Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa
File:                     AS27267.roa (raw, json)
Hash identifier:          7+S7sXDwqtsNOAz7zUPMunqxj3eJClF7guH35tqa3aI=
Subject key identifier:   44:12:D2:E8:31:69:BC:EE:72:87:79:DA:9A:22:23:6C:97:6E:4B:C6
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       3965119AF111BD27A7759C982E1189C13F05B812
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa
Signing time:             Mon 04 Aug 2025 22:13:57 +0000
ROA not before:           Mon 04 Aug 2025 22:08:57 +0000
ROA not after:            Mon 03 Aug 2026 22:13:57 +0000
asID:                     27267
IP address blocks:        199.38.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 15:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:65:11:9a:f1:11:bd:27:a7:75:9c:98:2e:11:89:c1:3f:05:b8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Aug  4 22:08:57 2025 GMT
            Not After : Aug  3 22:13:57 2026 GMT
        Subject: CN=4412D2E83169BCEE728779DA9A22236C976E4BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:67:90:ab:8a:05:28:83:0a:cd:c8:bb:52:6c:
                    ff:7e:f3:a0:b5:72:39:5d:5f:48:81:5a:30:63:c1:
                    3a:22:0a:06:81:4e:cf:36:2e:8a:55:06:6c:c6:9d:
                    68:6d:5c:6a:e9:18:21:5d:b8:e4:d8:c7:b5:aa:d2:
                    68:52:b7:17:5b:fc:97:ab:f8:7b:f2:b9:c5:ec:32:
                    41:8e:46:bf:58:8e:b2:d2:47:42:fe:6f:06:f3:a3:
                    89:52:53:3c:67:70:1e:9b:16:6e:4c:a9:0a:a7:a5:
                    f5:61:c2:44:c9:37:80:50:bd:af:b3:06:3f:e9:56:
                    4c:01:01:5a:63:07:39:68:0c:2d:55:0a:ff:aa:4d:
                    28:90:f6:1f:b6:d9:4d:8a:ed:9a:81:78:fe:28:f0:
                    f5:be:b3:a4:8d:7e:98:eb:ee:48:79:cc:3e:8a:28:
                    2c:77:68:be:30:3a:a1:93:2f:bf:54:68:9f:e0:aa:
                    d6:b9:5f:71:d7:cd:ff:e9:75:66:a3:9a:26:30:4b:
                    da:6c:ee:d1:fe:83:5f:3e:43:25:45:fa:02:3c:19:
                    fd:40:be:62:98:e3:61:fc:5d:9d:d5:d8:93:55:1f:
                    87:ba:29:bc:ef:02:f2:cf:29:f5:f0:f6:49:88:97:
                    53:da:87:bb:ad:2c:ea:b5:08:06:28:9d:75:34:a0:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:D2:E8:31:69:BC:EE:72:87:79:DA:9A:22:23:6C:97:6E:4B:C6
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:86:13:29:f5:bc:f5:35:47:bf:db:00:77:57:55:7e:00:
         ad:c1:02:89:5f:8d:df:47:01:d6:cf:eb:56:ca:07:cb:f9:cf:
         df:5a:51:0c:e6:9e:ac:b0:a5:d8:9d:0d:18:bb:0f:76:1c:d6:
         3d:64:04:1a:37:17:88:0e:3c:bd:83:e4:0b:42:c1:ea:66:76:
         20:27:e6:a9:b8:51:e6:11:52:66:3d:98:45:e2:8f:7d:e5:74:
         71:00:6c:ca:f0:79:b3:40:91:f5:4b:ae:21:26:59:f5:2f:74:
         32:65:44:1c:69:1a:51:f4:a2:cf:3d:ba:12:51:66:7e:54:07:
         ce:20:d3:11:79:49:78:e3:4b:f1:5c:f0:8b:30:d5:82:65:a5:
         d8:d5:d2:2d:31:27:fc:c3:40:09:42:45:0b:7e:82:14:e4:b4:
         70:fc:d8:68:18:7f:38:8c:5c:49:9a:dc:ef:88:ec:1c:6f:77:
         49:18:fa:43:bb:b9:cc:73:be:dc:6b:56:2d:24:7e:37:dd:d5:
         fa:65:f6:e5:d6:6b:52:76:9f:13:f6:6a:9f:ed:16:ac:b2:cc:
         70:2d:88:9c:4b:73:73:96:8a:7a:a4:5e:b1:e9:8b:84:7c:a4:
         3f:3d:a6:d9:76:48:bc:e8:27:83:63:ea:7e:d3:1b:e7:b1:81:
         be:6a:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:04 2025 by rpki-client