Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          Hr6uu7TSjTaHUCXur1pJfkOFeyv7bC6GkQ4D+nsU3gs=
Subject key identifier:   1D:07:FE:97:62:FC:B7:4E:4B:66:21:C3:B1:94:5B:CC:97:08:B3:F0
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       2D061F4EA892FFBCA2556F25C75B8AFFA35602C6
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa
Signing time:             Fri 06 Nov 2026 00:00:08 +0000
ROA not before:           Thu 05 Nov 2026 23:55:08 +0000
ROA not after:            Fri 05 Nov 2027 00:00:08 +0000
asID:                     16509
IP address blocks:        207.180.22.0/24 maxlen: 24
                          207.180.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Nov 2026 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:06:1f:4e:a8:92:ff:bc:a2:55:6f:25:c7:5b:8a:ff:a3:56:02:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Nov  5 23:55:08 2026 GMT
            Not After : Nov  5 00:00:08 2027 GMT
        Subject: CN=1D07FE9762FCB74E4B6621C3B1945BCC9708B3F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:dc:cf:91:6d:55:f3:93:ef:df:19:85:42:
                    30:6d:ef:5b:c1:91:f9:f9:93:c7:e2:91:71:81:19:
                    ad:b1:46:ea:30:04:e4:cb:c1:da:83:24:df:60:18:
                    b3:b2:6e:95:b8:3e:9c:db:1c:4b:7a:ab:4c:f0:f3:
                    b0:15:bc:08:84:6e:5b:47:0c:76:68:22:b1:66:02:
                    da:87:05:4b:48:09:b0:82:b8:32:69:ab:4d:90:02:
                    49:1f:17:69:ba:40:ae:ba:60:17:20:ea:c7:66:e7:
                    cd:1c:fe:f5:b6:20:5d:3d:7e:72:7c:19:c4:52:67:
                    fb:d2:ed:1c:6d:e0:e2:d4:dd:79:b7:ef:eb:7f:b4:
                    2d:25:07:f5:93:05:be:bc:b3:61:09:10:2e:db:15:
                    fb:72:c1:03:18:e7:0e:05:5b:be:b0:29:f8:bb:be:
                    e3:09:76:23:72:61:2c:ef:73:f4:74:02:38:ab:cc:
                    5d:d7:60:35:d4:c3:19:4b:84:3b:52:07:15:fa:58:
                    2f:2c:b1:02:ef:9f:a7:db:f2:08:03:07:fa:f2:77:
                    96:96:32:1c:41:72:31:16:5b:03:83:04:bc:66:8e:
                    5c:22:6b:fc:cc:3a:e0:7b:74:7d:89:fc:04:c6:c3:
                    f1:90:14:81:21:69:dd:58:cd:a5:c8:95:73:f3:a7:
                    d0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:07:FE:97:62:FC:B7:4E:4B:66:21:C3:B1:94:5B:CC:97:08:B3:F0
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.22.0/24
                  207.180.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:66:40:ca:bc:cb:10:0e:fa:f4:89:67:91:8e:fb:e0:10:
         ef:28:aa:c3:4b:2b:5a:f3:e6:b9:84:ce:71:d1:4a:56:05:3c:
         61:73:10:f2:4f:29:ec:6c:ec:27:42:4a:d4:62:57:6e:ab:b5:
         3a:28:97:df:4a:b8:fa:4b:f8:ce:b8:33:fe:15:db:51:5a:5d:
         9f:5e:61:55:d8:5b:a1:d7:26:f0:86:bd:0b:dc:58:e8:3a:8b:
         28:c8:7b:10:c0:a7:31:86:63:b6:2a:4a:92:90:d1:a1:9c:13:
         40:cf:6e:f0:59:40:0f:3b:78:74:74:a8:2e:5b:f9:81:00:84:
         63:3f:c5:7b:61:09:5d:23:b7:d8:8e:30:9a:94:5c:d7:9f:84:
         cc:9f:5c:7d:ea:5e:64:e8:c4:2e:cd:60:fd:c9:a9:c6:61:12:
         59:13:94:af:9d:2e:37:f4:87:ea:74:8b:e2:48:57:6d:75:fa:
         4b:9c:7a:a8:7e:f0:0d:37:cd:e7:ae:dd:81:55:29:cc:19:eb:
         6b:4e:80:86:65:7a:41:5b:8b:3f:b5:c6:64:43:f8:72:b0:dd:
         70:e9:4d:df:94:7c:a1:ba:d8:8e:ea:dc:a3:89:03:e4:78:ca:
         2e:7c:cd:ac:42:84:d4:15:7d:02:32:d0:52:30:f4:0e:ce:53:
         95:69:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:21:11 2026 by rpki-client