Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          vPeJC+RSweRKGZvBuMbzpKC0G3EnnKK/vm86GSHDatk=
Subject key identifier:   48:58:A9:CC:6F:69:1A:12:79:4D:97:30:27:07:5B:FC:88:1F:B0:96
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       09F2AEACEE6FC8093AA6CACA8CC74E9710B25FA3
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Fri 01 Aug 2025 14:51:27 +0000
ROA not before:           Fri 01 Aug 2025 14:46:27 +0000
ROA not after:            Fri 31 Jul 2026 14:51:27 +0000
asID:                     834
IP address blocks:        40.27.12.0/24 maxlen: 24
                          40.27.14.0/23 maxlen: 24
                          40.27.16.0/24 maxlen: 24
                          40.27.18.0/23 maxlen: 24
                          40.27.20.0/24 maxlen: 24
                          40.27.22.0/23 maxlen: 24
                          40.27.25.0/24 maxlen: 24
                          40.27.26.0/23 maxlen: 24
                          40.27.32.0/21 maxlen: 24
                          40.27.48.0/23 maxlen: 24
                          40.27.51.0/24 maxlen: 24
                          40.27.52.0/24 maxlen: 24
                          40.27.54.0/23 maxlen: 24
                          40.27.64.0/21 maxlen: 24
                          40.27.72.0/22 maxlen: 24
                          40.27.80.0/21 maxlen: 24
                          40.27.88.0/22 maxlen: 24
                          40.27.92.0/24 maxlen: 24
                          40.27.94.0/23 maxlen: 24
                          40.27.96.0/19 maxlen: 24
                          40.27.128.0/21 maxlen: 24
                          40.27.136.0/24 maxlen: 24
                          40.27.138.0/23 maxlen: 24
                          40.27.144.0/20 maxlen: 24
                          40.27.160.0/19 maxlen: 24
                          40.27.196.0/22 maxlen: 24
                          40.27.208.0/20 maxlen: 24
                          40.27.224.0/22 maxlen: 24
                          40.27.228.0/23 maxlen: 24
                          40.27.230.0/24 maxlen: 24
                          40.183.94.0/24 maxlen: 24
                          40.183.96.0/20 maxlen: 24
                          40.183.112.0/22 maxlen: 24
                          40.183.118.0/23 maxlen: 24
                          40.183.120.0/22 maxlen: 24
                          40.183.136.0/22 maxlen: 24
                          40.183.140.0/23 maxlen: 24
                          40.183.142.0/24 maxlen: 24
                          40.183.144.0/22 maxlen: 24
                          40.183.148.0/23 maxlen: 24
                          40.183.151.0/24 maxlen: 24
                          40.183.152.0/24 maxlen: 24
                          40.183.155.0/24 maxlen: 24
                          40.183.156.0/22 maxlen: 24
                          40.183.192.0/22 maxlen: 24
                          40.183.196.0/23 maxlen: 24
                          40.183.199.0/24 maxlen: 24
                          40.183.202.0/23 maxlen: 24
                          40.183.204.0/23 maxlen: 24
                          40.183.208.0/22 maxlen: 24
                          40.183.212.0/23 maxlen: 24
                          40.183.214.0/24 maxlen: 24
                          40.183.234.0/23 maxlen: 24
                          40.183.236.0/24 maxlen: 24
                          40.183.238.0/23 maxlen: 24
                          40.183.240.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.240.0/22 maxlen: 24
                          40.223.244.0/24 maxlen: 24
                          40.223.246.0/23 maxlen: 24
                          40.223.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 22:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f2:ae:ac:ee:6f:c8:09:3a:a6:ca:ca:8c:c7:4e:97:10:b2:5f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug  1 14:46:27 2025 GMT
