Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          eheIFWWWtWmNtttbBRMXRTAWWl9ypg82N0F4WloQL/0=
Subject key identifier:   0D:FF:A7:17:70:B5:67:E7:65:3D:9C:63:F4:DD:47:71:C4:BC:BF:18
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       657DDBB240DA4738964C098B6F62C2AA928A9896
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Sat 05 Jul 2025 10:21:43 +0000
ROA not before:           Sat 05 Jul 2025 10:16:43 +0000
ROA not after:            Sat 04 Jul 2026 10:21:43 +0000
asID:                     834
IP address blocks:        40.27.17.0/24 maxlen: 24
                          40.27.19.0/24 maxlen: 24
                          40.27.20.0/24 maxlen: 24
                          40.27.22.0/23 maxlen: 24
                          40.27.25.0/24 maxlen: 24
                          40.27.26.0/23 maxlen: 24
                          40.27.32.0/21 maxlen: 24
                          40.27.48.0/21 maxlen: 24
                          40.27.64.0/21 maxlen: 24
                          40.27.72.0/22 maxlen: 24
                          40.27.80.0/20 maxlen: 24
                          40.27.96.0/21 maxlen: 24
                          40.27.104.0/22 maxlen: 24
                          40.27.108.0/24 maxlen: 24
                          40.27.110.0/23 maxlen: 24
                          40.27.112.0/20 maxlen: 24
                          40.27.128.0/21 maxlen: 24
                          40.27.136.0/24 maxlen: 24
                          40.27.138.0/23 maxlen: 24
                          40.27.144.0/20 maxlen: 24
                          40.27.160.0/21 maxlen: 24
                          40.27.169.0/24 maxlen: 24
                          40.27.170.0/23 maxlen: 24
                          40.27.172.0/22 maxlen: 24
                          40.27.176.0/20 maxlen: 24
                          40.27.196.0/22 maxlen: 24
                          40.27.200.0/21 maxlen: 24
                          40.27.208.0/20 maxlen: 24
                          40.27.224.0/21 maxlen: 24
                          40.27.240.0/23 maxlen: 24
                          40.27.242.0/24 maxlen: 24
                          40.183.94.0/24 maxlen: 24
                          40.183.96.0/19 maxlen: 24
                          40.183.136.0/21 maxlen: 24
                          40.183.144.0/22 maxlen: 24
                          40.183.148.0/23 maxlen: 24
                          40.183.151.0/24 maxlen: 24
                          40.183.152.0/24 maxlen: 24
                          40.183.155.0/24 maxlen: 24
                          40.183.156.0/23 maxlen: 24
                          40.183.192.0/22 maxlen: 24
                          40.183.196.0/23 maxlen: 24
                          40.183.199.0/24 maxlen: 24
                          40.183.200.0/21 maxlen: 24
                          40.183.208.0/22 maxlen: 24
                          40.183.212.0/23 maxlen: 24
                          40.183.214.0/24 maxlen: 24
                          40.183.224.0/23 maxlen: 24
                          40.183.228.0/22 maxlen: 24
                          40.183.232.0/21 maxlen: 24
                          40.183.240.0/22 maxlen: 24
                          40.183.244.0/24 maxlen: 24
                          40.223.6.0/24 maxlen: 24
                          40.223.8.0/24 maxlen: 24
                          40.223.10.0/23 maxlen: 24
                          40.223.24.0/21 maxlen: 24
