Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          xW79c/9OViMF3IxJsZwHAhRHdcNZHwXpYV7zH0JI5Ns=
Subject key identifier:   89:8A:4E:AC:FF:E7:C5:3A:73:61:16:89:12:D5:54:45:D8:DF:F3:7D
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4C799721D2B6BD0B097B3C591F42646B790FFDAA
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa
Signing time:             Tue 08 Jul 2025 00:29:44 +0000
ROA not before:           Tue 08 Jul 2025 00:24:44 +0000
ROA not after:            Tue 07 Jul 2026 00:29:44 +0000
asID:                     16509
IP address blocks:        140.99.12.0/24 maxlen: 24
                          140.99.50.0/24 maxlen: 24
                          140.99.51.0/24 maxlen: 24
                          140.99.52.0/24 maxlen: 24
                          140.99.53.0/24 maxlen: 24
                          140.99.54.0/24 maxlen: 24
                          140.99.55.0/24 maxlen: 24
                          140.99.56.0/24 maxlen: 24
                          140.99.57.0/24 maxlen: 24
                          140.99.61.0/24 maxlen: 24
                          140.99.63.0/24 maxlen: 24
                          140.99.64.0/24 maxlen: 24
                          140.99.65.0/24 maxlen: 24
                          140.99.66.0/24 maxlen: 24
                          140.99.67.0/24 maxlen: 24
                          140.99.70.0/24 maxlen: 24
                          140.99.71.0/24 maxlen: 24
                          140.99.72.0/24 maxlen: 24
                          140.99.73.0/24 maxlen: 24
                          140.99.74.0/24 maxlen: 24
                          140.99.75.0/24 maxlen: 24
                          140.99.76.0/24 maxlen: 24
                          140.99.221.0/24 maxlen: 24
                          140.99.232.0/24 maxlen: 24
                          140.99.234.0/24 maxlen: 24
                          140.99.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:79:97:21:d2:b6:bd:0b:09:7b:3c:59:1f:42:64:6b:79:0f:fd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul  8 00:24:44 2025 GMT
            Not After : Jul  7 00:29:44 2026 GMT
        Subject: CN=898A4EACFFE7C53A7361168912D55445D8DFF37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:a6:da:03:e0:e5:f5:b3:d5:24:08:a0:23:
                    ec:7d:eb:1d:04:a6:35:a1:50:29:eb:1a:16:f0:3c:
                    1c:6b:4c:40:e8:b8:8f:35:db:80:0a:ae:41:b8:8a:
                    16:6d:0d:1f:07:39:b6:ae:fc:0c:d5:a6:ad:c7:d5:
                    01:1a:63:ad:4c:6f:33:39:bc:d6:98:de:f2:57:8d:
                    8a:b0:1a:53:e6:b0:8c:0a:00:ec:09:f3:be:d4:73:
                    4c:21:6b:07:98:0b:cc:d4:1f:64:bc:1e:f6:fe:aa:
                    5c:5c:f9:ba:23:f4:13:72:e1:34:fa:a3:ec:1a:81:
                    79:17:72:4a:01:29:a3:57:2a:17:d4:d3:24:9a:0f:
                    d4:5e:35:94:56:6c:7f:74:db:5d:ae:01:8e:fb:80:
                    13:35:dd:73:3d:07:ef:d9:ee:ed:15:cc:82:6c:92:
                    33:62:9a:b4:b7:01:bc:e5:6a:1f:0c:ab:0e:41:6c:
                    32:48:54:f0:8f:c6:cb:0a:44:57:0c:58:f7:3e:42:
                    c3:bd:e5:f7:24:be:bc:6f:c0:95:40:00:26:e2:1a:
                    bc:3f:cf:5b:43:06:46:be:cd:71:c2:cf:04:94:6b:
                    4d:bb:f0:f8:fd:b7:6d:f2:e2:f3:77:20:37:39:59:
                    98:e9:7f:d7:c1:5d:19:f8:cc:97:31:a8:de:73:1f:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8A:4E:AC:FF:E7:C5:3A:73:61:16:89:12:D5:54:45:D8:DF:F3:7D
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.12.0/24
                  140.99.50.0-140.99.57.255
                  140.99.61.0/24
                  140.99.63.0-140.99.67.255
                  140.99.70.0-140.99.76.255
                  140.99.221.0/24
                  140.99.232.0/24
                  140.99.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:2f:19:be:1e:0e:82:f2:b3:c7:c1:8b:96:9a:96:46:74:
         42:f6:6b:1e:6b:5d:6b:3e:ce:c9:44:9a:47:84:5a:f4:51:85:
         01:cb:8e:d7:5a:d5:7a:6f:d2:d4:4c:f5:4a:70:e1:9c:6c:77:
         5f:78:e8:93:a0:5c:b1:f1:e5:d3:b8:1e:54:84:3e:a6:66:ff:
         ee:c1:27:b1:f1:1a:b2:83:e9:40:2f:d1:18:f6:a0:06:c7:b3:
         34:c7:94:8c:e5:ed:c1:cd:9c:5d:4e:52:d2:d9:7b:3e:98:1e:
         a4:08:63:03:9c:3b:cf:40:e5:9d:c1:a1:69:9a:43:5d:d5:8e:
         fc:a0:d2:2a:9e:fc:a6:db:83:6e:f2:64:f7:4c:6d:13:55:01:
         8c:56:cf:a1:fd:5e:53:d8:53:b7:f7:ce:e5:53:c0:99:0a:7a:
         d2:2a:db:4b:a9:7f:39:e0:d6:69:ad:c4:38:a5:51:8f:a4:d3:
         a0:6b:2e:fa:48:4f:80:ca:8f:12:34:86:4d:a8:6f:ec:44:57:
         a2:d3:1e:22:1f:70:47:d9:97:7b:fa:8c:60:86:4d:73:1a:65:
         80:3c:a6:bc:49:f8:7f:6a:4d:63:4b:00:44:eb:22:78:ab:90:
         7f:12:be:7c:c3:b6:1c:b9:7e:c1:1a:d9:ae:53:88:da:bc:0f:
         6a:93:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:17:15 2025 by rpki-client