            Not After : Jul 31 14:51:27 2026 GMT
        Subject: CN=4858A9CC6F691A12794D973027075BFC881FB096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:ff:6e:16:e1:b5:58:bd:0e:29:79:b2:40:
                    97:f4:0d:de:72:71:85:75:15:9f:aa:81:a4:73:1c:
                    ef:88:9d:b0:5a:7f:aa:e3:e2:39:fc:f3:fa:12:26:
                    ce:91:6e:9a:75:f4:5b:b6:a6:d4:1f:ca:0c:0b:f4:
                    34:36:00:d9:10:fb:bd:20:bc:78:b5:cf:3e:df:ae:
                    b7:4d:5c:62:44:79:7b:67:19:83:1a:50:ae:79:37:
                    57:96:9a:40:c5:af:6a:fc:2b:a7:b4:e6:12:02:a6:
                    bd:0c:19:2c:38:d4:f5:dc:ac:fd:08:45:b0:25:6e:
                    76:ef:f9:67:ec:e4:10:a2:fe:0d:54:1e:87:fe:88:
                    da:07:d3:b0:a3:d2:ae:82:76:dc:d1:97:82:e2:a9:
                    3e:f0:78:82:07:30:01:ec:ce:ee:0e:77:64:12:a5:
                    78:76:c9:b3:e0:da:eb:b7:b6:80:73:c5:59:24:81:
                    c8:4c:68:ce:5c:f5:42:93:57:34:39:e3:a8:eb:50:
                    e1:cc:3b:10:bb:3b:bc:11:d0:d0:df:b4:d8:f2:84:
                    d7:b6:32:0e:cd:59:47:db:09:bd:bf:82:5d:09:ae:
                    3d:5a:15:14:70:18:c7:97:6a:df:b0:f8:61:53:b3:
                    58:80:bd:7f:eb:fd:ff:2b:0a:99:39:c8:5e:9e:a0:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:58:A9:CC:6F:69:1A:12:79:4D:97:30:27:07:5B:FC:88:1F:B0:96
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.12.0/24
                  40.27.14.0-40.27.16.255
                  40.27.18.0-40.27.20.255
                  40.27.22.0/23
                  40.27.25.0-40.27.27.255
                  40.27.32.0/21
                  40.27.48.0/23
                  40.27.51.0-40.27.52.255
                  40.27.54.0/23
                  40.27.64.0-40.27.75.255
                  40.27.80.0-40.27.92.255
                  40.27.94.0-40.27.136.255
                  40.27.138.0/23
                  40.27.144.0-40.27.191.255
                  40.27.196.0/22
                  40.27.208.0-40.27.230.255
                  40.183.94.0/24
                  40.183.96.0-40.183.115.255
                  40.183.118.0-40.183.123.255
                  40.183.136.0-40.183.142.255
                  40.183.144.0-40.183.149.255
                  40.183.151.0-40.183.152.255
                  40.183.155.0-40.183.159.255
                  40.183.192.0-40.183.197.255
                  40.183.199.0/24
                  40.183.202.0-40.183.205.255
                  40.183.208.0-40.183.214.255
                  40.183.234.0-40.183.236.255
                  40.183.238.0-40.183.240.255
                  40.223.9.0/24
                  40.223.240.0-40.223.244.255
                  40.223.246.0/23
                  40.223.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b3:fa:f1:5a:0e:1a:a3:cb:f4:5e:f2:4d:e0:60:df:b5:29:
         bc:53:f9:2d:90:34:9b:b5:38:93:b2:54:92:2a:ad:29:c3:dc:
         2e:80:3b:11:57:1f:1f:af:90:64:65:7f:3b:35:1c:0f:88:55:
         03:5b:51:72:e1:c7:d5:08:17:88:70:f7:5f:a4:ca:4e:84:97:
         b4:09:f6:fc:43:e5:4a:00:9e:76:0f:b4:ad:11:80:fa:9a:89:
         62:df:12:8b:1b:d8:d8:99:03:65:1f:78:2a:2e:e9:d0:67:e7:
         3c:57:73:4f:25:c5:1a:d5:5d:5f:b7:28:f8:ea:9d:65:3b:3e:
         cc:2e:08:c5:e6:5f:25:3d:21:4d:e1:3d:4b:58:3f:3b:26:18:
         73:a6:3d:b2:af:af:b8:03:67:43:b5:62:1f:32:18:db:fd:d7:
         22:88:80:6b:ef:cc:82:fa:11:6f:a4:3a:a6:ce:f6:ac:59:18:
         4f:7c:b2:b6:19:b9:51:6b:df:bf:42:4c:85:b2:b8:7f:e6:72:
         99:20:24:30:96:13:9c:f6:a9:22:c5:ef:a2:22:16:57:35:71:
         92:06:93:5d:e6:f0:16:4b:b6:ba:ff:ed:a9:cb:63:87:9b:17:
         e1:27:47:cf:02:12:10:31:8d:17:48:59:53:44:0f:06:ca:3a:
         5d:78:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:17 2025 by rpki-client