Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          1qBgMwL7B2rIKqFsdazDzwnB+HacnoMsT7gv+U0F3yU=
Subject key identifier:   A0:FB:D4:D4:44:F6:4F:14:A4:10:D3:1E:C3:8B:B3:8C:32:0B:DD:1A
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       22E5983E842BF181BBFF09FA0C0D9D11B963ECC7
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Sun 01 Mar 2026 17:28:48 +0000
ROA not before:           Sun 01 Mar 2026 17:23:48 +0000
ROA not after:            Sun 28 Feb 2027 17:28:48 +0000
asID:                     834
IP address blocks:        40.27.2.0/23 maxlen: 24
                          40.27.4.0/22 maxlen: 24
                          40.27.13.0/24 maxlen: 24
                          40.27.16.0/24 maxlen: 24
                          40.27.21.0/24 maxlen: 24
                          40.27.24.0/23 maxlen: 24
                          40.27.27.0/24 maxlen: 24
                          40.27.29.0/24 maxlen: 24
                          40.27.30.0/23 maxlen: 24
                          40.27.32.0/22 maxlen: 24
                          40.27.46.0/23 maxlen: 24
                          40.27.51.0/24 maxlen: 24
                          40.27.55.0/24 maxlen: 24
                          40.27.56.0/24 maxlen: 24
                          40.27.58.0/24 maxlen: 24
                          40.27.60.0/22 maxlen: 24
                          40.27.64.0/21 maxlen: 24
                          40.27.73.0/24 maxlen: 24
                          40.27.74.0/23 maxlen: 24
                          40.27.76.0/22 maxlen: 24
                          40.27.80.0/21 maxlen: 24
                          40.27.88.0/23 maxlen: 24
                          40.27.91.0/24 maxlen: 24
                          40.27.93.0/24 maxlen: 24
                          40.27.94.0/23 maxlen: 24
                          40.27.105.0/24 maxlen: 24
                          40.27.107.0/24 maxlen: 24
                          40.27.108.0/22 maxlen: 24
                          40.27.112.0/23 maxlen: 24
                          40.27.114.0/24 maxlen: 24
                          40.27.116.0/22 maxlen: 24
                          40.27.124.0/22 maxlen: 24
                          40.27.128.0/23 maxlen: 24
                          40.27.130.0/24 maxlen: 24
                          40.27.132.0/24 maxlen: 24
                          40.27.134.0/23 maxlen: 24
                          40.27.144.0/22 maxlen: 24
                          40.27.156.0/24 maxlen: 24
                          40.27.158.0/23 maxlen: 24
                          40.27.174.0/23 maxlen: 24
                          40.27.192.0/24 maxlen: 24
                          40.27.194.0/23 maxlen: 24
                          40.27.208.0/21 maxlen: 24
                          40.27.216.0/24 maxlen: 24
                          40.27.218.0/23 maxlen: 24
                          40.27.224.0/22 maxlen: 24
                          40.27.228.0/24 maxlen: 24
                          40.27.230.0/23 maxlen: 24
                          40.27.248.0/21 maxlen: 24
                          40.183.88.0/22 maxlen: 24
                          40.183.93.0/24 maxlen: 24
                          40.183.95.0/24 maxlen: 24
                          40.183.96.0/22 maxlen: 24
                          40.183.101.0/24 maxlen: 24
                          40.183.102.0/23 maxlen: 24
                          40.183.104.0/21 maxlen: 24
                          40.183.112.0/22 maxlen: 24
                          40.183.118.0/23 maxlen: 24
                          40.183.120.0/24 maxlen: 24
                          40.183.122.0/23 maxlen: 24
                          40.183.124.0/24 maxlen: 24
                          40.183.126.0/23 maxlen: 24
                          40.183.136.0/21 maxlen: 24
                          40.183.144.0/20 maxlen: 24
                          40.183.192.0/21 maxlen: 24
                          40.183.200.0/23 maxlen: 24
                          40.183.204.0/22 maxlen: 24
