Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          QlX49fKoHonyQ3cusvIDDZEaHAWRW5L8VnUjvVIZJGY=
Subject key identifier:   4C:F6:4B:86:81:A3:39:D9:9E:A4:59:00:45:8E:06:4F:68:B4:24:3A
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       205CE067EB38140DF3A6A2C1660A5282EEEF0D27
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Thu 05 Nov 2026 12:06:33 +0000
ROA not before:           Thu 05 Nov 2026 12:01:33 +0000
ROA not after:            Thu 04 Nov 2027 12:06:33 +0000
asID:                     834
IP address blocks:        40.27.1.0/24 maxlen: 24
                          40.27.5.0/24 maxlen: 24
                          40.27.23.0/24 maxlen: 24
                          40.27.51.0/24 maxlen: 24
                          40.27.56.0/24 maxlen: 24
                          40.27.58.0/23 maxlen: 24
                          40.27.64.0/22 maxlen: 24
                          40.27.68.0/23 maxlen: 24
                          40.27.73.0/24 maxlen: 24
                          40.27.74.0/23 maxlen: 24
                          40.27.84.0/22 maxlen: 24
                          40.27.104.0/23 maxlen: 24
                          40.27.107.0/24 maxlen: 24
                          40.27.112.0/23 maxlen: 24
                          40.27.115.0/24 maxlen: 24
                          40.27.124.0/23 maxlen: 24
                          40.27.126.0/24 maxlen: 24
                          40.27.128.0/23 maxlen: 24
                          40.27.132.0/24 maxlen: 24
                          40.27.156.0/23 maxlen: 24
                          40.27.158.0/24 maxlen: 24
                          40.27.164.0/22 maxlen: 24
                          40.27.169.0/24 maxlen: 24
                          40.27.192.0/22 maxlen: 24
                          40.27.208.0/21 maxlen: 24
                          40.27.225.0/24 maxlen: 24
                          40.27.226.0/23 maxlen: 24
                          40.27.248.0/21 maxlen: 24
                          40.183.88.0/21 maxlen: 24
                          40.183.96.0/22 maxlen: 24
                          40.183.101.0/24 maxlen: 24
                          40.183.102.0/23 maxlen: 24
                          40.183.104.0/22 maxlen: 24
                          40.183.108.0/23 maxlen: 24
                          40.183.110.0/24 maxlen: 24
                          40.183.112.0/20 maxlen: 24
                          40.183.136.0/21 maxlen: 24
                          40.183.144.0/20 maxlen: 24
                          40.183.160.0/19 maxlen: 24
                          40.183.192.0/21 maxlen: 24
                          40.183.200.0/23 maxlen: 24
                          40.183.204.0/22 maxlen: 24
                          40.183.208.0/21 maxlen: 24
                          40.183.224.0/23 maxlen: 24
                          40.183.226.0/24 maxlen: 24
                          40.183.228.0/22 maxlen: 24
                          40.183.232.0/21 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/23 maxlen: 24
                          40.183.244.0/22 maxlen: 24
                          40.183.252.0/22 maxlen: 24
                          40.223.5.0/24 maxlen: 24
                          40.223.7.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.13.0/24 maxlen: 24
                          40.223.16.0/23 maxlen: 24
                          40.223.19.0/24 maxlen: 24
                          40.223.20.0/23 maxlen: 24
                          40.223.22.0/24 maxlen: 24
                          40.223.80.0/22 maxlen: 24
                          40.223.84.0/24 maxlen: 24
                          40.223.86.0/23 maxlen: 24
                          40.223.122.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.184.0/21 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/24 maxlen: 24
                          40.223.242.0/23 maxlen: 24
                          40.223.244.0/22 maxlen: 24
                          40.223.250.0/23 maxlen: 24
                          40.223.253.0/24 maxlen: 24
                          40.223.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 13:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5c:e0:67:eb:38:14:0d:f3:a6:a2:c1:66:0a:52:82:ee:ef:0d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov  5 12:01:33 2026 GMT
