Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS274858.roa
File:                     AS274858.roa (raw, json)
Hash identifier:          7IcuUCxy+zNWLqZl0cpJgVkvFzsedPLo5xwOyUIcjnw=
Subject key identifier:   C0:56:2F:15:E3:AA:59:79:D1:6E:7A:23:C7:83:8D:8C:68:21:95:4A
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5D97E2CE218C3301321AEE36316EBED1C320A1FF
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS274858.roa
Signing time:             Fri 27 Mar 2026 13:36:18 +0000
ROA not before:           Fri 27 Mar 2026 13:31:18 +0000
ROA not after:            Fri 26 Mar 2027 13:36:18 +0000
asID:                     274858
IP address blocks:        40.27.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 10:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:e2:ce:21:8c:33:01:32:1a:ee:36:31:6e:be:d1:c3:20:a1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 27 13:31:18 2026 GMT
            Not After : Mar 26 13:36:18 2027 GMT
        Subject: CN=C0562F15E3AA5979D16E7A23C7838D8C6821954A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:19:b3:8a:9f:87:f0:89:93:e0:7d:76:66:
                    64:aa:16:3e:2c:8f:a4:ec:ba:0d:8d:1a:01:4f:02:
                    aa:ee:be:d4:fa:80:f1:df:14:cd:c6:52:cb:2c:40:
                    8b:af:96:e1:66:6e:40:32:09:33:21:a8:5d:15:13:
                    ce:aa:58:14:ab:23:e7:40:e0:45:74:c7:e1:f8:b5:
                    ae:a8:ee:5b:66:79:35:33:93:e4:ef:0f:2e:41:81:
                    b3:aa:4c:cd:cd:f7:b5:77:7d:ce:33:ea:f2:0b:8b:
                    d2:e6:3d:d7:dd:b4:bb:4f:32:0f:3a:7a:ec:81:86:
                    41:71:13:27:2b:60:69:62:e5:af:2b:59:99:d9:e0:
                    ee:41:7e:d3:9f:45:1c:24:55:25:e2:c8:ee:92:07:
                    12:cc:75:99:30:54:88:2e:5a:bc:9a:6f:66:d6:a1:
                    56:9c:9f:4b:84:f9:90:e1:31:4b:aa:00:90:c5:69:
                    e6:a2:e1:2d:4c:1e:ce:68:8e:40:d2:73:7e:2a:c2:
                    fc:2c:54:51:5d:12:01:62:47:48:8f:c7:9d:50:fb:
                    71:a7:8c:35:28:72:ce:20:94:4b:23:4e:9e:dc:12:
                    d3:c4:fc:3f:1f:7a:b2:a4:ff:7d:77:77:1a:14:a0:
                    35:34:54:22:c4:60:70:2b:a9:df:4e:bd:a3:2a:e3:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:56:2F:15:E3:AA:59:79:D1:6E:7A:23:C7:83:8D:8C:68:21:95:4A
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS274858.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:b2:d3:20:19:31:b5:ce:7e:1f:cc:0d:f4:f8:8d:81:22:
         62:ae:0e:cf:a5:41:43:00:5f:19:97:4f:c6:0b:a5:f6:01:ec:
         b6:fa:1a:ad:34:5e:2e:69:87:37:cf:be:78:c3:a1:a8:e5:55:
         92:bd:d5:33:46:a0:ef:6e:87:4d:8b:c2:eb:84:69:e5:f3:3b:
         6c:18:f0:8f:72:01:1c:bd:45:2b:e0:8c:68:1e:6a:00:0f:e9:
         db:76:b4:3d:9e:08:43:58:58:ae:c4:be:fe:96:10:98:8b:64:
         88:74:50:41:1b:a7:5e:7a:6e:37:ca:87:67:35:1a:7d:33:49:
         de:93:17:9a:11:b8:31:0e:e1:25:17:da:32:cc:15:6c:a6:3a:
         3e:d4:d1:d9:8a:53:de:db:a3:ae:63:9a:fb:db:78:7e:7d:24:
         05:0b:29:be:96:c9:8d:dd:4c:a3:f5:22:6d:c2:a4:ee:86:a9:
         e7:f1:6c:d9:c5:73:4e:c3:71:2d:50:78:05:62:a9:98:ab:9f:
         b6:80:94:70:80:82:dd:5f:98:33:7c:49:0e:4e:13:6f:b9:45:
         58:90:f7:09:74:a3:4e:a5:dd:d6:42:48:db:78:ef:43:78:b9:
         2a:7b:0e:6e:9b:eb:ea:5d:aa:9f:b1:99:f1:83:94:74:42:aa:
         bf:8c:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:58 2026 by rpki-client