Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          NwQGimKNErovs1XiuGV4cl0VTu4sEm/1rYZLEJh0wbY=
Subject key identifier:   2D:52:0B:57:C2:A3:F2:FA:E9:9C:1E:95:A2:4F:C9:F1:81:CD:BC:15
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       10718A7D074D1CB909C9DBB4F96D6D6605371644
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Fri 22 Aug 2025 11:34:17 +0000
ROA not before:           Fri 22 Aug 2025 11:29:17 +0000
ROA not after:            Fri 21 Aug 2026 11:34:17 +0000
asID:                     834
IP address blocks:        40.27.13.0/24 maxlen: 24
                          40.27.14.0/23 maxlen: 24
                          40.27.16.0/24 maxlen: 24
                          40.27.18.0/23 maxlen: 24
                          40.27.20.0/24 maxlen: 24
                          40.27.22.0/23 maxlen: 24
                          40.27.24.0/22 maxlen: 24
                          40.27.32.0/21 maxlen: 24
                          40.27.51.0/24 maxlen: 24
                          40.27.64.0/21 maxlen: 24
                          40.27.72.0/22 maxlen: 24
                          40.27.80.0/21 maxlen: 24
                          40.27.88.0/22 maxlen: 24
                          40.27.92.0/24 maxlen: 24
                          40.27.94.0/23 maxlen: 24
                          40.27.96.0/19 maxlen: 24
                          40.27.128.0/22 maxlen: 24
                          40.27.132.0/24 maxlen: 24
                          40.27.135.0/24 maxlen: 24
                          40.27.136.0/24 maxlen: 24
                          40.27.138.0/23 maxlen: 24
                          40.27.144.0/20 maxlen: 24
                          40.27.160.0/20 maxlen: 24
                          40.27.176.0/21 maxlen: 24
                          40.27.184.0/22 maxlen: 24
                          40.27.188.0/23 maxlen: 24
                          40.27.191.0/24 maxlen: 24
                          40.27.196.0/22 maxlen: 24
                          40.27.208.0/22 maxlen: 24
                          40.27.212.0/23 maxlen: 24
                          40.27.214.0/24 maxlen: 24
                          40.27.219.0/24 maxlen: 24
                          40.27.224.0/23 maxlen: 24
                          40.27.226.0/24 maxlen: 24
                          40.183.94.0/24 maxlen: 24
                          40.183.96.0/20 maxlen: 24
                          40.183.112.0/22 maxlen: 24
                          40.183.118.0/23 maxlen: 24
                          40.183.120.0/22 maxlen: 24
                          40.183.136.0/22 maxlen: 24
                          40.183.140.0/23 maxlen: 24
                          40.183.142.0/24 maxlen: 24
                          40.183.144.0/22 maxlen: 24
                          40.183.148.0/23 maxlen: 24
                          40.183.151.0/24 maxlen: 24
                          40.183.152.0/24 maxlen: 24
                          40.183.155.0/24 maxlen: 24
                          40.183.156.0/22 maxlen: 24
                          40.183.192.0/22 maxlen: 24
                          40.183.196.0/23 maxlen: 24
                          40.183.199.0/24 maxlen: 24
                          40.183.202.0/23 maxlen: 24
                          40.183.204.0/23 maxlen: 24
                          40.183.208.0/21 maxlen: 24
                          40.183.234.0/23 maxlen: 24
                          40.183.236.0/24 maxlen: 24
                          40.183.238.0/23 maxlen: 24
                          40.183.240.0/24 maxlen: 24
                          40.183.253.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.12.0/22 maxlen: 24
                          40.223.240.0/23 maxlen: 24
                          40.223.244.0/24 maxlen: 24
                          40.223.246.0/24 maxlen: 24
                          40.223.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:71:8a:7d:07:4d:1c:b9:09:c9:db:b4:f9:6d:6d:66:05:37:16:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 22 11:29:17 2025 GMT