                          40.183.208.0/22 maxlen: 24
                          40.183.214.0/23 maxlen: 24
                          40.183.224.0/20 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/23 maxlen: 24
                          40.183.244.0/22 maxlen: 24
                          40.183.252.0/23 maxlen: 24
                          40.223.5.0/24 maxlen: 24
                          40.223.7.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.14.0/24 maxlen: 24
                          40.223.16.0/23 maxlen: 24
                          40.223.18.0/24 maxlen: 24
                          40.223.20.0/22 maxlen: 24
                          40.223.80.0/22 maxlen: 24
                          40.223.84.0/23 maxlen: 24
                          40.223.86.0/24 maxlen: 24
                          40.223.122.0/24 maxlen: 24
                          40.223.157.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.185.0/24 maxlen: 24
                          40.223.188.0/22 maxlen: 24
                          40.223.192.0/23 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/21 maxlen: 24
                          40.223.248.0/22 maxlen: 24
                          40.223.252.0/23 maxlen: 24
                          40.223.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e5:98:3e:84:2b:f1:81:bb:ff:09:fa:0c:0d:9d:11:b9:63:ec:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar  1 17:23:48 2026 GMT
            Not After : Feb 28 17:28:48 2027 GMT
        Subject: CN=A0FBD4D444F64F14A410D31EC38BB38C320BDD1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e2:b0:99:5f:75:ea:ba:34:21:58:12:0c:b8:
                    29:22:02:29:a4:0d:aa:65:f1:05:62:e1:83:c0:17:
                    ff:b4:25:7c:11:0a:b7:f6:16:6e:2c:59:2c:26:82:
                    40:01:b3:f1:30:f4:62:1d:68:1d:2f:f6:ad:86:66:
                    09:b3:2a:e2:67:17:3e:59:b8:37:9f:02:1a:47:9d:
                    53:ab:d6:fb:da:31:73:8b:29:a7:76:d3:31:f5:33:
                    f5:bb:ae:89:d9:0e:f8:e6:f1:b1:f6:6b:b5:24:23:
                    cf:28:15:3c:e8:30:7f:fa:d3:9f:d0:07:45:7f:60:
                    b8:88:ef:13:81:f9:8e:cf:7e:06:4b:d3:40:91:a4:
                    df:49:35:b0:48:f6:28:92:68:1d:c7:61:b7:09:89:
                    0c:58:b7:60:d5:d1:d2:d2:4d:58:28:87:de:ab:aa:
                    8c:38:a1:48:84:43:df:db:00:4a:31:71:29:d7:9b:
                    de:d7:f4:b3:31:63:af:0a:ba:2a:ce:a2:a6:dc:29:
                    81:55:ce:e3:6a:df:b0:dc:f6:69:3e:d3:02:ce:43:
                    fe:9f:a6:e0:82:3e:70:db:db:d3:2d:4a:18:51:ec:
                    73:01:1c:2f:e7:55:ee:74:e4:79:e9:00:80:66:dd:
                    0f:a1:64:5d:61:ab:37:1d:dc:d8:a3:bc:75:6c:a4:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:D4:D4:44:F6:4F:14:A4:10:D3:1E:C3:8B:B3:8C:32:0B:DD:1A
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.2.0-40.27.7.255
                  40.27.13.0/24
                  40.27.16.0/24
                  40.27.21.0/24
                  40.27.24.0/23
                  40.27.27.0/24
                  40.27.29.0-40.27.35.255
                  40.27.46.0/23
                  40.27.51.0/24
                  40.27.55.0-40.27.56.255
                  40.27.58.0/24
                  40.27.60.0-40.27.71.255
                  40.27.73.0-40.27.89.255
                  40.27.91.0/24
                  40.27.93.0-40.27.95.255
                  40.27.105.0/24
                  40.27.107.0-40.27.114.255
                  40.27.116.0/22
                  40.27.124.0-40.27.130.255
                  40.27.132.0/24
                  40.27.134.0/23
                  40.27.144.0/22
                  40.27.156.0/24
                  40.27.158.0/23
                  40.27.174.0/23
                  40.27.192.0/24
                  40.27.194.0/23
                  40.27.208.0-40.27.216.255
                  40.27.218.0/23
                  40.27.224.0-40.27.228.255
                  40.27.230.0/23
                  40.27.248.0/21
