Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          Vr+PEgvWJMwYNNqBBOFpbBisb9wX65d00NBnjqGMwM0=
Subject key identifier:   13:3D:21:5A:C3:C6:26:84:13:F0:DB:E7:13:BF:CB:8A:2F:49:36:F8
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       18FF1EA4AC8C172077E9A8C4A88D8518C388257E
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa
Signing time:             Mon 11 May 2026 09:38:35 +0000
ROA not before:           Mon 11 May 2026 09:33:35 +0000
ROA not after:            Mon 10 May 2027 09:38:35 +0000
asID:                     834
IP address blocks:        140.99.27.0/24 maxlen: 24
                          140.99.39.0/24 maxlen: 24
                          140.99.44.0/24 maxlen: 24
                          140.99.47.0/24 maxlen: 24
                          140.99.48.0/24 maxlen: 24
                          140.99.59.0/24 maxlen: 24
                          140.99.114.0/24 maxlen: 24
                          140.99.123.0/24 maxlen: 24
                          140.99.151.0/24 maxlen: 24
                          140.99.184.0/23 maxlen: 24
                          140.99.205.0/24 maxlen: 24
                          140.99.211.0/24 maxlen: 24
                          140.99.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 22:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ff:1e:a4:ac:8c:17:20:77:e9:a8:c4:a8:8d:85:18:c3:88:25:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: May 11 09:33:35 2026 GMT
            Not After : May 10 09:38:35 2027 GMT
        Subject: CN=133D215AC3C6268413F0DBE713BFCB8A2F4936F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:ae:9e:c7:f2:ab:3a:68:dd:71:37:cc:75:
                    f8:6d:39:56:d7:d5:b2:ef:59:43:7b:cd:c1:15:5b:
                    4a:8c:4b:b2:f3:28:28:55:cd:e0:dc:c8:bc:3e:02:
                    0d:1e:0c:3f:3d:57:1e:e0:f4:81:19:4d:47:63:2b:
                    2d:2b:86:1c:2d:1c:f7:8d:f2:2f:a4:7c:7f:0a:16:
                    03:ff:6a:ea:88:75:04:82:0b:af:e7:66:87:f9:6e:
                    f2:ad:82:bd:51:36:5d:75:4f:62:0c:b3:61:38:37:
                    14:f4:6c:47:31:b7:eb:6e:ff:8b:7a:77:35:19:5b:
                    ad:66:71:e6:4e:eb:51:0b:4d:56:e9:b2:18:74:36:
                    0e:97:e4:17:39:d8:31:8c:24:a6:d6:4b:26:31:55:
                    9e:f3:9a:83:87:42:ff:af:d3:51:00:f6:8e:3a:b9:
                    d0:44:0d:f1:0f:7f:3e:df:16:c5:e1:f1:b9:a5:d5:
                    ec:5a:c8:2a:8d:ab:1b:c0:6a:ec:db:88:3e:13:5f:
                    7e:89:d5:a0:f5:d0:b8:21:0d:36:dd:b9:5e:5b:71:
                    78:21:89:32:5d:3c:cc:a1:2d:70:9f:3c:94:db:c8:
                    dc:5c:4b:40:22:2c:e4:8e:c2:30:02:54:0f:5b:00:
                    b0:47:f0:ea:88:6d:0a:56:03:3d:d9:4b:e7:11:da:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:21:5A:C3:C6:26:84:13:F0:DB:E7:13:BF:CB:8A:2F:49:36:F8