                          40.223.32.0/21 maxlen: 24
                          40.223.40.0/22 maxlen: 24
                          40.223.48.0/20 maxlen: 24
                          40.223.64.0/20 maxlen: 24
                          40.223.88.0/21 maxlen: 24
                          40.223.96.0/20 maxlen: 24
                          40.223.112.0/21 maxlen: 24
                          40.223.120.0/23 maxlen: 24
                          40.223.123.0/24 maxlen: 24
                          40.223.124.0/22 maxlen: 24
                          40.223.128.0/20 maxlen: 24
                          40.223.144.0/21 maxlen: 24
                          40.223.152.0/22 maxlen: 24
                          40.223.156.0/24 maxlen: 24
                          40.223.158.0/23 maxlen: 24
                          40.223.160.0/20 maxlen: 24
                          40.223.176.0/21 maxlen: 24
                          40.223.192.0/19 maxlen: 24
                          40.223.224.0/20 maxlen: 24
                          40.223.240.0/22 maxlen: 24
                          40.223.244.0/24 maxlen: 24
                          40.223.246.0/23 maxlen: 24
                          40.223.248.0/23 maxlen: 24
                          40.223.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 11:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7d:db:b2:40:da:47:38:96:4c:09:8b:6f:62:c2:aa:92:8a:98:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul  5 10:16:43 2025 GMT
            Not After : Jul  4 10:21:43 2026 GMT
        Subject: CN=0DFFA71770B567E7653D9C63F4DD4771C4BCBF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:13:65:1e:8f:f4:37:ab:0a:01:9e:19:bd:
                    93:f6:60:2e:02:f8:b1:41:f1:5b:95:a8:ad:a1:72:
                    7c:36:35:bf:c3:c8:f9:0d:4f:f5:46:69:b8:6b:9d:
                    dd:50:d0:d9:f4:e5:8f:2f:f0:5e:89:ea:ec:a1:4f:
                    e6:83:9f:a4:02:01:de:17:0b:3d:1c:99:73:f6:1b:
                    12:eb:98:4d:ad:21:ff:d2:d5:66:5a:7b:2e:1e:7f:
                    db:a4:3b:fc:fe:a4:e4:9d:7f:0e:1b:82:f3:b0:37:
                    b7:57:56:25:3c:42:ea:2c:93:24:43:0a:a0:0e:0c:
                    d2:cf:bb:a9:5f:2e:fa:48:e8:2f:fc:77:b4:5a:56:
                    99:3e:f0:72:98:f9:7d:60:41:e3:f2:8f:20:db:25:
                    e2:9a:05:86:2d:bb:30:23:83:8b:d4:91:cc:59:95:
                    20:f8:f7:18:31:d4:7a:5d:40:63:f2:08:73:d0:22:
                    0f:91:b2:58:16:17:c3:2f:3a:ed:db:a8:6a:d5:58:
                    21:78:e3:17:0b:18:13:04:b1:bd:2d:1d:87:6d:5a:
                    3d:0d:d9:d8:25:a1:d3:46:15:28:ce:1d:53:fa:15:
                    02:5e:14:88:02:ce:0b:68:fb:1e:5f:b1:52:eb:29:
                    26:5f:c8:46:69:1c:d2:0d:33:e9:30:ee:5c:a3:9c:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FF:A7:17:70:B5:67:E7:65:3D:9C:63:F4:DD:47:71:C4:BC:BF:18
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.17.0/24
                  40.27.19.0-40.27.20.255
                  40.27.22.0/23
                  40.27.25.0-40.27.27.255
                  40.27.32.0/21
                  40.27.48.0/21
                  40.27.64.0-40.27.75.255
                  40.27.80.0-40.27.108.255
                  40.27.110.0-40.27.136.255
                  40.27.138.0/23
                  40.27.144.0-40.27.167.255
                  40.27.169.0-40.27.191.255
                  40.27.196.0-40.27.231.255
                  40.27.240.0-40.27.242.255
                  40.183.94.0/24
                  40.183.96.0/19
