Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: cZvbgowg0+XTurYgIWC/Z7DdISkujbV0Y7JUd8LJ5oU=
Subject key identifier: 9A:87:40:7F:A0:36:9A:1B:BE:3F:D9:06:A9:F7:9E:E2:FA:E0:82:A4
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 2A31ABE4AC82ED373C1E037D092C401CCEAD53CF
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time: Tue 04 Nov 2025 13:05:19 +0000
ROA not before: Tue 04 Nov 2025 13:00:19 +0000
ROA not after: Tue 03 Nov 2026 13:05:19 +0000
asID: 834
IP address blocks: 40.27.1.0/24 maxlen: 24
40.27.2.0/23 maxlen: 24
40.27.13.0/24 maxlen: 24
40.27.14.0/23 maxlen: 24
40.27.18.0/23 maxlen: 24
40.27.20.0/24 maxlen: 24
40.27.22.0/23 maxlen: 24
40.27.26.0/23 maxlen: 24
40.27.28.0/22 maxlen: 24
40.27.40.0/21 maxlen: 24
40.27.51.0/24 maxlen: 24
40.27.64.0/21 maxlen: 24
40.27.72.0/22 maxlen: 24
40.27.80.0/21 maxlen: 24
40.27.89.0/24 maxlen: 24
40.27.90.0/23 maxlen: 24
40.27.92.0/24 maxlen: 24
40.27.94.0/23 maxlen: 24
40.27.104.0/23 maxlen: 24
40.27.107.0/24 maxlen: 24
40.27.108.0/24 maxlen: 24
40.27.110.0/23 maxlen: 24
40.27.112.0/20 maxlen: 24
40.27.130.0/23 maxlen: 24
40.27.132.0/24 maxlen: 24
40.27.135.0/24 maxlen: 24
40.27.136.0/24 maxlen: 24
40.27.138.0/23 maxlen: 24
40.27.140.0/22 maxlen: 24
40.27.144.0/24 maxlen: 24
40.27.146.0/23 maxlen: 24
40.27.148.0/22 maxlen: 24
40.27.152.0/22 maxlen: 24
40.27.156.0/23 maxlen: 24
40.27.159.0/24 maxlen: 24
40.27.164.0/22 maxlen: 24
40.27.170.0/23 maxlen: 24
40.27.172.0/23 maxlen: 24
40.27.175.0/24 maxlen: 24
40.27.176.0/21 maxlen: 24
40.27.188.0/24 maxlen: 24
40.27.191.0/24 maxlen: 24
40.27.192.0/22 maxlen: 24
40.27.209.0/24 maxlen: 24
40.27.210.0/23 maxlen: 24
40.27.212.0/22 maxlen: 24
40.27.216.0/24 maxlen: 24
40.27.218.0/23 maxlen: 24
40.27.220.0/22 maxlen: 24
40.27.224.0/23 maxlen: 24
40.27.227.0/24 maxlen: 24
40.27.228.0/24 maxlen: 24
40.183.92.0/23 maxlen: 24
40.183.94.0/24 maxlen: 24
40.183.96.0/23 maxlen: 24
40.183.98.0/24 maxlen: 24
40.183.101.0/24 maxlen: 24
40.183.102.0/23 maxlen: 24
40.183.104.0/21 maxlen: 24
40.183.112.0/22 maxlen: 24
40.183.118.0/23 maxlen: 24
40.183.120.0/23 maxlen: 24
40.183.122.0/24 maxlen: 24
40.183.124.0/22 maxlen: 24
40.183.136.0/22 maxlen: 24
40.183.140.0/23 maxlen: 24
40.183.144.0/22 maxlen: 24
40.183.148.0/23 maxlen: 24
40.183.151.0/24 maxlen: 24
40.183.152.0/24 maxlen: 24
40.183.154.0/23 maxlen: 24
40.183.156.0/23 maxlen: 24
40.183.158.0/24 maxlen: 24
40.183.193.0/24 maxlen: 24
40.183.194.0/23 maxlen: 24
40.183.196.0/23 maxlen: 24
40.183.199.0/24 maxlen: 24
40.183.204.0/24 maxlen: 24
40.183.206.0/23 maxlen: 24
40.183.208.0/21 maxlen: 24
40.183.226.0/23 maxlen: 24
40.183.228.0/23 maxlen: 24
40.183.232.0/22 maxlen: 24
40.183.236.0/24 maxlen: 24
40.183.238.0/23 maxlen: 24
40.183.245.0/24 maxlen: 24
40.183.246.0/23 maxlen: 24
40.183.252.0/24 maxlen: 24
40.223.9.0/24 maxlen: 24
40.223.12.0/23 maxlen: 24
40.223.18.0/23 maxlen: 24
40.223.20.0/24 maxlen: 24
40.223.22.0/23 maxlen: 24
40.223.81.0/24 maxlen: 24
40.223.82.0/23 maxlen: 24
40.223.84.0/22 maxlen: 24
40.223.122.0/24 maxlen: 24
40.223.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 13:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:31:ab:e4:ac:82:ed:37:3c:1e:03:7d:09:2c:40:1c:ce:ad:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 3 13:05:19 2026 GMT