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.27.0/24
                  140.99.39.0/24
                  140.99.44.0/24
                  140.99.47.0-140.99.48.255
                  140.99.59.0/24
                  140.99.114.0/24
                  140.99.123.0/24
                  140.99.151.0/24
                  140.99.184.0/23
                  140.99.205.0/24
                  140.99.211.0/24
                  140.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:23:20:c0:cb:24:59:52:98:b7:75:d7:b8:74:30:2e:ca:09:
         21:7b:8f:24:04:e1:55:0b:63:2e:4a:53:a7:b2:e4:a9:c5:77:
         4e:f3:11:cb:b1:42:17:18:41:98:4e:a0:e9:b2:7c:be:29:2b:
         3f:c5:95:b9:75:67:7e:b4:9e:68:55:ac:32:a2:af:31:b7:c4:
         a1:1e:71:99:e1:8e:78:33:e1:0a:3c:8d:5c:d2:55:71:6a:22:
         60:cb:5c:2f:6a:54:9f:08:8c:f4:d0:41:f5:02:f9:12:e0:5f:
         37:47:40:7f:95:6c:6c:91:48:73:5b:d0:4a:ed:9c:9a:2d:e2:
         dd:e8:db:5a:69:c0:3a:9e:71:70:e9:4d:f6:a2:f1:19:4c:df:
         64:22:e7:12:f1:73:ee:dc:bb:84:40:ca:7a:26:c5:5f:bc:a9:
         d7:c1:04:81:b4:bb:52:d4:8a:2e:0f:ef:2a:14:5e:bb:55:2d:
         54:2b:b7:a9:6d:bc:95:5f:bb:98:16:30:fd:4e:c6:bc:7b:62:
         40:cd:be:29:98:03:6a:bf:c8:10:32:95:eb:41:4d:1a:28:e3:
         44:0e:de:cd:f2:e1:4b:74:34:b7:6c:9f:5f:9a:a7:29:ea:6a:
         47:05:1e:6e:6c:4b:9b:94:e2:ba:c2:6e:cf:cc:33:2b:f6:9b:
         0e:a7:76:3c
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIUGP8epKyMFyB36ajEqI2FGMOIJX4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjYwNTExMDkzMzM1WhcNMjcwNTEwMDkzODM1
WjAzMTEwLwYDVQQDEygxMzNEMjE1QUMzQzYyNjg0MTNGMERCRTcxM0JGQ0I4QTJG
NDkzNkY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk02unsfyqzpo
3XE3zHX4bTlW19Wy71lDe83BFVtKjEuy8ygoVc3g3Mi8PgINHgw/PVce4PSBGU1H
YystK4YcLRz3jfIvpHx/ChYD/2rqiHUEgguv52aH+W7yrYK9UTZddU9iDLNhODcU
9GxHMbfrbv+Lenc1GVutZnHmTutRC01W6bIYdDYOl+QXOdgxjCSm1ksmMVWe85qD
h0L/r9NRAPaOOrnQRA3xD38+3xbF4fG5pdXsWsgqjasbwGrs24g+E19+idWg9dC4
IQ023bleW3F4IYkyXTzMoS1wnzyU28jcXEtAIizkjsIwAlQPWwCwR/DqiG0KVgM9
2UvnEdpvaQIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFBM9IVrDxiaEE/Db5xO/y4ov
STb4MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBpBggr
BgEFBQcBBwEB/wRaMFgwVgQCAAEwUAMEAIxjGwMEAIxjJwMEAIxjLDAMAwQAjGMv
AwQAjGMwAwQAjGM7AwQAjGNyAwQAjGN7AwQAjGOXAwQBjGO4AwQAjGPNAwQAjGPT
AwQAjGPpMA0GCSqGSIb3DQEBCwUAA4IBAQAnIyDAyyRZUpi3dde4dDAuygkhe48k
BOFVC2MuSlOnsuSpxXdO8xHLsUIXGEGYTqDpsny+KSs/xZW5dWd+tJ5oVawyoq8x
t8ShHnGZ4Y54M+EKPI1c0lVxaiJgy1wvalSfCIz00EH1AvkS4F83R0B/lWxskUhz
W9BK7ZyaLeLd6NtaacA6nnFw6U32ovEZTN9kIucS8XPu3LuEQMp6JsVfvKnXwQSB
tLtS1IouD+8qFF67VS1UK7epbbyVX7uYFjD9Tsa8e2JAzb4pmANqv8gQMpXrQU0a
KONEDt7N8uFLdDS3bJ9fmqcp6mpHBR5ubEublOK6wm7PzDMr9psOp3Y8
-----END CERTIFICATE-----
Generated at Tue May 12 23:48:49 2026 by rpki-client