Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          tF8PcdRXMDQmpg4NloHamU2OVe5yzqBGgI9vH/FHZVk=
Subject key identifier:   E6:AF:59:98:EE:37:44:25:AA:C8:63:04:1E:AD:27:58:DF:D7:27:AB
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       20D94453E2CB7091446B5194F56FE733BF7855D6
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Fri 15 Aug 2025 07:54:08 +0000
ROA not before:           Fri 15 Aug 2025 07:49:08 +0000
ROA not after:            Fri 14 Aug 2026 07:54:08 +0000
asID:                     834
IP address blocks:        40.27.14.0/23 maxlen: 24
                          40.27.16.0/24 maxlen: 24
                          40.27.18.0/23 maxlen: 24
                          40.27.20.0/24 maxlen: 24
                          40.27.22.0/23 maxlen: 24
                          40.27.24.0/22 maxlen: 24
                          40.27.32.0/21 maxlen: 24
                          40.27.51.0/24 maxlen: 24
                          40.27.52.0/24 maxlen: 24
                          40.27.64.0/21 maxlen: 24
                          40.27.72.0/22 maxlen: 24
                          40.27.80.0/21 maxlen: 24
                          40.27.88.0/22 maxlen: 24
                          40.27.92.0/24 maxlen: 24
                          40.27.94.0/23 maxlen: 24
                          40.27.96.0/19 maxlen: 24
                          40.27.128.0/21 maxlen: 24
                          40.27.136.0/24 maxlen: 24
                          40.27.138.0/23 maxlen: 24
                          40.27.144.0/20 maxlen: 24
                          40.27.160.0/20 maxlen: 24
                          40.27.176.0/21 maxlen: 24
                          40.27.184.0/22 maxlen: 24
                          40.27.188.0/23 maxlen: 24
                          40.27.191.0/24 maxlen: 24
                          40.27.196.0/22 maxlen: 24
                          40.27.208.0/22 maxlen: 24
                          40.27.212.0/23 maxlen: 24
                          40.27.214.0/24 maxlen: 24
                          40.27.219.0/24 maxlen: 24
                          40.27.224.0/23 maxlen: 24
                          40.27.226.0/24 maxlen: 24
                          40.183.94.0/24 maxlen: 24
                          40.183.96.0/20 maxlen: 24
                          40.183.112.0/22 maxlen: 24
                          40.183.118.0/23 maxlen: 24
                          40.183.120.0/22 maxlen: 24
                          40.183.136.0/22 maxlen: 24
                          40.183.140.0/23 maxlen: 24
                          40.183.142.0/24 maxlen: 24
                          40.183.144.0/22 maxlen: 24
                          40.183.148.0/23 maxlen: 24
                          40.183.151.0/24 maxlen: 24
                          40.183.152.0/24 maxlen: 24
                          40.183.155.0/24 maxlen: 24
                          40.183.156.0/22 maxlen: 24
                          40.183.192.0/22 maxlen: 24
                          40.183.196.0/23 maxlen: 24
                          40.183.199.0/24 maxlen: 24
                          40.183.202.0/23 maxlen: 24
                          40.183.204.0/23 maxlen: 24
                          40.183.208.0/21 maxlen: 24
                          40.183.234.0/23 maxlen: 24
                          40.183.236.0/24 maxlen: 24
                          40.183.238.0/23 maxlen: 24
                          40.183.240.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.12.0/22 maxlen: 24
                          40.223.240.0/23 maxlen: 24
                          40.223.244.0/24 maxlen: 24
                          40.223.246.0/24 maxlen: 24
                          40.223.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 18:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d9:44:53:e2:cb:70:91:44:6b:51:94:f5:6f:e7:33:bf:78:55:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 15 07:49:08 2025 GMT