            Not After : Nov  4 12:06:33 2027 GMT
        Subject: CN=4CF64B8681A339D99EA45900458E064F68B4243A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:d1:38:89:64:7a:da:7c:1d:4b:f8:31:7c:
                    5f:51:9d:18:00:58:c7:89:37:48:e3:fd:c8:15:57:
                    1f:9f:48:4a:66:d2:19:dc:13:f8:94:75:36:3e:18:
                    e9:ba:0a:61:0f:c3:42:08:36:78:73:19:bd:dc:0f:
                    2e:84:77:f7:a0:a6:e3:a1:bb:48:d7:4d:8d:b2:19:
                    eb:15:9e:93:ac:da:6d:dd:9a:43:ae:65:68:51:0a:
                    61:fd:a1:93:68:99:10:1d:92:14:76:54:bd:61:b2:
                    0e:42:33:f0:71:46:32:71:1b:a0:e7:80:0b:e7:18:
                    3b:09:29:20:01:7b:b7:19:7f:94:cb:58:be:3c:ef:
                    38:6f:82:3f:40:a9:58:47:ea:c7:23:d2:dc:55:07:
                    1e:e1:ff:c5:2a:28:eb:ad:0a:45:21:f5:77:63:ea:
                    5d:29:bf:6f:51:ba:ad:df:e8:5d:92:a3:94:f8:19:
                    f8:10:5a:c3:2e:38:87:61:fa:a0:90:ce:55:03:f8:
                    e1:a7:13:fe:73:f4:97:75:19:92:73:7e:3c:13:41:
                    af:58:07:d7:c9:65:2b:33:85:b7:c6:d6:c5:9a:da:
                    e5:9d:5d:fb:af:2b:76:c2:44:64:c6:b0:ca:71:72:
                    b7:03:66:e1:8f:e6:51:d9:a0:78:6d:43:6e:77:97:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F6:4B:86:81:A3:39:D9:9E:A4:59:00:45:8E:06:4F:68:B4:24:3A
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.1.0/24
                  40.27.5.0/24
                  40.27.23.0/24
                  40.27.51.0/24
                  40.27.56.0/24
                  40.27.58.0/23
                  40.27.64.0-40.27.69.255
                  40.27.73.0-40.27.75.255
                  40.27.84.0/22
                  40.27.104.0/23
                  40.27.107.0/24
                  40.27.112.0/23
                  40.27.115.0/24
                  40.27.124.0-40.27.126.255
                  40.27.128.0/23
                  40.27.132.0/24
                  40.27.156.0-40.27.158.255
                  40.27.164.0/22
                  40.27.169.0/24
                  40.27.192.0/22
                  40.27.208.0/21
                  40.27.225.0-40.27.227.255
                  40.27.248.0/21
                  40.183.88.0-40.183.99.255
                  40.183.101.0-40.183.110.255
                  40.183.112.0/20
                  40.183.136.0-40.183.201.255
                  40.183.204.0-40.183.215.255
                  40.183.224.0-40.183.226.255
                  40.183.228.0-40.183.239.255
                  40.183.241.0-40.183.247.255
                  40.183.252.0/22
                  40.223.5.0/24
                  40.223.7.0/24
                  40.223.9.0/24
                  40.223.13.0/24
                  40.223.16.0/23
                  40.223.19.0-40.223.22.255
                  40.223.80.0-40.223.84.255
                  40.223.86.0/23
                  40.223.122.0/24
                  40.223.183.0-40.223.191.255
                  40.223.194.0/24
                  40.223.240.0/24
                  40.223.242.0-40.223.247.255
                  40.223.250.0/23
                  40.223.253.0-40.223.255.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:fb:a8:77:ca:b0:a7:b7:7c:7b:ab:e8:e1:bf:ab:4e:33:93:
         44:3e:83:08:61:9c:dc:2e:33:3a:e5:92:83:11:54:2a:7b:72:
         95:fe:0e:3d:50:53:30:47:33:12:74:cd:aa:33:c7:f7:9d:79:
         a5:dd:78:ef:0d:73:4c:94:08:22:4a:1f:64:9f:b4:dd:d4:bb:
         a2:fa:dd:dc:11:21:de:78:9d:c3:05:35:57:88:5f:87:e4:c6:
         a3:08:bf:61:72:9d:62:b6:02:97:15:7b:f9:39:c9:74:82:43:
         a5:0b:e1:1e:78:99:ef:9a:f2:64:b5:47:d0:f3:52:dd:9e:1a:
         07:17:f0:50:e4:1b:aa:8e:3f:b6:47:b8:4a:aa:44:35:be:4d:
         af:b0:23:43:81:35:34:10:70:e1:b5:64:56:fc:8d:a1:1b:00:
         47:b1:b6:cc:3d:9c:45:0f:34:20:06:d8:e9:3e:61:8d:64:b2:
         80:40:d0:13:3d:bf:b4:9b:fc:13:7a:a0:fb:5c:b1:de:df:94:
         21:35:f3:99:ca:3b:9c:00:12:d4:6c:1c:7d:87:7a:20:97:d7:
         cf:5e:18:2b:58:64:cc:2f:bc:5c:e5:36:96:70:2f:ed:14:6b:
         f1:4d:c7:df:6b:55:2e:e8:6a:3e:e5:79:7f:bd:3f:ea:74:1d:
         29:f3:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:19:10 2026 by rpki-client