Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          hKXb4WP/fsqLmxCTvx8/4h2V4NtAODS3eKFpFTH7hSE=
Subject key identifier:   9F:5A:83:66:6E:49:E8:38:57:FD:55:D0:FD:B7:B2:FC:FA:F0:8E:DE
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       275AD2FC339A07D28C0FA14D8357EB54E8FCFC8A
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Thu 16 Jul 2026 03:33:30 +0000
ROA not before:           Thu 16 Jul 2026 03:28:30 +0000
ROA not after:            Thu 15 Jul 2027 03:33:30 +0000
asID:                     834
IP address blocks:        40.27.1.0/24 maxlen: 24
                          40.27.2.0/24 maxlen: 24
                          40.27.5.0/24 maxlen: 24
                          40.27.22.0/24 maxlen: 24
                          40.27.57.0/24 maxlen: 24
                          40.27.73.0/24 maxlen: 24
                          40.27.74.0/23 maxlen: 24
                          40.27.104.0/23 maxlen: 24
                          40.27.107.0/24 maxlen: 24
                          40.27.112.0/22 maxlen: 24
                          40.27.124.0/22 maxlen: 24
                          40.27.132.0/24 maxlen: 24
                          40.27.134.0/23 maxlen: 24
                          40.27.174.0/23 maxlen: 24
                          40.27.216.0/24 maxlen: 24
                          40.27.218.0/23 maxlen: 24
                          40.27.228.0/24 maxlen: 24
                          40.27.230.0/23 maxlen: 24
                          40.183.88.0/21 maxlen: 24
                          40.183.96.0/22 maxlen: 24
                          40.183.102.0/23 maxlen: 24
                          40.183.104.0/22 maxlen: 24
                          40.183.108.0/23 maxlen: 24
                          40.183.110.0/24 maxlen: 24
                          40.183.112.0/20 maxlen: 24
                          40.183.136.0/21 maxlen: 24
                          40.183.144.0/20 maxlen: 24
                          40.183.160.0/19 maxlen: 24
                          40.183.192.0/21 maxlen: 24
                          40.183.200.0/23 maxlen: 24
                          40.183.204.0/22 maxlen: 24
                          40.183.208.0/21 maxlen: 24
                          40.183.224.0/23 maxlen: 24
                          40.183.226.0/24 maxlen: 24
                          40.183.228.0/22 maxlen: 24
                          40.183.232.0/21 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/23 maxlen: 24
                          40.183.244.0/22 maxlen: 24
                          40.183.252.0/22 maxlen: 24
                          40.223.5.0/24 maxlen: 24
                          40.223.7.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.12.0/24 maxlen: 24
                          40.223.16.0/21 maxlen: 24
                          40.223.80.0/22 maxlen: 24
                          40.223.84.0/24 maxlen: 24
                          40.223.86.0/23 maxlen: 24
                          40.223.122.0/24 maxlen: 24
                          40.223.157.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.184.0/21 maxlen: 24
                          40.223.192.0/23 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5a:d2:fc:33:9a:07:d2:8c:0f:a1:4d:83:57:eb:54:e8:fc:fc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul 16 03:28:30 2026 GMT
            Not After : Jul 15 03:33:30 2027 GMT
        Subject: CN=9F5A83666E49E83857FD55D0FDB7B2FCFAF08EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:4c:fd:61:46:60:7a:4b:f3:43:ae:c8:79:
