Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          mryZ3o/PI6j19JaoVkTbMQP6fUuT+YxE/KKIKLq8XXY=
Subject key identifier:   57:F0:67:EB:AD:E2:65:3E:A8:D8:74:0F:9A:54:C5:1D:75:1A:FD:71
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5B83539FF0000397D745BD245ABF969A3A7EC728
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa
Signing time:             Tue 09 Jun 2026 18:43:55 +0000
ROA not before:           Tue 09 Jun 2026 18:38:55 +0000
ROA not after:            Tue 08 Jun 2027 18:43:55 +0000
asID:                     834
IP address blocks:        40.27.1.0/24 maxlen: 24
                          40.27.5.0/24 maxlen: 24
                          40.27.22.0/23 maxlen: 24
                          40.27.57.0/24 maxlen: 24
                          40.27.104.0/24 maxlen: 24
                          40.27.107.0/24 maxlen: 24
                          40.27.113.0/24 maxlen: 24
                          40.27.114.0/24 maxlen: 24
                          40.27.125.0/24 maxlen: 24
                          40.27.127.0/24 maxlen: 24
                          40.27.134.0/24 maxlen: 24
                          40.27.174.0/23 maxlen: 24
                          40.27.216.0/24 maxlen: 24
                          40.27.218.0/23 maxlen: 24
                          40.27.228.0/24 maxlen: 24
                          40.183.88.0/21 maxlen: 24
                          40.183.97.0/24 maxlen: 24
                          40.183.98.0/23 maxlen: 24
                          40.183.102.0/23 maxlen: 24
                          40.183.104.0/22 maxlen: 24
                          40.183.108.0/23 maxlen: 24
                          40.183.110.0/24 maxlen: 24
                          40.183.112.0/20 maxlen: 24
                          40.183.136.0/21 maxlen: 24
                          40.183.144.0/20 maxlen: 24
                          40.183.160.0/19 maxlen: 24
                          40.183.192.0/21 maxlen: 24
                          40.183.200.0/23 maxlen: 24
                          40.183.204.0/22 maxlen: 24
                          40.183.208.0/21 maxlen: 24
                          40.183.224.0/23 maxlen: 24
                          40.183.226.0/24 maxlen: 24
                          40.183.228.0/22 maxlen: 24
                          40.183.232.0/21 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/23 maxlen: 24
                          40.183.244.0/22 maxlen: 24
                          40.183.252.0/23 maxlen: 24
                          40.183.254.0/24 maxlen: 24
                          40.223.5.0/24 maxlen: 24
                          40.223.7.0/24 maxlen: 24
                          40.223.9.0/24 maxlen: 24
                          40.223.12.0/24 maxlen: 24
                          40.223.16.0/21 maxlen: 24
                          40.223.80.0/22 maxlen: 24
                          40.223.84.0/24 maxlen: 24
                          40.223.86.0/23 maxlen: 24
                          40.223.122.0/24 maxlen: 24
                          40.223.157.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.184.0/21 maxlen: 24
                          40.223.192.0/23 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:83:53:9f:f0:00:03:97:d7:45:bd:24:5a:bf:96:9a:3a:7e:c7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun  9 18:38:55 2026 GMT
            Not After : Jun  8 18:43:55 2027 GMT
        Subject: CN=57F067EBADE2653EA8D8740F9A54C51D751AFD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:21:1b:a5:82:9c:36:19:e2:85:2c:59:f7:
                    d2:56:d3:fd:de:31:df:70:e9:68:72:26:6b:32:64:
                    3e:6c:22:20:1a:77:82:d9:7b:50:ed:35:65:4d:78:
                    37:a6:a2:26:31:7c:74:63:b7:e9:15:7e:19:ad:ce:
                    ff:fe:19:a9:0c:a0:ed:5e:f0:3b:37:dc:00:75:20:
                    7c:28:ba:c3:76:61:96:32:10:06:cd:90:b8:8c:91:
                    b2:d7:07:32:33:fd:6e:5c:69:22:97:d0:bd:8b:9f:
                    23:49:5d:94:89:6b:e3:c3:4d:4b:e2:47:d9:f8:64:
                    9b:3a:85:b3:1c:4c:28:50:e3:c3:b6:2f:1f:4a:1b:
                    de:c5:e6:28:bd:ee:5d:6a:08:53:63:a1:0c:e9:c8:
                    1e:82:97:3f:3e:2e:68:d6:fc:4a:fc:73:37:15:17:
                    40:8e:41:25:a2:40:d7:02:bc:d7:92:17:71:de:cc:
                    18:6a:32:71:cc:cc:23:0e:d8:94:d5:8d:69:17:7d:
                    bf:2c:2f:a4:db:7d:2b:af:67:3b:1a:58:ea:e9:d5:
                    bd:c2:a3:81:60:22:11:2b:2c:32:24:aa:d9:26:e8:
                    34:9b:a2:c5:34:03:ca:48:3e:eb:25:26:9d:6c:62:
                    be:15:59:77:fb:f8:48:3b:fd:b4:d3:64:dc:78:01:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F0:67:EB:AD:E2:65:3E:A8:D8:74:0F:9A:54:C5:1D:75:1A:FD:71
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.1.0/24
                  40.27.5.0/24
                  40.27.22.0/23
                  40.27.57.0/24
                  40.27.104.0/24
                  40.27.107.0/24
                  40.27.113.0-40.27.114.255
                  40.27.125.0/24
                  40.27.127.0/24
                  40.27.134.0/24
                  40.27.174.0/23
                  40.27.216.0/24
                  40.27.218.0/23
                  40.27.228.0/24
                  40.183.88.0/21
                  40.183.97.0-40.183.99.255
                  40.183.102.0-40.183.110.255
                  40.183.112.0/20
                  40.183.136.0-40.183.201.255
                  40.183.204.0-40.183.215.255
                  40.183.224.0-40.183.226.255
                  40.183.228.0-40.183.239.255
                  40.183.241.0-40.183.247.255
                  40.183.252.0-40.183.254.255
                  40.223.5.0/24
                  40.223.7.0/24
                  40.223.9.0/24
                  40.223.12.0/24
                  40.223.16.0/21
                  40.223.80.0-40.223.84.255
                  40.223.86.0/23
                  40.223.122.0/24
                  40.223.157.0/24
                  40.223.183.0-40.223.194.255
                  40.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:3f:71:85:3c:f4:03:09:f4:ce:ef:1b:51:87:12:10:34:f6:
         91:57:59:25:48:eb:53:e3:7e:8d:31:55:7e:14:99:8f:07:43:
         a5:5f:d4:49:11:11:cb:79:70:4d:bf:d9:6e:20:a7:b4:40:02:
         26:52:b1:80:e3:1e:be:29:20:35:5a:13:b9:bd:fd:a6:0b:8f:
         dd:41:70:7b:cf:2a:5b:16:04:27:7b:e1:26:a2:bc:f7:65:f6:
         20:b0:01:85:9e:25:c4:3e:a8:42:29:f1:1d:35:b8:1c:ac:30:
         19:e3:50:04:14:20:73:de:fe:62:d3:fa:47:a4:0d:a2:14:48:
         8a:ee:9b:bd:9b:0d:c9:b4:10:e3:db:ab:f8:2f:6a:1d:30:04:
         72:48:5b:bc:51:db:77:52:cd:f2:dd:e8:73:62:97:a2:cb:a7:
         4c:ae:3a:0b:5a:4a:f0:6b:2c:9b:11:b0:40:fb:70:70:e7:23:
         0d:1b:52:64:49:34:4a:ff:f5:52:91:6d:81:d3:37:e3:1e:eb:
         94:9c:90:1b:aa:f5:3d:dd:4f:09:4e:e5:a7:5b:2c:1d:d5:68:
         6c:d8:ef:00:54:77:bc:49:81:3f:19:6e:f0:5b:94:8c:81:12:
         88:7c:b6:d9:37:79:8f:ce:43:be:e8:22:de:a2:6d:c1:dd:36:
         e5:31:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:39:25 2026 by rpki-client