Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          lL0uIqAd9qdf6uZaPFP9DiecI5w0HdgKxtRE/wLHuSs=
Subject key identifier:   B2:05:B1:39:1D:11:75:A7:10:C2:6C:5D:49:63:4F:EB:85:22:72:7F
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       4507F9860332F424A345EA79729E9AB27B80BC2D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Fri 04 Sep 2026 07:11:12 +0000
ROA not before:           Fri 04 Sep 2026 07:06:12 +0000
ROA not after:            Fri 03 Sep 2027 07:11:12 +0000
asID:                     834
IP address blocks:        40.27.1.0/24 maxlen: 24
                          40.27.12.0/24 maxlen: 24
                          40.27.58.0/23 maxlen: 24
                          40.27.68.0/23 maxlen: 24
                          40.27.74.0/23 maxlen: 24
                          40.27.104.0/23 maxlen: 24
                          40.27.112.0/24 maxlen: 24
                          40.27.114.0/23 maxlen: 24
                          40.27.124.0/24 maxlen: 24
                          40.27.126.0/23 maxlen: 24
                          40.27.132.0/24 maxlen: 24
                          40.27.219.0/24 maxlen: 24
                          40.183.88.0/21 maxlen: 24
                          40.183.96.0/22 maxlen: 24
                          40.183.102.0/23 maxlen: 24
                          40.183.104.0/22 maxlen: 24
                          40.183.108.0/23 maxlen: 24
                          40.183.110.0/24 maxlen: 24
                          40.183.112.0/20 maxlen: 24
                          40.183.136.0/21 maxlen: 24
                          40.183.144.0/20 maxlen: 24
                          40.183.160.0/19 maxlen: 24
                          40.183.192.0/21 maxlen: 24
                          40.183.200.0/23 maxlen: 24
                          40.183.204.0/22 maxlen: 24
                          40.183.208.0/21 maxlen: 24
                          40.183.224.0/23 maxlen: 24
                          40.183.226.0/24 maxlen: 24
                          40.183.228.0/22 maxlen: 24
                          40.183.232.0/21 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/23 maxlen: 24
                          40.183.244.0/22 maxlen: 24
                          40.183.252.0/22 maxlen: 24
                          40.223.5.0/24 maxlen: 24
                          40.223.7.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.13.0/24 maxlen: 24
                          40.223.18.0/23 maxlen: 24
                          40.223.20.0/24 maxlen: 24
                          40.223.84.0/24 maxlen: 24
                          40.223.87.0/24 maxlen: 24
                          40.223.157.0/24 maxlen: 24
                          40.223.184.0/22 maxlen: 24
                          40.223.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:07:f9:86:03:32:f4:24:a3:45:ea:79:72:9e:9a:b2:7b:80:bc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep  4 07:06:12 2026 GMT
            Not After : Sep  3 07:11:12 2027 GMT
        Subject: CN=B205B1391D1175A710C26C5D49634FEB8522727F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:98:89:fc:28:66:0c:75:43:71:3d:0f:af:
                    2d:c2:d4:d6:e0:6d:92:cd:57:7f:10:13:d9:c1:b3:
                    47:15:09:4d:1a:ef:72:86:19:7b:e8:ac:a8:36:c7:
                    fc:7c:83:84:d1:1a:3f:df:86:63:ca:b9:17:22:5a:
                    f9:b7:c8:10:a7:8a:f9:b5:20:2d:99:b5:e6:ef:25:
                    ef:f0:89:3a:20:a7:95:68:b8:92:50:9e:fb:62:8f:
                    25:c4:e5:45:8c:35:fb:44:1d:be:1d:69:f9:06:2d:
                    59:39:2c:c2:ae:ba:fb:65:57:3f:97:13:33:9e:d5:
                    86:d9:a8:34:85:57:43:ae:fb:98:21:a6:a5:87:f2:
                    06:0d:84:e0:69:ef:f3:d6:7f:9f:ea:e3:85:b9:d8:
                    9d:cd:36:9c:7e:85:62:48:36:a2:ed:16:5c:51:d9:
                    2c:4c:37:a5:c6:c1:30:54:85:35:c6:c1:8d:13:20:
                    83:71:ca:59:ee:a2:8a:9e:78:51:33:a9:96:7f:d0:
                    9b:e3:01:6e:05:34:8a:4f:c2:2a:56:20:9f:ba:31:
                    ac:cb:28:38:59:b9:28:92:30:df:25:81:13:e0:ff:
                    84:3b:e8:4e:52:64:8d:03:e4:6f:a7:7d:89:c4:c5:
                    e3:77:49:66:67:ae:54:ef:a4:fc:89:36:7c:f3:9a:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:05:B1:39:1D:11:75:A7:10:C2:6C:5D:49:63:4F:EB:85:22:72:7F
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.1.0/24
                  40.27.12.0/24
                  40.27.58.0/23
                  40.27.68.0/23
                  40.27.74.0/23
                  40.27.104.0/23
                  40.27.112.0/24
                  40.27.114.0/23
                  40.27.124.0/24
                  40.27.126.0/23
                  40.27.132.0/24
                  40.27.219.0/24
                  40.183.88.0-40.183.99.255
                  40.183.102.0-40.183.110.255
                  40.183.112.0/20
                  40.183.136.0-40.183.201.255
                  40.183.204.0-40.183.215.255
                  40.183.224.0-40.183.226.255
                  40.183.228.0-40.183.239.255
                  40.183.241.0-40.183.247.255
                  40.183.252.0/22
                  40.223.5.0/24
                  40.223.7.0/24
                  40.223.9.0/24
                  40.223.13.0/24
                  40.223.18.0-40.223.20.255
                  40.223.84.0/24
                  40.223.87.0/24
                  40.223.157.0/24
                  40.223.184.0/22
                  40.223.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:13:57:20:8c:4c:17:a9:2f:2f:84:a3:b7:09:54:e5:0a:16:
         60:60:13:22:4a:0b:74:17:ac:d9:91:e6:8a:e9:ff:9a:b7:38:
         c2:c8:db:55:ae:90:e2:f0:be:59:c4:5a:8a:e5:b2:1f:8b:0e:
         08:11:44:d1:b6:b1:70:8d:39:6e:48:1a:b0:2e:52:08:d7:a4:
         05:38:d2:53:a8:08:5a:e1:e8:b0:ca:2a:5c:dd:4d:b3:1b:0f:
         be:67:68:86:1c:5e:17:56:10:f2:0f:6a:64:94:03:9f:66:67:
         6f:5f:a0:2e:66:f0:60:c6:86:34:8e:25:d1:0f:2e:23:95:d1:
         a5:02:50:ee:86:a7:13:e6:65:8c:27:f0:ea:50:b5:20:04:b6:
         eb:15:c8:5a:81:23:7a:8a:b6:18:b0:3c:ca:16:b3:b0:17:e7:
         ea:b6:a2:d5:43:95:99:04:d2:fb:fe:21:af:9f:03:b5:c4:e0:
         c7:7f:5d:d1:59:4b:87:ac:ca:2a:84:2e:d1:ff:ba:f8:51:d9:
         35:fb:ae:b5:66:26:c5:9f:a4:8d:d3:2d:42:c1:05:23:e5:d6:
         f6:76:cd:6e:ab:e8:f3:da:41:99:8d:3a:40:32:2d:41:7a:78:
         41:06:0d:2e:07:6b:76:55:97:54:55:1a:d3:94:60:09:d0:28:
         cb:dd:a1:e7
-----BEGIN CERTIFICATE-----
MIIGeTCCBWGgAwIBAgIURQf5hgMy9CSjRep5cp6asnuAvC0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTA0MDcwNjEyWhcNMjcwOTAzMDcxMTEy
WjAzMTEwLwYDVQQDEyhCMjA1QjEzOTFEMTE3NUE3MTBDMjZDNUQ0OTYzNEZFQjg1
MjI3MjdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDuYifwoZgx1
Q3E9D68twtTW4G2SzVd/EBPZwbNHFQlNGu9yhhl76KyoNsf8fIOE0Ro/34ZjyrkX
Ilr5t8gQp4r5tSAtmbXm7yXv8Ik6IKeVaLiSUJ77Yo8lxOVFjDX7RB2+HWn5Bi1Z
OSzCrrr7ZVc/lxMzntWG2ag0hVdDrvuYIaalh/IGDYTgae/z1n+f6uOFudidzTac
foViSDai7RZcUdksTDelxsEwVIU1xsGNEyCDccpZ7qKKnnhRM6mWf9Cb4wFuBTSK
T8IqViCfujGsyyg4WbkokjDfJYET4P+EO+hOUmSNA+Rvp32JxMXjd0lmZ65U76T8
iTZ885pmPwIDAQABo4IDeTCCA3UwHQYDVR0OBBYEFLIFsTkdEXWnEMJsXUljT+uF
InJ/MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCARoG
CCsGAQUFBwEHAQH/BIIBCTCCAQUwggEBBAIAATCB+gMEACgbAQMEACgbDAMEASgb
OgMEASgbRAMEASgbSgMEASgbaAMEACgbcAMEASgbcgMEACgbfAMEASgbfgMEACgb
hAMEACgb2zAMAwQDKLdYAwQCKLdgMAwDBAEot2YDBAAot24DBAQot3AwDAMEAyi3
iAMEASi3yDAMAwQCKLfMAwQDKLfQMAwDBAUot+ADBAAot+IwDAMEAii35AMEBCi3
4DAMAwQAKLfxAwQDKLfwAwQCKLf8AwQAKN8FAwQAKN8HAwQAKN8JAwQAKN8NMAwD
BAEo3xIDBAAo3xQDBAAo31QDBAAo31cDBAAo350DBAIo37gDBAAo374wDQYJKoZI
hvcNAQELBQADggEBAIMTVyCMTBepLy+Eo7cJVOUKFmBgEyJKC3QXrNmR5orp/5q3
OMLI21WukOLwvlnEWorlsh+LDggRRNG2sXCNOW5IGrAuUgjXpAU40lOoCFrh6LDK
KlzdTbMbD75naIYcXhdWEPIPamSUA59mZ29foC5m8GDGhjSOJdEPLiOV0aUCUO6G
pxPmZYwn8OpQtSAEtusVyFqBI3qKthiwPMoWs7AX5+q2otVDlZkE0vv+Ia+fA7XE
4Md/XdFZS4esyiqELtH/uvhR2TX7rrVmJsWfpI3TLULBBSPl1vZ2zW6r6PPaQZmN
OkAyLUF6eEEGDS4Ha3ZVl1RVGtOUYAnQKMvdoec=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:35:30 2026 by rpki-client