                  40.183.88.0/22
                  40.183.93.0/24
                  40.183.95.0-40.183.99.255
                  40.183.101.0-40.183.115.255
                  40.183.118.0-40.183.120.255
                  40.183.122.0-40.183.124.255
                  40.183.126.0/23
                  40.183.136.0-40.183.159.255
                  40.183.192.0-40.183.201.255
                  40.183.204.0-40.183.211.255
                  40.183.214.0/23
                  40.183.224.0/20
                  40.183.241.0-40.183.247.255
                  40.183.252.0/23
                  40.223.5.0/24
                  40.223.7.0/24
                  40.223.9.0/24
                  40.223.14.0/24
                  40.223.16.0-40.223.18.255
                  40.223.20.0/22
                  40.223.80.0-40.223.86.255
                  40.223.122.0/24
                  40.223.157.0/24
                  40.223.183.0/24
                  40.223.185.0/24
                  40.223.188.0-40.223.194.255
                  40.223.240.0-40.223.253.255
                  40.223.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:5d:98:b1:98:c2:03:07:70:11:ce:a2:cb:5d:96:81:5d:
         88:11:93:43:a7:8a:14:ea:e7:08:5c:45:e4:08:e8:62:1f:ee:
         10:cd:69:79:1d:e7:29:41:44:d7:be:34:22:de:2f:03:c3:03:
         8e:ee:f9:c7:3e:8b:de:09:18:25:9c:33:b8:57:ad:68:e6:71:
         a3:fe:b2:f1:6a:8e:67:3a:01:b0:0f:fc:a8:b4:d3:d4:45:28:
         12:e2:3a:07:95:3d:ce:14:03:d0:7c:83:35:b8:9a:7c:c0:ca:
         9d:25:bd:32:e2:a4:7b:7f:62:fd:cb:fe:53:bc:4f:98:aa:28:
         c7:07:ff:d3:94:23:2b:34:4a:07:b5:31:3f:66:ae:fe:ba:da:
         90:a8:18:ec:9d:cf:17:cb:1c:ad:68:63:2f:e1:68:15:ad:5c:
         b3:86:69:ee:49:bd:25:ca:f1:95:01:a7:89:a9:8f:e2:6a:76:
         82:d9:fc:c2:cb:9a:26:86:71:e1:da:2c:b4:f2:e6:47:36:57:
         49:2f:e5:37:e0:1e:8f:f1:1a:16:5e:6c:72:0d:ef:86:bb:06:
         5a:38:10:84:70:89:15:92:b3:d6:20:ef:13:be:f2:11:5e:93:
         97:87:6d:4d:08:39:48:3c:bb:a4:fb:0d:f1:fa:5a:6d:cc:0c:
         aa:b8:02:95
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUIuWYPoQr8YG7/wn6DA2dEblj7McwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzAxMTcyMzQ4WhcNMjcwMjI4MTcyODQ4
WjAzMTEwLwYDVQQDEyhBMEZCRDRENDQ0RjY0RjE0QTQxMEQzMUVDMzhCQjM4QzMy
MEJERDFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eKwmV916ro0
IVgSDLgpIgIppA2qZfEFYuGDwBf/tCV8EQq39hZuLFksJoJAAbPxMPRiHWgdL/at
hmYJsyriZxc+Wbg3nwIaR51Tq9b72jFziymndtMx9TP1u66J2Q745vGx9mu1JCPP
KBU86DB/+tOf0AdFf2C4iO8TgfmOz34GS9NAkaTfSTWwSPYokmgdx2G3CYkMWLdg
1dHS0k1YKIfeq6qMOKFIhEPf2wBKMXEp15ve1/SzMWOvCroqzqKm3CmBVc7jat+w
3PZpPtMCzkP+n6bggj5w29vTLUoYUexzARwv51XudOR56QCAZt0PoWRdYas3HdzY
o7x1bKTkXQIDAQABo4IEmDCCBJQwHQYDVR0OBBYEFKD71NRE9k8UpBDTHsOLs4wy
C90aMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAjkG
CCsGAQUFBwEHAQH/BIICKDCCAiQwggIgBAIAATCCAhgwDAMEASgbAgMEAygbAAME
ACgbDQMEACgbEAMEACgbFQMEASgbGAMEACgbGzAMAwQAKBsdAwQCKBsgAwQBKBsu
AwQAKBszMAwDBAAoGzcDBAAoGzgDBAAoGzowDAMEAigbPAMEAygbQDAMAwQAKBtJ
AwQBKBtYAwQAKBtbMAwDBAAoG10DBAUoG0ADBAAoG2kwDAMEACgbawMEACgbcgME
AigbdDAMAwQCKBt8AwQAKBuCAwQAKBuEAwQBKBuGAwQCKBuQAwQAKBucAwQBKBue
AwQBKBuuAwQAKBvAAwQBKBvCMAwDBAQoG9ADBAAoG9gDBAEoG9owDAMEBSgb4AME
ACgb5AMEASgb5gMEAygb+AMEAii3WAMEACi3XTAMAwQAKLdfAwQCKLdgMAwDBAAo
t2UDBAIot3AwDAMEASi3dgMEACi3eDAMAwQBKLd6AwQAKLd8AwQBKLd+MAwDBAMo
t4gDBAUot4AwDAMEBii3wAMEASi3yDAMAwQCKLfMAwQCKLfQAwQBKLfWAwQEKLfg
MAwDBAAot/EDBAMot/ADBAEot/wDBAAo3wUDBAAo3wcDBAAo3wkDBAAo3w4wDAME
BCjfEAMEACjfEgMEAijfFDAMAwQEKN9QAwQAKN9WAwQAKN96AwQAKN+dAwQAKN+3
AwQAKN+5MAwDBAIo37wDBAAo38IwDAMEBCjf8AMEASjf/AMEACjf/zANBgkqhkiG
9w0BAQsFAAOCAQEAPEBdmLGYwgMHcBHOostdloFdiBGTQ6eKFOrnCFxF5AjoYh/u
EM1peR3nKUFE1740It4vA8MDju75xz6L3gkYJZwzuFetaOZxo/6y8WqOZzoBsA/8
qLTT1EUoEuI6B5U9zhQD0HyDNbiafMDKnSW9MuKke39i/cv+U7xPmKooxwf/05Qj
KzRKB7UxP2au/rrakKgY7J3PF8scrWhjL+FoFa1cs4Zp7km9JcrxlQGniamP4mp2
gtn8wsuaJoZx4dostPLmRzZXSS/lN+Aej/EaFl5scg3vhrsGWjgQhHCJFZKz1iDv
E77yEV6Tl4dtTQg5SDy7pPsN8fpabcwMqrgClQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:10 2026 by rpki-client