Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS27535.roa
File:                     AS27535.roa (raw, json)
Hash identifier:          lOHNdocaruAr4LDY/awKiI6uf/nW8w4VUtzk4d474i4=
Subject key identifier:   98:6D:FF:F9:DC:D2:A8:FF:39:7A:9A:62:41:A1:25:B6:CF:B0:5E:BC
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       2F7DE9BC841BE9B798838EA0A596AC8510208B0E
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS27535.roa
Signing time:             Tue 27 Oct 2026 13:17:25 +0000
ROA not before:           Tue 27 Oct 2026 13:12:25 +0000
ROA not after:            Tue 26 Oct 2027 13:17:25 +0000
asID:                     27535
IP address blocks:        207.180.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Nov 2026 21:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:e9:bc:84:1b:e9:b7:98:83:8e:a0:a5:96:ac:85:10:20:8b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Oct 27 13:12:25 2026 GMT
            Not After : Oct 26 13:17:25 2027 GMT
        Subject: CN=986DFFF9DCD2A8FF397A9A6241A125B6CFB05EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0a:4b:64:32:8b:15:76:5e:b0:84:ce:a6:51:
                    68:62:21:65:85:a1:a3:bd:fb:73:e1:02:17:de:36:
                    d0:88:47:4b:a7:5c:dd:cf:ee:7e:03:1d:68:22:b2:
                    53:0f:1c:b4:95:bb:e0:66:75:b7:0d:45:d2:82:9c:
                    27:e0:cb:20:8f:a3:9c:27:7b:38:e3:eb:70:cb:cf:
                    ed:ee:1e:84:dd:cc:87:e5:ff:b6:92:77:30:4c:3b:
                    f0:eb:bb:41:21:e6:12:6f:ba:65:a6:aa:5d:35:01:
                    0a:7d:17:db:bd:6f:d8:14:a9:7c:e1:1c:42:26:e9:
                    83:b2:51:ac:3a:ee:92:15:ec:aa:4e:07:e3:1a:5b:
                    f1:a7:ee:ec:cf:44:d6:24:72:ca:c6:71:19:64:a0:
                    09:08:5e:17:b6:7d:51:55:91:ca:23:a2:c9:46:af:
                    a0:ec:5b:d8:8e:dc:4e:c2:a0:e6:9e:15:db:b8:63:
                    4f:ef:96:ef:a5:a9:d4:ad:7d:0a:c5:7e:11:b9:bb:
                    3e:83:9d:e5:e4:94:96:42:85:a4:5b:bb:ac:de:58:
                    42:41:f1:aa:a4:03:ca:d9:3a:a2:a0:07:4f:03:bd:
                    e3:eb:09:a0:20:80:2c:b5:05:2d:8f:1e:1a:69:ac:
                    d9:b1:a4:da:b9:0b:c4:1f:19:d8:91:78:ff:79:e4:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6D:FF:F9:DC:D2:A8:FF:39:7A:9A:62:41:A1:25:B6:CF:B0:5E:BC
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS27535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:df:5e:68:4f:0f:30:5b:8b:d9:b3:9b:e3:85:b7:ae:3b:
         d8:3e:cf:79:7f:c4:c9:ee:25:f7:1c:b0:f2:21:05:99:fd:9a:
         f8:ca:54:30:28:ff:ee:c3:9e:f5:69:2a:ce:56:68:1f:56:21:
         b1:29:9d:48:16:75:5e:b5:70:db:f7:5d:ed:8f:11:e4:12:12:
         36:27:db:c7:88:81:79:6b:0a:85:91:c3:a8:f6:54:6c:65:0a:
         72:6d:0f:ea:46:e6:06:49:5a:da:58:0f:9c:62:2a:9a:d4:cd:
         ac:9e:d4:ff:d7:bb:95:f2:2d:18:6a:24:5a:82:50:e9:a3:6a:
         e3:16:fb:79:e6:97:6b:df:32:97:29:be:de:07:d4:f6:a5:b5:
         bd:92:cc:2e:7b:15:a7:9c:62:8e:58:3a:5e:39:94:8c:75:2b:
         68:a0:65:a5:48:71:80:d1:90:e5:86:4e:22:14:05:1c:d2:f3:
         ec:be:29:6a:13:12:a1:6a:3a:05:fc:4a:7f:15:80:55:f2:65:
         16:f2:19:81:29:90:42:03:5e:44:3f:0d:e6:4f:bd:b4:5b:af:
         6a:39:fb:b0:5a:67:e2:f2:55:4b:6e:10:03:9f:ac:53:a1:e6:
         02:bb:bb:c6:1d:7a:47:00:c6:2b:c9:6c:d0:4d:d4:85:51:7b:
         7d:28:72:86
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUL33pvIQb6beYg46gpZashRAgiw4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYxMDI3MTMxMjI1WhcNMjcxMDI2MTMxNzI1
WjAzMTEwLwYDVQQDEyg5ODZERkZGOURDRDJBOEZGMzk3QTlBNjI0MUExMjVCNkNG
QjA1RUJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gpLZDKLFXZe
sITOplFoYiFlhaGjvftz4QIX3jbQiEdLp1zdz+5+Ax1oIrJTDxy0lbvgZnW3DUXS
gpwn4Msgj6OcJ3s44+twy8/t7h6E3cyH5f+2kncwTDvw67tBIeYSb7plpqpdNQEK
fRfbvW/YFKl84RxCJumDslGsOu6SFeyqTgfjGlvxp+7sz0TWJHLKxnEZZKAJCF4X
tn1RVZHKI6LJRq+g7FvYjtxOwqDmnhXbuGNP75bvpanUrX0KxX4Rubs+g53l5JSW
QoWkW7us3lhCQfGqpAPK2TqioAdPA73j6wmgIIAstQUtjx4aaazZsaTauQvEHxnY
kXj/eeRxeQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJht//nc0qj/OXqaYkGhJbbP
sF68MB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzI3NTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QaMA0GCSqGSIb3DQEBCwUAA4IB
AQBXfd9eaE8PMFuL2bOb44W3rjvYPs95f8TJ7iX3HLDyIQWZ/Zr4ylQwKP/uw571
aSrOVmgfViGxKZ1IFnVetXDb913tjxHkEhI2J9vHiIF5awqFkcOo9lRsZQpybQ/q
RuYGSVraWA+cYiqa1M2sntT/17uV8i0YaiRaglDpo2rjFvt55pdr3zKXKb7eB9T2
pbW9kswuexWnnGKOWDpeOZSMdStooGWlSHGA0ZDlhk4iFAUc0vPsvilqExKhajoF
/Ep/FYBV8mUW8hmBKZBCA15EPw3mT720W69qOfuwWmfi8lVLbhADn6xToeYCu7vG
HXpHAMYryWzQTdSFUXt9KHKG
-----END CERTIFICATE-----
Generated at Tue Nov 10 07:50:45 2026 by rpki-client