Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa
File:                     AS27267.roa (raw, json)
Hash identifier:          pEOgXRJ/GzEaKQ7UnxQUcd4DZnXY9yNqWAq9XEEOdr4=
Subject key identifier:   81:34:44:E1:85:52:20:1E:22:AD:B6:07:E2:1F:AB:B7:DC:40:86:DF
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       356F68CBC4B8AE6B2987A3A514F377DD881BF6FD
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa
Signing time:             Mon 02 Sep 2024 22:13:10 +0000
ROA not before:           Mon 02 Sep 2024 22:08:10 +0000
ROA not after:            Mon 01 Sep 2025 22:13:10 +0000
asID:                     27267
IP address blocks:        199.38.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6f:68:cb:c4:b8:ae:6b:29:87:a3:a5:14:f3:77:dd:88:1b:f6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Sep  2 22:08:10 2024 GMT
            Not After : Sep  1 22:13:10 2025 GMT
        Subject: CN=813444E18552201E22ADB607E21FABB7DC4086DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:c2:eb:0d:d4:20:dd:31:5c:d5:46:c2:aa:
                    e0:7e:4c:90:e5:1c:8f:f7:4f:6b:b4:e5:36:a6:7c:
                    d5:82:40:27:12:48:c4:76:cf:e0:1f:c5:b8:f2:fb:
                    f7:ff:77:f5:21:f3:55:82:28:74:42:a2:ef:e6:b6:
                    b5:b9:f1:a8:b7:20:6d:93:58:88:38:2c:87:7d:72:
                    f6:5b:ca:5c:12:00:2a:d2:93:c2:a3:7a:29:25:57:
                    99:b7:33:0e:46:c4:1e:2c:1c:f1:38:27:b3:2f:99:
                    d0:17:57:6a:b4:e6:e7:11:01:d1:88:4c:42:9a:88:
                    07:fa:be:ff:5e:8e:e0:18:52:0c:f2:bf:be:95:74:
                    62:cb:7b:20:87:0c:f4:d6:28:b3:3e:c2:cf:cf:d9:
                    d9:3e:05:98:c0:af:e7:6f:ff:7d:c4:de:7c:17:6d:
                    7c:2f:27:33:9a:c7:cf:aa:87:c5:9e:c6:c9:b3:75:
                    7b:b7:cf:04:91:bf:c3:cf:68:dd:7f:6a:1e:8c:43:
                    5e:5c:5d:cc:1a:7e:b1:01:93:c1:a0:38:07:4b:b3:
                    88:3a:4e:2c:3e:15:63:ba:d3:35:19:3c:52:40:7f:
                    b9:46:01:a9:47:4f:03:b5:30:3c:b2:a3:6a:db:8f:
                    27:b9:76:28:41:fd:35:86:04:d5:cd:bd:03:7d:cb:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:44:E1:85:52:20:1E:22:AD:B6:07:E2:1F:AB:B7:DC:40:86:DF
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS27267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:3b:4c:51:9a:37:ec:64:ef:11:40:18:dd:cd:a4:af:8f:1d:
         2f:f2:ec:db:9a:8f:b5:fe:b1:3b:c9:39:d6:5c:15:c1:bc:be:
         43:14:a2:3d:5d:be:47:54:d0:20:5f:a7:76:e6:b6:78:3f:21:
         10:2f:c7:34:84:7a:15:a1:53:a1:89:00:6d:6f:e7:45:e5:31:
         3c:3f:97:f5:ac:31:03:9a:1c:45:2c:58:9f:ea:74:27:33:73:
         28:0a:13:91:9e:34:ce:37:32:21:d7:7b:ef:be:1a:3d:55:88:
         d5:1b:f7:38:36:9d:d0:8e:f7:d9:7e:ea:35:70:0e:7b:ce:d7:
         67:64:a0:5a:e5:ed:43:a8:fa:c1:26:9b:95:5e:cf:0a:04:56:
         8d:94:a4:f5:af:ce:3d:b4:5c:f2:51:5d:dc:17:b3:b6:7a:73:
         f3:78:df:03:91:a0:06:ad:c6:35:c4:6a:b8:8e:49:da:aa:f8:
         e6:1c:ba:57:d7:01:e3:0e:e1:3e:8b:14:07:0b:17:6d:8d:5d:
         27:cd:83:02:0e:ad:be:24:d4:da:d5:0c:b4:22:75:ab:8f:50:
         f8:c2:fa:ba:e3:13:40:52:21:fa:77:bf:79:4a:31:a4:c9:2d:
         8e:ba:39:ed:25:9b:9e:ab:f6:49:9b:52:4c:2d:d2:5d:9c:26:
         2a:24:40:4f
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUNW9oy8S4rmsph6OlFPN33Ygb9v0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQwOTAyMjIwODEwWhcNMjUwOTAxMjIxMzEw
WjAzMTEwLwYDVQQDEyg4MTM0NDRFMTg1NTIyMDFFMjJBREI2MDdFMjFGQUJCN0RD
NDA4NkRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYbC6w3UIN0x
XNVGwqrgfkyQ5RyP909rtOU2pnzVgkAnEkjEds/gH8W48vv3/3f1IfNVgih0QqLv
5ra1ufGotyBtk1iIOCyHfXL2W8pcEgAq0pPCo3opJVeZtzMORsQeLBzxOCezL5nQ
F1dqtObnEQHRiExCmogH+r7/Xo7gGFIM8r++lXRiy3sghwz01iizPsLPz9nZPgWY
wK/nb/99xN58F218LyczmsfPqofFnsbJs3V7t88Ekb/Dz2jdf2oejENeXF3MGn6x
AZPBoDgHS7OIOk4sPhVjutM1GTxSQH+5RgGpR08DtTA8sqNq248nuXYoQf01hgTV
zb0DfctEuwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIE0ROGFUiAeIq22B+Ifq7fc
QIbfMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzI3MjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxya0MA0GCSqGSIb3DQEBCwUAA4IB
AQCiO0xRmjfsZO8RQBjdzaSvjx0v8uzbmo+1/rE7yTnWXBXBvL5DFKI9Xb5HVNAg
X6d25rZ4PyEQL8c0hHoVoVOhiQBtb+dF5TE8P5f1rDEDmhxFLFif6nQnM3MoChOR
njTONzIh13vvvho9VYjVG/c4Np3QjvfZfuo1cA57ztdnZKBa5e1DqPrBJpuVXs8K
BFaNlKT1r849tFzyUV3cF7O2enPzeN8DkaAGrcY1xGq4jknaqvjmHLpX1wHjDuE+
ixQHCxdtjV0nzYMCDq2+JNTa1Qy0InWrj1D4wvq64xNAUiH6d795SjGkyS2Oujnt
JZueq/ZJm1JMLdJdnCYqJEBP
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:16:04 2024 by rpki-client on console-fra.rpki-client.org