                    f5:fc:81:7f:df:f7:49:8a:93:e7:04:cb:82:15:0a:
                    2c:d3:35:42:7e:11:ed:03:fb:9f:a6:9f:60:6a:11:
                    e4:80:9c:62:12:72:24:67:ae:b7:99:ff:33:0b:f9:
                    06:73:b5:8c:99:bb:dc:3a:62:bd:74:06:8e:52:dd:
                    7d:c5:9a:e2:eb:14:38:37:84:bd:8d:5c:b1:4d:24:
                    3d:9e:c9:c7:ca:3d:b5:82:5e:bc:a1:10:0c:d9:3e:
                    0d:eb:79:3e:3c:91:7e:3e:f9:d7:71:a3:4b:f4:4a:
                    73:93:92:9d:38:13:82:c0:fc:d7:6e:c5:53:d4:43:
                    20:5b:1b:4a:a9:fa:f3:1c:f7:01:4a:2d:7d:b4:63:
                    67:90:2e:8e:55:76:e6:06:7e:b9:d2:7f:e9:42:25:
                    a2:e9:09:79:ce:c2:ca:fb:27:9f:7d:6e:99:72:51:
                    59:ba:13:36:c3:21:18:2f:85:59:7f:7a:de:5a:60:
                    d8:ca:50:2f:80:54:df:f0:78:6e:30:f3:0d:2b:89:
                    fe:58:cd:b7:0c:19:da:85:20:47:50:9f:47:83:af:
                    11:4e:6f:72:49:6e:2c:79:a7:09:27:90:fa:2c:71:
                    04:97:ab:68:b5:f1:8e:b3:92:73:e6:3d:99:51:fb:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5A:83:66:6E:49:E8:38:57:FD:55:D0:FD:B7:B2:FC:FA:F0:8E:DE
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.1.0-40.27.2.255
                  40.27.5.0/24
                  40.27.22.0/24
                  40.27.57.0/24
                  40.27.73.0-40.27.75.255
                  40.27.104.0/23
                  40.27.107.0/24
                  40.27.112.0/22
                  40.27.124.0/22
                  40.27.132.0/24
                  40.27.134.0/23
                  40.27.174.0/23
                  40.27.216.0/24
                  40.27.218.0/23
                  40.27.228.0/24
                  40.27.230.0/23
                  40.183.88.0-40.183.99.255
                  40.183.102.0-40.183.110.255
                  40.183.112.0/20
                  40.183.136.0-40.183.201.255
                  40.183.204.0-40.183.215.255
                  40.183.224.0-40.183.226.255
                  40.183.228.0-40.183.239.255
                  40.183.241.0-40.183.247.255
                  40.183.252.0/22
                  40.223.5.0/24
                  40.223.7.0/24
                  40.223.9.0/24
                  40.223.12.0/24
                  40.223.16.0/21
                  40.223.80.0-40.223.84.255
                  40.223.86.0/23
                  40.223.122.0/24
                  40.223.157.0/24
                  40.223.183.0-40.223.194.255
                  40.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:4c:36:6e:37:92:ec:10:d7:25:8a:fc:f1:c2:46:22:7c:
         e9:92:b0:46:94:01:53:27:a0:b4:43:de:9b:aa:93:10:84:11:
         71:5f:1f:31:40:4d:75:34:f6:a7:7a:dc:d2:be:60:53:4a:a1:
         8a:fa:53:3f:81:ed:bf:35:71:a7:ce:db:99:30:44:12:a4:7b:
         85:71:19:b6:41:8d:ed:98:b2:c7:7b:12:d2:78:d1:9d:91:a1:
         91:e5:68:76:dc:9a:83:e5:d8:26:07:07:a4:41:d1:64:d7:f3:
         f5:1b:53:de:cc:61:be:42:f5:67:32:0f:07:7f:ec:91:18:44:
         c2:1a:dd:c1:04:11:5e:b6:0d:b9:c7:fa:82:d0:c8:bb:08:b7:
         fa:3f:86:e2:dd:8c:0d:37:3b:b4:2b:a6:9a:24:81:6a:7b:50:
         10:c8:64:ee:29:76:8b:72:87:2f:51:9f:99:b9:95:81:d2:38:
         a3:7e:9a:a0:57:0d:01:cd:83:4b:1f:bd:29:f0:b9:1d:72:79:
         8d:42:34:96:13:3b:c3:79:17:ce:5d:0b:bb:c6:c2:64:93:a6:
         56:72:f4:6c:10:58:0f:27:9f:4f:04:c3:46:32:64:35:14:29:
         e7:90:e3:6f:d5:44:53:11:e7:ab:3b:fd:f7:ca:79:20:5c:dc:
         97:c3:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:31:57 2026 by rpki-client