Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa
File:                     AS27176.roa (raw, json)
Hash identifier:          XqCTe4XRL1gir9XKDgb6Z17pqVC7IqIB5Fyy7YiQSKY=
Subject key identifier:   AC:11:AC:69:BE:BD:72:32:FE:63:1B:81:E3:95:9F:79:41:20:EF:67
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       278E8F9AF0D47241F2017A080F956C715A6C4194
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa
Signing time:             Fri 24 Jul 2026 17:33:04 +0000
ROA not before:           Fri 24 Jul 2026 17:28:04 +0000
ROA not after:            Fri 23 Jul 2027 17:33:04 +0000
asID:                     27176
IP address blocks:        23.95.147.0/24 maxlen: 24
                          23.95.217.0/24 maxlen: 24
                          104.223.8.0/24 maxlen: 24
                          155.94.139.0/24 maxlen: 24
                          155.94.150.0/24 maxlen: 24
                          155.94.163.0/24 maxlen: 24
                          173.44.35.0/24 maxlen: 24
                          192.236.203.0/24 maxlen: 24
                          192.255.174.0/24 maxlen: 24
                          198.44.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Jul 2026 16:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8e:8f:9a:f0:d4:72:41:f2:01:7a:08:0f:95:6c:71:5a:6c:41:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 24 17:28:04 2026 GMT
            Not After : Jul 23 17:33:04 2027 GMT
        Subject: CN=AC11AC69BEBD7232FE631B81E3959F794120EF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:9c:a0:2a:57:ba:6f:03:57:91:8c:22:2d:
                    76:a9:1b:3d:e6:8d:66:f5:aa:ad:64:30:41:e8:a4:
                    cc:c6:c6:57:30:d2:0f:4c:55:69:87:a7:70:57:49:
                    84:e2:fd:52:c8:c1:60:a3:33:5a:16:d8:c0:85:b5:
                    13:70:43:bd:63:fe:3a:55:5a:61:37:4d:8a:d6:28:
                    71:e7:be:91:43:c3:8e:8f:a7:42:e5:9f:29:4e:71:
                    31:49:da:b3:b4:96:a9:5c:ed:9a:c8:d4:9e:2c:07:
                    f3:0e:28:86:bb:89:79:08:f9:86:1f:33:df:92:9e:
                    d6:53:0c:19:ee:7f:38:37:98:fc:35:1f:40:32:6e:
                    db:34:ca:51:61:02:6c:5f:7f:9c:54:fb:0b:e7:c9:
                    07:41:d9:da:cf:49:9c:54:c5:14:2d:6f:0a:6f:a8:
                    f4:d0:a9:cd:32:db:85:7e:a3:ad:8c:14:d0:eb:4d:
                    82:00:04:49:5a:80:f7:d0:c5:cf:9f:5b:1f:3d:5f:
                    ea:81:40:fe:78:35:7a:fb:8a:84:7e:20:35:c0:cb:
                    3a:98:0c:1f:d1:d9:83:30:36:d1:88:3c:73:bc:e5:
                    19:97:dc:83:57:57:15:37:11:28:e7:fc:00:4a:2f:
                    80:2b:41:97:90:a5:08:60:cc:f4:12:2e:b9:cd:af:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:11:AC:69:BE:BD:72:32:FE:63:1B:81:E3:95:9F:79:41:20:EF:67
