Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa
File:                     AS27176.roa (raw, json)
Hash identifier:          QZyFHI+WVuf9CS3qcP2B4Icx+8IFvAEGM/WiPQTBkAc=
Subject key identifier:   DD:CC:51:55:D5:D1:B1:ED:C9:29:D5:DC:F0:DA:83:85:C5:1C:A2:26
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       75F4A2B23E85FD2A247CBB413327920471FD5592
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa
Signing time:             Mon 16 Mar 2026 18:10:23 +0000
ROA not before:           Mon 16 Mar 2026 18:05:23 +0000
ROA not after:            Mon 15 Mar 2027 18:10:23 +0000
asID:                     27176
IP address blocks:        23.95.217.0/24 maxlen: 24
                          104.223.8.0/24 maxlen: 24
                          155.94.139.0/24 maxlen: 24
                          155.94.150.0/24 maxlen: 24
                          155.94.163.0/24 maxlen: 24
                          173.44.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f4:a2:b2:3e:85:fd:2a:24:7c:bb:41:33:27:92:04:71:fd:55:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 16 18:05:23 2026 GMT
            Not After : Mar 15 18:10:23 2027 GMT
        Subject: CN=DDCC5155D5D1B1EDC929D5DCF0DA8385C51CA226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:8b:fd:df:f0:4b:85:91:0b:64:ac:fe:eb:
                    6c:35:74:03:f1:50:4d:58:a9:94:1e:2f:04:15:76:
                    77:99:b0:2b:9c:d6:71:68:09:1f:d3:cb:cd:43:6f:
                    be:94:18:f5:27:c1:d1:73:cd:6c:27:22:59:99:c1:
                    87:93:cb:28:41:ee:ee:c6:d8:5d:e0:ce:91:74:5d:
                    10:7a:e9:42:98:32:8e:ac:e9:d3:cd:37:51:de:4c:
                    72:ea:38:a0:8d:a4:37:74:1c:44:af:ba:36:3f:ba:
                    1d:f3:e7:19:14:1d:5d:af:52:39:2b:03:fb:cc:e4:
                    21:52:40:55:3b:6d:14:aa:9d:ab:1d:dd:9b:58:56:
                    76:60:c0:31:50:6b:b3:d2:9b:88:fa:d5:62:81:99:
                    17:41:05:04:21:c0:49:b7:e6:4f:00:51:1f:cb:2c:
                    00:f9:80:82:f0:98:f6:2e:b1:81:64:f1:b5:ed:ec:
                    0f:86:79:03:45:b8:a2:97:e2:51:66:6f:cc:bc:2a:
                    11:52:49:3e:41:0f:c6:a4:8d:49:a9:74:41:d2:34:
                    1e:51:7e:bd:c1:d9:81:5a:08:73:e1:71:41:23:5a:
                    25:87:c4:ac:76:ad:77:8d:c1:e2:3b:47:1f:5b:0e:
                    0c:12:2a:e5:7e:63:f6:3d:bc:aa:be:b5:39:3b:4f:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CC:51:55:D5:D1:B1:ED:C9:29:D5:DC:F0:DA:83:85:C5:1C:A2:26
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.217.0/24
                  104.223.8.0/24
                  155.94.139.0/24
                  155.94.150.0/24
                  155.94.163.0/24
                  173.44.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:62:2a:68:47:a5:b7:e6:84:dd:e8:bd:f8:28:cf:4e:08:19:
         f9:b1:4d:49:f6:e3:2f:a9:3e:48:01:82:81:ff:97:9e:45:f7:
         df:94:7b:07:9f:2d:a0:00:ac:42:8c:6c:8f:4e:4c:bd:ed:eb:
         cf:ab:77:70:63:19:d3:2a:d8:7d:5a:ea:1c:e1:04:48:e0:36:
         a4:c7:e4:dc:2f:12:e3:ed:b7:54:68:5a:06:6e:c9:70:40:37:
         90:20:18:bd:0e:45:74:71:62:8e:0c:6d:53:99:c8:ba:7d:f2:
         c2:89:20:2b:0e:6e:39:df:cc:f8:45:21:c6:26:bc:cd:2e:e5:
         78:5a:d6:e5:e2:77:6f:ac:1d:fd:43:6e:57:d1:5b:9e:57:00:
         13:a1:6c:c8:33:8a:38:59:02:20:e2:30:d3:45:7d:f0:c9:ae:
         8e:45:13:b4:f1:74:20:c1:72:d4:ad:52:7e:bf:fe:8d:fe:eb:
         ac:ff:78:80:39:50:10:57:b1:53:14:0a:21:e6:aa:e1:39:f1:
         00:03:47:5a:3e:d6:59:2e:8f:5d:27:66:5c:c0:ca:30:c6:3f:
         3a:99:b7:b5:e7:5d:75:4c:94:7b:b8:67:6b:18:24:fc:6b:ef:
         34:5f:c7:55:19:ba:10:ed:29:a7:5d:ba:7c:0d:1d:52:76:15:
         75:e3:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:26 2026 by rpki-client