            Not After : Aug 14 07:54:08 2026 GMT
        Subject: CN=E6AF5998EE374425AAC863041EAD2758DFD727AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:32:ff:d5:9d:42:24:2f:b3:f1:82:89:7d:
                    ec:b5:ee:53:fd:b3:04:bd:91:f4:5c:4e:e2:4a:5b:
                    be:68:41:ce:68:0a:98:37:b8:a3:77:b4:fd:b8:21:
                    be:09:df:b8:db:e0:75:81:41:48:c5:73:1b:c8:28:
                    c8:13:68:40:25:4a:b8:20:8f:16:e5:e7:93:96:ac:
                    b1:6b:1b:69:87:08:e7:9d:b0:eb:47:e2:9d:2e:ad:
                    c5:bc:78:df:14:78:7e:39:f5:40:ba:d3:9d:aa:ae:
                    44:f1:26:7e:91:02:d6:42:04:6e:6a:ca:8a:9a:84:
                    69:af:e0:95:49:36:bf:d7:c9:27:0e:46:d7:f1:91:
                    50:9f:dd:1c:51:2d:c3:01:88:a1:12:b7:e7:ec:95:
                    bd:76:00:df:36:fa:5e:2a:13:76:be:bd:58:4f:42:
                    b2:08:aa:9f:69:ef:0c:d0:d9:ed:c5:ec:a5:20:21:
                    f3:73:84:01:8a:23:e9:99:f0:4a:90:95:4c:5e:8c:
                    d4:fe:71:d7:0d:c9:3d:2d:2f:52:5d:d2:2b:36:ae:
                    cc:76:18:93:00:eb:f0:d7:e3:8e:3e:f0:df:e9:84:
                    dc:a5:e3:db:42:a5:ab:bb:37:72:89:46:fb:11:10:
                    95:12:b2:de:e4:03:57:65:7b:54:41:eb:54:7f:2b:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AF:59:98:EE:37:44:25:AA:C8:63:04:1E:AD:27:58:DF:D7:27:AB
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.14.0-40.27.16.255
                  40.27.18.0-40.27.20.255
                  40.27.22.0-40.27.27.255
                  40.27.32.0/21
                  40.27.51.0-40.27.52.255
                  40.27.64.0-40.27.75.255
                  40.27.80.0-40.27.92.255
                  40.27.94.0-40.27.136.255
                  40.27.138.0/23
                  40.27.144.0-40.27.189.255
                  40.27.191.0/24
                  40.27.196.0/22
                  40.27.208.0-40.27.214.255
                  40.27.219.0/24
                  40.27.224.0-40.27.226.255
                  40.183.94.0/24
                  40.183.96.0-40.183.115.255
                  40.183.118.0-40.183.123.255
                  40.183.136.0-40.183.142.255
                  40.183.144.0-40.183.149.255
                  40.183.151.0-40.183.152.255
                  40.183.155.0-40.183.159.255
                  40.183.192.0-40.183.197.255
                  40.183.199.0/24
                  40.183.202.0-40.183.205.255
                  40.183.208.0/21
                  40.183.234.0-40.183.236.255
                  40.183.238.0-40.183.240.255
                  40.223.9.0/24
                  40.223.12.0/22
                  40.223.240.0/23
                  40.223.244.0/24
                  40.223.246.0/24
                  40.223.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6e:3c:87:5c:56:08:2d:db:ac:88:fc:09:79:5a:96:94:f2:
         37:3b:31:0e:b8:ce:37:2e:f5:d1:ad:9c:64:6e:74:ef:08:1a:
         07:a5:c4:55:2a:4a:0a:fb:e3:9c:cd:57:d1:26:06:79:8f:10:
         72:59:e8:d5:e5:29:53:2c:a1:ed:d5:67:f5:c0:cd:bb:25:c9:
         9a:71:ef:65:0a:bb:44:7d:cc:f5:43:fc:05:db:4d:22:ac:c2:
         f2:5b:10:32:51:53:59:71:87:43:14:42:3c:f4:10:08:58:83:
         3d:69:dc:bd:d5:b2:d6:68:1c:3c:35:67:b8:81:58:51:ef:0e:
         77:5d:34:24:bb:18:dc:81:2b:a2:23:df:96:83:fa:6b:34:ca:
         7e:12:87:73:af:ca:84:10:ff:59:7e:77:01:6b:9f:b1:20:64:
         38:11:ff:5d:e6:84:1e:c3:e7:ae:a0:11:40:1a:7a:69:30:1d:
         15:74:ea:a4:ae:41:54:5b:b6:9c:78:d7:8e:4e:d9:ff:64:54:
         19:9f:4e:78:21:83:ae:69:59:0f:ee:79:14:64:17:20:7c:ff:
         f8:80:be:65:ed:6f:75:8b:e2:a0:c4:fd:f7:f3:19:e7:04:55:
         f4:84:5f:9e:f9:a1:ba:ea:4c:00:f7:6f:ea:71:f3:d6:60:e3:
         53:c2:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:05:01 2025 by rpki-client