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.147.0/24
                  23.95.217.0/24
                  104.223.8.0/24
                  155.94.139.0/24
                  155.94.150.0/24
                  155.94.163.0/24
                  173.44.35.0/24
                  192.236.203.0/24
                  192.255.174.0/24
                  198.44.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:ff:4a:dd:d5:67:6c:56:7c:f8:04:e1:91:20:31:d2:2a:ca:
         79:49:f8:99:d5:f8:5b:dc:78:95:7d:0b:91:8a:7f:3d:67:67:
         4e:ba:18:76:5b:c9:e6:7f:5f:64:6a:72:ae:78:5b:e1:3e:6e:
         a4:88:5b:93:a7:33:2a:ea:b2:4d:86:54:54:f2:50:ef:21:7d:
         7d:29:9e:ad:aa:6e:77:8b:b4:5e:d2:af:ba:d1:d0:02:c9:c1:
         02:25:bc:2f:a7:ac:ef:2e:13:b7:7b:e7:75:ca:64:14:95:90:
         75:7f:4b:c1:e6:bb:2e:89:3c:36:f7:54:13:f0:75:ea:a4:54:
         5b:fd:cb:55:0b:e5:dd:7c:e9:79:71:e9:0b:db:82:b5:4c:74:
         97:b1:4e:a0:66:ae:15:16:af:1e:33:c4:00:c8:d7:3b:f6:25:
         1e:8a:b8:ec:15:26:4e:4f:eb:54:94:b6:e4:ad:1e:bf:7b:20:
         05:55:03:a9:15:52:72:2f:93:b4:7f:af:0a:cd:bc:8a:af:6e:
         3c:24:30:8f:f7:68:09:85:89:e8:ca:03:b5:fa:7c:0a:c3:17:
         e7:57:2c:9a:e7:83:4a:28:c9:0f:54:5d:fd:bd:bb:56:d9:9d:
         90:b6:0b:b8:c8:c8:88:1c:99:9d:10:02:b2:f9:a2:ba:19:b7:
         d7:dc:8e:2f
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUJ46PmvDUckHyAXoID5VscVpsQZQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNzI0MTcyODA0WhcNMjcwNzIzMTczMzA0
WjAzMTEwLwYDVQQDEyhBQzExQUM2OUJFQkQ3MjMyRkU2MzFCODFFMzk1OUY3OTQx
MjBFRjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA166coCpXum8D
V5GMIi12qRs95o1m9aqtZDBB6KTMxsZXMNIPTFVph6dwV0mE4v1SyMFgozNaFtjA
hbUTcEO9Y/46VVphN02K1ihx576RQ8OOj6dC5Z8pTnExSdqztJapXO2ayNSeLAfz
DiiGu4l5CPmGHzPfkp7WUwwZ7n84N5j8NR9AMm7bNMpRYQJsX3+cVPsL58kHQdna
z0mcVMUULW8Kb6j00KnNMtuFfqOtjBTQ602CAARJWoD30MXPn1sfPV/qgUD+eDV6
+4qEfiA1wMs6mAwf0dmDMDbRiDxzvOUZl9yDV1cVNxEo5/wASi+AK0GXkKUIYMz0
Ei65za8fTwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKwRrGm+vXIy/mMbgeOVn3lB
IO9nMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzI3MTc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUG
CCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAF1+TAwQAF1/ZAwQAaN8IAwQAm16L
AwQAm16WAwQAm16jAwQArSwjAwQAwOzLAwQAwP+uAwQAxix2MA0GCSqGSIb3DQEB
CwUAA4IBAQDD/0rd1WdsVnz4BOGRIDHSKsp5SfiZ1fhb3HiVfQuRin89Z2dOuhh2
W8nmf19kanKueFvhPm6kiFuTpzMq6rJNhlRU8lDvIX19KZ6tqm53i7Re0q+60dAC
ycECJbwvp6zvLhO3e+d1ymQUlZB1f0vB5rsuiTw291QT8HXqpFRb/ctVC+XdfOl5
cekL24K1THSXsU6gZq4VFq8eM8QAyNc79iUeirjsFSZOT+tUlLbkrR6/eyAFVQOp
FVJyL5O0f68KzbyKr248JDCP92gJhYnoygO1+nwKwxfnVyya54NKKMkPVF39vbtW
2Z2Qtgu4yMiIHJmdEAKy+aK6GbfX3I4v
-----END CERTIFICATE-----
Generated at Mon Jul 27 17:24:33 2026 by rpki-client