Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa
File:                     AS27176.roa (raw, json)
Hash identifier:          uBztdbufPHIj1qRaxkbC2D14v49hn4xwGy3OpJArdtI=
Subject key identifier:   02:53:50:11:B7:CE:07:30:7D:14:6C:E4:4E:21:E0:97:3C:85:1D:EE
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       756FAD8F85EDA3B4543801A7B224F34C9F7382CA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa
Signing time:             Fri 27 Jun 2025 12:52:01 +0000
ROA not before:           Fri 27 Jun 2025 12:47:01 +0000
ROA not after:            Fri 26 Jun 2026 12:52:01 +0000
asID:                     27176
IP address blocks:        104.223.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6f:ad:8f:85:ed:a3:b4:54:38:01:a7:b2:24:f3:4c:9f:73:82:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 27 12:47:01 2025 GMT
            Not After : Jun 26 12:52:01 2026 GMT
        Subject: CN=02535011B7CE07307D146CE44E21E0973C851DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:de:f7:10:b9:5f:73:70:b4:ba:b1:a7:6e:
                    dc:65:f5:f3:46:77:c0:58:b6:22:df:59:e7:f6:13:
                    d8:27:b6:0f:d9:cb:80:1d:f9:32:3e:ec:a0:7e:dd:
                    7a:4f:4c:0f:1d:0a:39:ae:ab:08:25:7d:02:f5:51:
                    a3:de:45:b1:ad:43:0f:cf:9f:4b:9d:ce:53:36:1b:
                    fb:d8:1f:c2:1e:3f:0f:25:78:e1:4c:d9:d7:0d:c4:
                    40:97:3a:f7:8c:28:01:4f:d9:a9:1d:32:ab:6e:d9:
                    a3:c7:3d:8c:c8:24:6c:b4:26:ba:04:c4:b4:14:9a:
                    5f:7e:61:90:a8:6d:7a:9b:13:d4:9b:8d:c9:85:92:
                    94:4c:8a:28:36:3d:38:ee:95:d4:37:fb:bf:f1:ed:
                    a1:fe:16:c0:c7:10:6e:49:cd:96:78:2e:16:d0:73:
                    f2:9d:68:84:c1:6d:3f:d1:32:9a:fe:f4:61:98:bc:
                    44:c7:d3:a5:b9:4f:a6:31:a6:ae:c5:6a:44:99:3b:
                    43:85:d1:f8:9e:8e:5a:a0:81:1a:b7:a9:c1:59:75:
                    18:e3:07:d3:84:bc:ef:22:67:dd:2f:3e:de:b7:01:
                    3b:08:0d:2f:06:de:f4:99:b3:1b:d0:3a:b6:8b:c3:
                    e5:ae:28:9b:ed:6e:1c:b4:09:b7:9f:04:f6:09:4d:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:53:50:11:B7:CE:07:30:7D:14:6C:E4:4E:21:E0:97:3C:85:1D:EE
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.223.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:52:28:c5:6a:94:61:e2:28:13:de:8d:f2:c2:60:bb:5d:26:
         03:9b:50:cd:22:60:79:0e:9d:91:ba:6f:ca:08:9c:f1:6d:a5:
         3b:ae:3a:14:83:b1:5b:e2:70:35:df:67:54:bc:db:e5:88:69:
         04:0e:b3:08:6e:0d:5b:c9:39:da:83:c6:ab:c3:1e:da:a9:78:
         0a:93:72:1d:c1:a9:51:33:81:c7:45:72:1e:7a:ec:8c:5e:8d:
         36:ad:3d:37:c3:3b:0f:24:0e:c3:2e:bd:a9:56:6a:5e:66:b9:
         ae:7e:e8:81:d8:e3:a0:48:50:0f:36:6b:3f:5e:b4:07:0f:54:
         8d:80:75:22:18:d3:8b:15:e3:8e:ee:ee:b3:03:c2:aa:37:57:
         1e:aa:d2:9c:c0:fb:77:1e:18:14:72:7d:ed:d9:89:74:0a:cf:
         69:c8:a7:9a:d7:23:e1:fb:e7:f0:c1:ee:c8:c3:00:61:20:08:
         b4:94:a4:09:af:8e:7b:f1:8c:37:e7:91:28:53:78:d6:d0:23:
         3f:0c:f5:de:81:78:4e:7b:8a:ad:7b:88:70:68:7a:5a:38:74:
         e6:96:02:19:5e:3c:5c:b5:50:db:37:d2:e7:3d:4f:cf:9a:dc:
         a6:90:0b:25:17:0c:39:9b:59:18:5f:36:67:fa:b6:ea:73:9b:
         c7:68:bc:26
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUdW+tj4Xto7RUOAGnsiTzTJ9zgsowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjI3MTI0NzAxWhcNMjYwNjI2MTI1MjAx
WjAzMTEwLwYDVQQDEygwMjUzNTAxMUI3Q0UwNzMwN0QxNDZDRTQ0RTIxRTA5NzND
ODUxREVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzne9xC5X3Nw
tLqxp27cZfXzRnfAWLYi31nn9hPYJ7YP2cuAHfkyPuygft16T0wPHQo5rqsIJX0C
9VGj3kWxrUMPz59Lnc5TNhv72B/CHj8PJXjhTNnXDcRAlzr3jCgBT9mpHTKrbtmj
xz2MyCRstCa6BMS0FJpffmGQqG16mxPUm43JhZKUTIooNj047pXUN/u/8e2h/hbA
xxBuSc2WeC4W0HPynWiEwW0/0TKa/vRhmLxEx9OluU+mMaauxWpEmTtDhdH4no5a
oIEat6nBWXUY4wfThLzvImfdLz7etwE7CA0vBt70mbMb0Dq2i8Plriib7W4ctAm3
nwT2CU1oyQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAJTUBG3zgcwfRRs5E4h4Jc8
hR3uMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzI3MTc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaN8IMA0GCSqGSIb3DQEBCwUAA4IB
AQASUijFapRh4igT3o3ywmC7XSYDm1DNImB5Dp2Rum/KCJzxbaU7rjoUg7Fb4nA1
32dUvNvliGkEDrMIbg1byTnag8arwx7aqXgKk3IdwalRM4HHRXIeeuyMXo02rT03
wzsPJA7DLr2pVmpeZrmufuiB2OOgSFAPNms/XrQHD1SNgHUiGNOLFeOO7u6zA8Kq
N1ceqtKcwPt3HhgUcn3t2Yl0Cs9pyKea1yPh++fwwe7IwwBhIAi0lKQJr4578Yw3
55EoU3jW0CM/DPXegXhOe4qte4hwaHpaOHTmlgIZXjxctVDbN9LnPU/PmtymkAsl
Fww5m1kYXzZn+rbqc5vHaLwm
-----END CERTIFICATE-----
Generated at Sun Jun 29 15:29:42 2025 by rpki-client