/22
                  40.183.136.0-40.183.141.255
                  40.183.144.0-40.183.149.255
                  40.183.151.0-40.183.152.255
                  40.183.154.0-40.183.158.255
                  40.183.192.0-40.183.197.255
                  40.183.199.0/24
                  40.183.202.0-40.183.204.255
                  40.183.208.0-40.183.213.255
                  40.183.215.0/24
                  40.183.234.0-40.183.236.255
                  40.183.238.0-40.183.240.255
                  40.223.7.0/24
                  40.223.9.0/24
                  40.223.12.0/24
                  40.223.17.0-40.223.20.255
                  40.223.22.0/23
                  40.223.81.0-40.223.85.255
                  40.223.87.0/24
                  40.223.122.0/24
                  40.223.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:9f:0f:82:ed:be:e0:3c:cd:69:68:94:6f:6f:be:25:41:74:
         1c:26:62:32:f0:d1:c1:3e:3d:d2:c3:a4:a5:6c:f7:9d:05:21:
         24:88:bf:7c:f6:87:1a:21:21:56:44:b9:ba:1c:f1:3f:52:42:
         52:ef:25:c0:c0:86:ee:1e:12:96:94:9e:03:87:1f:33:94:70:
         fa:2b:b4:5d:2e:52:88:3c:66:c2:2f:89:8d:54:c2:10:1d:b9:
         98:70:2c:f2:39:39:61:3d:7e:1a:c9:0b:0f:d3:93:8b:47:96:
         e4:67:e5:04:02:c0:ce:3e:10:e2:2f:42:80:ac:78:94:a4:23:
         2d:c2:31:34:46:47:3f:25:c2:43:92:c8:aa:20:30:1a:f7:ab:
         82:0b:49:e1:87:cb:a3:d2:50:5a:70:1d:06:c9:aa:63:68:14:
         ea:41:48:f4:6f:2f:10:8c:ea:66:f9:d9:77:c6:23:6b:51:9e:
         75:50:50:0b:b6:c6:92:22:67:20:0a:a8:ef:ef:cd:28:64:f4:
         c7:65:71:f5:3b:7e:65:6e:20:5e:48:55:d1:d1:d0:5d:a6:8c:
         a6:05:e9:92:17:e5:ce:82:ba:78:17:b9:d8:42:6e:4d:5a:53:
         a7:df:b4:8c:53:57:ca:53:2d:87:e9:e6:58:e7:d1:a6:7b:64:
         6e:d8:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:44:21 2025 by rpki-client