            Not After : Aug 21 11:34:17 2026 GMT
        Subject: CN=2D520B57C2A3F2FAE99C1E95A24FC9F181CDBC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:de:d7:f5:e0:fa:c2:6c:a6:25:ce:03:78:
                    94:e5:01:1a:e2:5b:82:8e:9a:d1:49:be:65:06:8d:
                    c1:bf:49:51:1b:64:4d:b1:e1:ea:24:a1:cf:69:f0:
                    41:8d:0a:2b:0e:d5:ea:c8:c6:f1:fe:92:e8:11:2e:
                    13:fa:e4:ca:a0:3b:d2:eb:65:12:9c:64:0b:7c:a0:
                    cb:80:32:e1:b5:4a:11:93:e5:67:0d:2e:c2:56:49:
                    45:43:dd:e6:87:6a:96:27:5c:95:bd:4f:3f:05:c1:
                    ff:00:0b:65:24:5f:38:4e:19:c1:37:16:ea:6a:f4:
                    d5:d4:3a:93:b4:71:71:d8:94:19:67:06:29:ea:88:
                    b6:43:e2:31:70:f5:d6:2e:63:c4:07:87:c8:a5:eb:
                    e7:3d:b5:0c:03:13:ff:bd:6e:1b:58:ad:f6:6a:d1:
                    27:0f:00:e0:a6:88:7c:4c:d7:8f:df:32:1e:39:05:
                    63:31:b7:40:0c:03:39:04:17:7e:32:42:ea:69:f9:
                    b0:11:3b:fb:35:33:b4:48:c1:f5:50:c5:b6:38:e3:
                    87:c9:f4:16:05:60:e1:2c:3c:d9:a5:f2:a6:79:9f:
                    12:16:b6:ff:fd:f2:67:0a:05:89:8a:99:04:da:10:
                    a4:ec:dd:b1:bf:e1:18:a4:e6:13:f4:53:93:a6:6c:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:52:0B:57:C2:A3:F2:FA:E9:9C:1E:95:A2:4F:C9:F1:81:CD:BC:15
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.13.0-40.27.16.255
                  40.27.18.0-40.27.20.255
                  40.27.22.0-40.27.27.255
                  40.27.32.0/21
                  40.27.51.0/24
                  40.27.64.0-40.27.75.255
                  40.27.80.0-40.27.92.255
                  40.27.94.0-40.27.132.255
                  40.27.135.0-40.27.136.255
                  40.27.138.0/23
                  40.27.144.0-40.27.189.255
                  40.27.191.0/24
                  40.27.196.0/22
                  40.27.208.0-40.27.214.255
                  40.27.219.0/24
                  40.27.224.0-40.27.226.255
                  40.183.94.0/24
                  40.183.96.0-40.183.115.255
                  40.183.118.0-40.183.123.255
                  40.183.136.0-40.183.142.255
                  40.183.144.0-40.183.149.255
                  40.183.151.0-40.183.152.255
                  40.183.155.0-40.183.159.255
                  40.183.192.0-40.183.197.255
                  40.183.199.0/24
                  40.183.202.0-40.183.205.255
                  40.183.208.0/21
                  40.183.234.0-40.183.236.255
                  40.183.238.0-40.183.240.255
                  40.183.253.0/24
                  40.223.9.0/24
                  40.223.12.0/22
                  40.223.240.0/23
                  40.223.244.0/24
                  40.223.246.0/24
                  40.223.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:32:8e:45:d7:8a:ba:27:22:52:cb:56:4f:7a:ea:30:79:b6:
         1a:f9:89:f2:56:6c:71:9e:7b:a5:a0:55:49:cf:dd:c2:30:fa:
         22:d4:3c:8e:e4:79:20:dd:92:44:2e:49:c1:32:c0:eb:23:bd:
         48:12:e7:0d:39:98:35:f2:b9:44:2c:d9:8d:8e:16:f4:8d:a6:
         4b:26:46:f7:cd:f7:1d:c8:22:d3:6e:62:3e:13:a8:11:61:0c:
         82:64:0d:e7:6d:ca:29:c7:0e:e7:fe:7b:09:2d:fc:91:cb:23:
         28:62:45:cc:7f:d1:f4:b9:ee:63:2c:14:2d:d2:ca:fc:ec:cf:
         ec:70:6e:6b:de:58:e7:d1:6a:41:5f:a1:6b:67:88:47:3d:f6:
         8d:77:39:1b:b9:64:53:e0:83:a4:2c:07:f5:78:3a:64:45:5b:
         ad:10:08:2c:08:e9:4a:e9:55:47:ac:99:fa:e4:63:35:98:bf:
         2c:6f:b0:4e:a0:9b:4b:2c:b6:be:6c:d6:2a:49:48:6a:a4:ac:
         9a:4e:91:10:93:6a:c3:2a:e1:76:a5:3a:df:39:fb:00:03:6f:
         cc:a4:9c:7e:90:a0:3d:55:57:9c:60:b6:77:60:cf:33:9c:a0:
         b0:2a:26:0b:1f:17:58:06:00:f1:b1:b3:ec:7b:7a:96:1d:10:
         ba:a7:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:08:41 2025 by rpki-client