Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          9I6m7w1itxaXgRGnQSe/Bl/MY0MQ2fzl2AUA0BG7Tuk=
Subject key identifier:   24:00:EE:4B:AC:9F:A4:7C:B4:22:1D:71:23:15:B5:C7:E4:08:A1:0D
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3E27EF695777547282EA13F3E0A023EECB08A666
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Thu 23 Jul 2026 15:04:17 +0000
ROA not before:           Thu 23 Jul 2026 14:59:17 +0000
ROA not after:            Thu 22 Jul 2027 15:04:17 +0000
asID:                     834
IP address blocks:        40.27.1.0/24 maxlen: 24
                          40.27.2.0/24 maxlen: 24
                          40.27.5.0/24 maxlen: 24
                          40.27.22.0/24 maxlen: 24
                          40.27.57.0/24 maxlen: 24
                          40.27.73.0/24 maxlen: 24
                          40.27.74.0/23 maxlen: 24
                          40.27.104.0/23 maxlen: 24
                          40.27.107.0/24 maxlen: 24
                          40.27.112.0/22 maxlen: 24
                          40.27.124.0/22 maxlen: 24
                          40.27.132.0/24 maxlen: 24
                          40.27.134.0/23 maxlen: 24
                          40.27.174.0/23 maxlen: 24
                          40.27.216.0/24 maxlen: 24
                          40.27.218.0/23 maxlen: 24
                          40.27.228.0/24 maxlen: 24
                          40.27.230.0/23 maxlen: 24
                          40.183.88.0/21 maxlen: 24
                          40.183.96.0/22 maxlen: 24
                          40.183.102.0/23 maxlen: 24
                          40.183.104.0/22 maxlen: 24
                          40.183.108.0/23 maxlen: 24
                          40.183.110.0/24 maxlen: 24
                          40.183.112.0/20 maxlen: 24
                          40.183.136.0/21 maxlen: 24
                          40.183.144.0/20 maxlen: 24
                          40.183.160.0/19 maxlen: 24
                          40.183.192.0/21 maxlen: 24
                          40.183.200.0/23 maxlen: 24
                          40.183.204.0/22 maxlen: 24
                          40.183.208.0/21 maxlen: 24
                          40.183.224.0/23 maxlen: 24
                          40.183.226.0/24 maxlen: 24
                          40.183.228.0/22 maxlen: 24
                          40.183.232.0/21 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/23 maxlen: 24
                          40.183.244.0/22 maxlen: 24
                          40.183.252.0/22 maxlen: 24
                          40.223.5.0/24 maxlen: 24
                          40.223.7.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.12.0/24 maxlen: 24
                          40.223.16.0/22 maxlen: 24
                          40.223.20.0/23 maxlen: 24
                          40.223.22.0/24 maxlen: 24
                          40.223.80.0/22 maxlen: 24
                          40.223.84.0/24 maxlen: 24
                          40.223.86.0/23 maxlen: 24
                          40.223.122.0/24 maxlen: 24
                          40.223.157.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.184.0/21 maxlen: 24
                          40.223.192.0/23 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:27:ef:69:57:77:54:72:82:ea:13:f3:e0:a0:23:ee:cb:08:a6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul 23 14:59:17 2026 GMT
            Not After : Jul 22 15:04:17 2027 GMT
        Subject: CN=2400EE4BAC9FA47CB4221D712315B5C7E408A10D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:cd:5c:e2:dd:30:e5:18:49:ea:ca:e7:d4:
                    1e:a3:8a:5d:58:38:ce:72:90:a7:83:15:f6:26:fb:
                    38:30:33:dd:8b:cf:e3:fa:51:6c:93:28:12:20:a4:
                    ee:83:a3:31:c2:bb:05:80:80:5e:3d:43:b6:fe:88:
                    5a:b1:f4:02:8a:9f:0c:67:bd:da:ca:ca:dc:75:0c:
                    50:35:b9:ab:11:40:7b:14:41:e7:09:d6:b7:df:ba:
                    65:14:f4:3e:c9:c7:9b:f5:20:6b:60:0c:e0:31:c3:
                    01:9e:fc:ce:6e:0b:9a:5b:ed:50:70:53:83:ca:ef:
                    47:b7:f7:d8:c2:31:26:e2:d7:e3:4f:1d:a8:56:81:
                    be:f5:46:4b:84:63:fc:fe:1c:2c:5a:70:30:11:a4:
                    4f:09:85:0d:ad:a9:5a:3f:14:35:68:7d:5f:b2:a4:
                    86:03:66:28:6a:7b:54:25:a0:f1:ae:19:73:55:e2:
                    07:a0:34:e6:ae:65:21:bf:d3:a3:05:d3:3b:b2:11:
                    99:ce:37:07:d2:ec:37:63:46:14:29:46:56:f8:4e:
                    29:d4:af:a6:59:0c:ed:ba:9f:b3:ed:35:89:c9:58:
                    bc:c0:9f:e3:53:24:92:22:40:0b:b7:3c:71:4e:a8:
                    49:1b:9c:3c:c4:61:98:ee:94:e7:8c:db:82:d2:ec:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:EE:4B:AC:9F:A4:7C:B4:22:1D:71:23:15:B5:C7:E4:08:A1:0D
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.1.0-40.27.2.255
                  40.27.5.0/24
                  40.27.22.0/24
                  40.27.57.0/24
                  40.27.73.0-40.27.75.255
                  40.27.104.0/23
                  40.27.107.0/24
                  40.27.112.0/22
                  40.27.124.0/22
                  40.27.132.0/24
                  40.27.134.0/23
                  40.27.174.0/23
                  40.27.216.0/24
                  40.27.218.0/23
                  40.27.228.0/24
                  40.27.230.0/23
                  40.183.88.0-40.183.99.255
                  40.183.102.0-40.183.110.255
                  40.183.112.0/20
                  40.183.136.0-40.183.201.255
                  40.183.204.0-40.183.215.255
                  40.183.224.0-40.183.226.255
                  40.183.228.0-40.183.239.255
                  40.183.241.0-40.183.247.255
                  40.183.252.0/22
                  40.223.5.0/24
                  40.223.7.0/24
                  40.223.9.0/24
                  40.223.12.0/24
                  40.223.16.0-40.223.22.255
                  40.223.80.0-40.223.84.255
                  40.223.86.0/23
                  40.223.122.0/24
                  40.223.157.0/24
                  40.223.183.0-40.223.194.255
                  40.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:7b:3d:18:8e:5a:4d:74:15:82:8f:e5:38:39:7d:79:1f:
         1a:e9:3a:8f:d6:de:96:7e:2e:e7:59:65:c1:4c:3b:82:a0:ca:
         95:cf:e7:d6:b7:5f:29:77:ad:29:34:b9:58:a2:0f:4d:8d:14:
         97:a9:b2:74:d4:e2:6e:ff:a0:4d:0a:69:26:fe:32:e7:52:cd:
         dc:93:83:b4:20:26:82:81:de:8f:8c:af:1b:47:c3:92:d2:23:
         4f:d2:b2:05:9b:dc:de:3d:45:59:50:99:23:59:40:ae:f1:3c:
         95:b6:56:4f:bb:c1:05:85:79:e2:69:ae:d7:4a:b9:45:6e:8a:
         6e:70:37:cf:93:ca:f0:04:56:0e:3f:ef:50:25:09:05:e3:d9:
         fe:0d:c7:19:57:30:46:e2:08:78:d0:9c:97:01:1b:a3:f1:c9:
         5e:7b:d4:0c:4a:8e:23:d8:80:94:fe:53:81:4e:84:ba:73:85:
         3e:04:8f:2c:b9:c0:42:7e:88:36:a4:78:89:73:69:07:51:2d:
         4b:fd:f4:b9:4a:f5:98:3b:3b:d6:38:77:b5:0d:9a:39:1b:5a:
         c6:64:7d:2f:f3:25:a8:d8:29:ed:5e:ca:f2:aa:42:23:5b:22:
         29:ac:61:46:c8:f7:d9:e8:e1:48:7d:8d:cc:7f:82:19:31:ca:
         0c:c8:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:08:20 2026 by rpki-client