Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS11427.roa
File:                     AS11427.roa (raw, json)
Hash identifier:          KvGgG5BNc+ys8a1XeYDB6wIoetYH5kzrAL4CYeTSq2E=
Subject key identifier:   C7:B5:E4:B3:25:D6:28:4A:95:DE:80:AA:C4:39:62:B9:D6:17:24:FA
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       1C20DB8A0449841793EA84B68AEDE7686E4D676F
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS11427.roa
Signing time:             Mon 26 Jan 2026 11:50:47 +0000
ROA not before:           Mon 26 Jan 2026 11:45:47 +0000
ROA not after:            Mon 25 Jan 2027 11:50:47 +0000
asID:                     11427
IP address blocks:        140.99.45.0/24 maxlen: 24
                          140.99.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:20:db:8a:04:49:84:17:93:ea:84:b6:8a:ed:e7:68:6e:4d:67:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jan 26 11:45:47 2026 GMT
            Not After : Jan 25 11:50:47 2027 GMT
        Subject: CN=C7B5E4B325D6284A95DE80AAC43962B9D61724FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:7a:72:93:e9:cf:36:33:26:fa:bf:41:d1:
                    eb:25:05:9a:30:21:11:53:37:48:5f:d2:79:37:83:
                    73:f9:61:3a:a3:a6:22:be:11:90:ab:f5:bc:8b:1d:
                    35:40:91:61:3b:a0:b4:97:57:df:c6:1d:7f:88:2c:
                    dc:fe:c4:31:44:71:25:2d:4f:95:f5:4b:74:fb:69:
                    fe:4d:2f:26:bd:60:ae:e0:a8:ab:fe:0b:30:41:c1:
                    87:9b:5b:df:75:5f:4f:d2:b0:a6:72:f1:7d:f0:ec:
                    05:e2:37:0d:d8:f4:4b:96:e7:be:33:3f:9a:60:ab:
                    fc:62:b7:8a:6a:10:f6:07:d5:2d:e8:e1:42:f8:63:
                    10:6c:e3:cd:a6:1b:9c:6f:0e:20:d3:42:01:8f:09:
                    bb:c6:92:64:7a:29:f5:fa:e6:7d:91:0a:69:42:33:
                    59:c1:00:90:7d:2a:ff:67:0a:b1:ca:f0:5d:b4:e4:
                    df:32:f5:ea:ed:fb:54:3f:07:cb:92:c3:2a:e8:00:
                    d5:dd:5e:d8:55:00:e2:9c:1b:ef:28:30:b3:50:5d:
                    3d:97:25:81:78:ae:23:d9:ee:2c:bd:2e:c1:11:44:
                    b0:1b:ab:c7:3a:d4:20:bf:22:31:81:ab:02:22:6a:
                    9c:c8:8b:1b:a1:af:64:c9:1f:9e:5b:32:62:6d:e5:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B5:E4:B3:25:D6:28:4A:95:DE:80:AA:C4:39:62:B9:D6:17:24:FA
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS11427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.45.0/24
                  140.99.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:db:f1:43:92:f2:69:aa:01:c4:7d:f6:f2:14:3a:93:7a:
         ff:6d:81:21:c7:52:0b:66:cf:35:be:1a:11:19:61:88:f9:ac:
         f7:b9:01:7c:c8:23:ac:26:55:cf:85:91:45:15:ca:0b:fb:0d:
         6b:64:a9:7d:79:49:9b:53:ad:e4:21:96:25:ef:81:c7:91:72:
         e2:ae:7f:3b:92:4e:d0:ca:ff:42:1f:10:7e:ac:3d:f0:e1:13:
         7a:fa:00:b3:28:c4:7a:5d:27:30:d0:ac:27:6b:c5:ce:b3:24:
         2d:7b:80:65:50:54:d7:cf:98:f6:39:03:b8:b6:b0:47:3e:67:
         f3:0b:c7:87:c4:74:1d:fc:cd:54:e8:13:ad:20:4c:2a:99:8c:
         6d:3c:ab:c8:7f:57:96:be:cf:38:50:d7:39:48:d6:e6:14:4e:
         3c:07:07:3d:3f:18:17:8e:2b:a3:a3:2e:b3:8f:ae:b2:ad:e7:
         5c:db:14:44:54:ca:50:f7:bd:a4:58:cd:12:ee:40:de:d1:0b:
         d6:5e:0b:ed:ff:39:3d:e9:13:9a:c4:fb:db:29:34:b4:39:5d:
         c0:60:e2:bc:60:b0:0a:b9:cb:5f:48:04:94:12:ea:7a:1a:c7:
         21:18:00:3c:07:3f:e3:c6:22:46:fe:e0:bd:2b:0b:44:1b:11:
         08:b9:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:41:31 2026 by rpki-client