                  40.183.136.0-40.183.149.255
                  40.183.151.0-40.183.152.255
                  40.183.155.0-40.183.157.255
                  40.183.192.0-40.183.197.255
                  40.183.199.0-40.183.214.255
                  40.183.224.0/23
                  40.183.228.0-40.183.244.255
                  40.223.6.0/24
                  40.223.8.0/24
                  40.223.10.0/23
                  40.223.24.0-40.223.43.255
                  40.223.48.0-40.223.79.255
                  40.223.88.0-40.223.121.255
                  40.223.123.0-40.223.156.255
                  40.223.158.0-40.223.183.255
                  40.223.192.0-40.223.244.255
                  40.223.246.0-40.223.250.255

    Signature Algorithm: sha256WithRSAEncryption
         37:b1:84:3f:c3:ba:bc:43:28:47:10:cb:b9:c9:16:b9:d7:8a:
         13:f5:98:77:e4:e9:da:f6:2e:35:e6:1e:8a:63:e3:c3:10:e0:
         a0:58:2b:24:77:45:39:9b:a6:9c:75:c9:98:8e:1a:d9:55:54:
         7c:58:f6:5b:63:52:50:78:ed:77:fa:b4:26:88:1b:fa:9e:8c:
         a5:08:be:f7:8f:5a:c3:9b:3c:11:60:a7:d4:ca:5e:a4:6f:d8:
         5a:b2:d0:69:c9:a9:7f:71:9e:49:63:66:ad:ad:67:e7:45:cd:
         7c:09:f6:be:93:53:25:46:e4:c5:7d:07:95:c9:15:86:77:ce:
         f4:54:bb:94:8f:3a:2f:d4:29:8e:27:b7:b1:2e:c8:47:ce:93:
         ff:b0:d3:48:7c:9d:15:ff:db:69:9a:82:8a:fd:a1:40:07:7a:
         44:f6:60:7c:e1:fe:05:e6:98:d5:b3:7c:d8:28:5d:ea:75:f9:
         1b:ce:53:75:65:a6:16:c6:62:6b:c5:29:ff:13:51:49:c1:48:
         8a:07:9d:a8:be:1a:83:34:a1:ce:86:3b:b6:2c:a9:86:61:ba:
         06:d1:eb:45:33:21:c8:b1:a0:50:01:19:40:86:6a:32:f1:9b:
         51:67:0e:bf:08:f6:39:18:db:62:eb:d8:93:bc:9d:73:a5:9d:
         aa:b3:b2:a8
-----BEGIN CERTIFICATE-----
MIIG9jCCBd6gAwIBAgIUZX3bskDaRziWTAmLb2LCqpKKmJYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNzA1MTAxNjQzWhcNMjYwNzA0MTAyMTQz
WjAzMTEwLwYDVQQDEygwREZGQTcxNzcwQjU2N0U3NjUzRDlDNjNGNERENDc3MUM0
QkNCRjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHMTZR6P9Der
CgGeGb2T9mAuAvixQfFblaitoXJ8NjW/w8j5DU/1Rmm4a53dUNDZ9OWPL/Beiers
oU/mg5+kAgHeFws9HJlz9hsS65hNrSH/0tVmWnsuHn/bpDv8/qTknX8OG4LzsDe3
V1YlPELqLJMkQwqgDgzSz7upXy76SOgv/He0WlaZPvBymPl9YEHj8o8g2yXimgWG
LbswI4OL1JHMWZUg+PcYMdR6XUBj8ghz0CIPkbJYFhfDLzrt26hq1VgheOMXCxgT
BLG9LR2HbVo9DdnYJaHTRhUozh1T+hUCXhSIAs4LaPseX7FS6ykmX8hGaRzSDTPp
MO5co5wXlQIDAQABo4ID9jCCA/IwHQYDVR0OBBYEFA3/pxdwtWfnZT2cY/TdR3HE
vL8YMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAZcG
CCsGAQUFBwEHAQH/BIIBhjCCAYIwggF+BAIAATCCAXYDBAAoGxEwDAMEACgbEwME
ACgbFAMEASgbFjAMAwQAKBsZAwQCKBsYAwQDKBsgAwQDKBswMAwDBAYoG0ADBAIo
G0gwDAMEBCgbUAMEACgbbDAMAwQBKBtuAwQAKBuIAwQBKBuKMAwDBAQoG5ADBAMo
G6AwDAMEACgbqQMEBigbgDAMAwQCKBvEAwQDKBvgMAwDBAQoG/ADBAAoG/IDBAAo
t14DBAUot2AwDAMEAyi3iAMEASi3lDAMAwQAKLeXAwQAKLeYMAwDBAAot5sDBAEo
t5wwDAMEBii3wAMEASi3xDAMAwQAKLfHAwQAKLfWAwQBKLfgMAwDBAIot+QDBAAo
t/QDBAAo3wYDBAAo3wgDBAEo3wowDAMEAyjfGAMEAijfKDAMAwQEKN8wAwQEKN9A
MAwDBAMo31gDBAEo33gwDAMEACjfewMEACjfnDAMAwQBKN+eAwQDKN+wMAwDBAYo
38ADBAAo3/QwDAMEASjf9gMEACjf+jANBgkqhkiG9w0BAQsFAAOCAQEAN7GEP8O6
vEMoRxDLuckWudeKE/WYd+Tp2vYuNeYeimPjwxDgoFgrJHdFOZumnHXJmI4a2VVU
fFj2W2NSUHjtd/q0Jogb+p6MpQi+949aw5s8EWCn1MpepG/YWrLQacmpf3GeSWNm
ra1n50XNfAn2vpNTJUbkxX0HlckVhnfO9FS7lI86L9Qpjie3sS7IR86T/7DTSHyd
Ff/baZqCiv2hQAd6RPZgfOH+BeaY1bN82Chd6nX5G85TdWWmFsZia8Up/xNRScFI
igedqL4agzShzoY7tiyphmG6BtHrRTMhyLGgUAEZQIZqMvGbUWcOvwj2ORjbYuvY
k7ydc6WdqrOyqA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 20:27:00 2025 by rpki-client