Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS27535.roa
File:                     AS27535.roa (raw, json)
Hash identifier:          SR47D8foTlkWrnO/1iiPwmc88hG/YObFv98nkdaXq00=
Subject key identifier:   46:8F:38:F8:16:E0:12:F3:5B:E2:FA:6B:2B:49:98:23:DA:15:F9:D8
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0BC9BEE8A04CC0078AD4AB63123DD517A4695B49
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS27535.roa
Signing time:             Sun 27 Sep 2026 23:47:19 +0000
ROA not before:           Sun 27 Sep 2026 23:42:19 +0000
ROA not after:            Sun 26 Sep 2027 23:47:19 +0000
asID:                     27535
IP address blocks:        207.180.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c9:be:e8:a0:4c:c0:07:8a:d4:ab:63:12:3d:d5:17:a4:69:5b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Sep 27 23:42:19 2026 GMT
            Not After : Sep 26 23:47:19 2027 GMT
        Subject: CN=468F38F816E012F35BE2FA6B2B499823DA15F9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:bd:c7:29:c2:ef:70:2f:ad:1d:59:6b:3b:
                    84:a4:3d:43:43:89:12:29:0e:81:38:e3:72:d4:ee:
                    19:c1:15:b1:02:55:30:f6:bc:06:a4:e2:0c:61:50:
                    09:c0:09:62:43:cd:92:f9:e0:60:0d:92:b8:82:ff:
                    0c:fe:40:bc:bd:7d:cc:80:89:e6:3c:1c:ac:3f:46:
                    a5:23:02:97:3b:a9:7c:29:45:5c:c7:27:1b:f6:5a:
                    c2:cf:ab:40:73:68:25:62:fd:ed:5c:39:c3:03:aa:
                    98:26:66:c4:7d:68:9f:7b:d4:fe:4d:9a:e8:2e:95:
                    93:a7:05:00:96:63:54:89:55:82:9f:3b:76:09:d4:
                    e2:31:7f:90:54:da:46:c0:99:31:81:19:3d:da:86:
                    0a:6d:da:c2:9f:b6:4c:0f:bb:e8:1a:01:20:dc:2a:
                    f1:ee:40:c0:3b:ae:0c:7d:51:0c:39:a8:e7:21:25:
                    05:f0:dc:63:98:13:15:a9:37:76:31:b7:f6:44:05:
                    4a:f6:9b:82:20:3a:49:50:cf:b6:19:ba:03:75:8c:
                    72:5b:6c:f2:8d:49:1f:01:61:e6:21:e0:0a:4a:71:
                    8a:32:69:5b:be:77:fe:03:c7:bf:c4:52:41:bc:d5:
                    1f:69:ef:96:22:e4:61:76:0a:be:6c:31:bb:f7:7c:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:38:F8:16:E0:12:F3:5B:E2:FA:6B:2B:49:98:23:DA:15:F9:D8
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS27535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:d4:71:4a:bf:2d:f4:b4:42:77:fe:65:bd:34:a0:ad:5b:
         87:24:75:16:27:02:ab:6a:ef:de:ff:fa:cb:cc:5e:1e:28:f5:
         62:69:93:9b:df:a6:b2:e4:63:74:0e:7b:45:e6:30:f7:5a:60:
         7f:ab:21:f3:72:3e:f4:53:d5:11:b4:42:68:d5:ba:e9:b5:53:
         85:db:50:4b:b7:2e:35:29:41:dd:f5:26:69:3c:0a:59:b6:7d:
         54:f2:a6:12:6d:14:63:ce:b8:c1:e9:e9:51:87:15:51:81:27:
         d1:d8:b3:81:f8:73:25:be:54:65:23:03:3b:45:67:ad:6c:ef:
         f9:70:96:9d:d1:57:24:ac:64:17:84:c6:c6:5f:d7:a1:46:4a:
         82:08:40:81:fe:57:c2:c5:61:eb:66:59:58:01:19:55:aa:56:
         d8:82:60:ef:06:95:ac:ff:31:9c:4c:81:03:5c:76:44:1c:28:
         3c:36:a2:e8:5a:c3:50:7e:a1:df:74:77:5e:23:06:6e:67:e6:
         2e:a0:7f:92:7b:fc:22:35:13:d8:7b:41:04:bb:7e:f3:34:61:
         1c:4a:4f:d7:ac:50:4a:ac:99:66:1e:fa:5a:51:c9:32:04:8d:
         a7:20:fe:7a:a9:df:c5:c2:0c:14:8e:6d:b3:10:8d:c5:a5:46:
         64:b0:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:57:31 2026 by rpki-client