Subject: CN=9A87407FA0369A1BBE3FD906A9F79EE2FAE082A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:cf:be:09:17:3b:54:cb:76:db:0b:fe:75:
39:25:1a:94:77:87:bd:6d:49:90:5a:25:4f:8f:14:
a3:70:c8:b8:4d:da:eb:59:7b:af:f4:86:d6:cb:f8:
5d:18:19:39:2d:05:77:b5:3f:8c:8d:05:ce:b4:be:
b4:dd:ca:df:d9:24:94:e1:b4:3a:bb:f8:1e:db:da:
59:27:b8:28:90:e0:38:22:57:ed:8a:39:b1:26:97:
7a:ab:e7:cb:ef:9d:82:cc:6e:88:05:23:45:25:bc:
88:ba:da:83:bf:19:39:42:d7:8e:e3:73:6d:ed:45:
0f:bd:1a:02:e0:de:71:13:e9:af:f6:c1:b6:e4:bf:
f3:f9:49:2b:9d:1e:36:27:32:23:71:09:1b:d5:02:
a0:21:32:35:24:17:dd:e3:3c:c8:07:77:56:b6:88:
24:e9:c0:17:1a:08:38:30:45:bc:fe:c8:78:5a:ff:
3b:e4:2d:41:68:03:7c:17:98:cb:87:be:c9:29:a0:
76:ef:db:8d:d0:8e:e2:f5:4a:2c:d1:b5:c6:b6:22:
47:1d:97:43:8d:6b:ce:5b:3e:7d:39:2b:fa:f3:87:
9b:5a:06:78:05:52:aa:1f:73:22:16:f1:c4:bc:a1:
26:53:4d:03:44:f8:52:6f:ca:a2:17:0f:b2:a3:16:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:40:7F:A0:36:9A:1B:BE:3F:D9:06:A9:F7:9E:E2:FA:E0:82:A4
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.1.0-40.27.3.255
40.27.13.0-40.27.15.255
40.27.18.0-40.27.20.255
40.27.22.0/23
40.27.26.0-40.27.31.255
40.27.40.0/21
40.27.51.0/24
40.27.64.0-40.27.75.255
40.27.80.0/21
40.27.89.0-40.27.92.255
40.27.94.0/23
40.27.104.0/23
40.27.107.0-40.27.108.255
40.27.110.0-40.27.127.255
40.27.130.0-40.27.132.255
40.27.135.0-40.27.136.255
40.27.138.0-40.27.144.255
40.27.146.0-40.27.157.255
40.27.159.0/24
40.27.164.0/22
40.27.170.0-40.27.173.255
40.27.175.0-40.27.183.255
40.27.188.0/24
40.27.191.0-40.27.195.255
40.27.209.0-40.27.216.255
40.27.218.0-40.27.225.255
40.27.227.0-40.27.228.255
40.183.92.0-40.183.94.255
40.183.96.0-40.183.98.255
40.183.101.0-40.183.115.255
40.183.118.0-40.183.122.255
40.183.124.0/22
40.183.136.0-40.183.141.255
40.183.144.0-40.183.149.255
40.183.151.0-40.183.152.255
40.183.154.0-40.183.158.255
40.183.193.0-40.183.197.255
40.183.199.0/24
40.183.204.0/24
40.183.206.0-40.183.215.255
40.183.226.0-40.183.229.255
40.183.232.0-40.183.236.255
40.183.238.0/23
40.183.245.0-40.183.247.255
40.183.252.0/24
40.223.9.0/24
40.223.12.0/23
40.223.18.0-40.223.20.255
40.223.22.0/23
40.223.81.0-40.223.87.255
40.223.122.0/24
40.223.242.0/23
Signature Algorithm: sha256WithRSAEncryption
18:35:c2:fd:15:2c:3b:30:3e:d8:f1:96:a8:08:fb:84:c6:75:
e8:e9:1b:ee:ff:8b:88:05:48:86:d1:8d:45:39:be:df:f0:14:
3f:c5:f7:09:e4:6b:8d:6d:b0:83:16:9d:e5:c4:ad:73:07:89:
e9:ad:ff:c2:21:a3:fb:9c:83:d6:24:1a:24:da:23:4b:45:2e:
7a:48:9a:cf:b8:f1:d7:df:e5:ab:cc:ad:f3:fc:92:52:9d:94:
b7:5c:39:00:13:1b:a7:77:0b:51:b9:54:dc:cc:05:b6:b8:c5:
7c:10:93:b7:17:98:3d:e6:1b:81:b2:0a:db:02:49:3e:51:d4:
24:58:4c:3d:1a:97:42:c9:fd:92:41:c0:15:ca:d0:fc:d6:df:
d9:9a:67:39:79:3c:33:18:65:5b:a0:58:f2:be:11:cf:36:de:
94:bf:15:3b:44:66:27:36:60:1e:28:37:fe:d7:bc:4b:16:af:
e8:49:73:67:43:cf:4f:5c:e4:0c:59:ad:d6:d4:d6:79:6d:c6:
bd:70:c8:d6:90:02:68:ac:0a:26:5b:28:8e:57:24:ce:11:2c:
e1:3a:52:59:8f:58:10:22:08:f0:5e:78:96:7e:87:99:4e:93:
8d:a2:35:dc:a2:71:6b:3b:c4:11:fc:9f:93:a9:25:d1:be:19:
68:60:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:43 2025 by rpki-client