Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          9Or1+Rs9QDhLVyzIu94OftknYFTpE818kSLzpQdd/LM=
Subject key identifier:   05:2B:09:9D:58:FF:46:F8:90:B5:57:4C:D2:CF:BA:9E:AB:6A:04:99
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       27BF4F79F537B87148A82C9B18A27812C1BA3541
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa
Signing time:             Tue 29 Jul 2025 22:41:08 +0000
ROA not before:           Tue 29 Jul 2025 22:36:08 +0000
ROA not after:            Tue 28 Jul 2026 22:41:08 +0000
asID:                     16509
IP address blocks:        40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 03:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bf:4f:79:f5:37:b8:71:48:a8:2c:9b:18:a2:78:12:c1:ba:35:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul 29 22:36:08 2025 GMT
            Not After : Jul 28 22:41:08 2026 GMT
        Subject: CN=052B099D58FF46F890B5574CD2CFBA9EAB6A0499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8d:d9:0e:61:43:e5:b1:dc:29:06:3f:df:14:
                    31:a3:90:28:04:7c:9d:5e:36:db:5f:6f:65:a2:1f:
                    e4:57:8b:1c:95:d2:ea:64:7a:6d:1c:7c:a9:0e:74:
                    9e:07:56:49:23:4a:a6:26:bb:f0:0a:dc:0b:a2:ec:
                    56:f9:8c:98:93:c3:e0:28:e0:00:32:38:36:3f:33:
                    d4:c3:23:54:e6:99:79:73:69:e2:96:9e:73:fb:ec:
                    11:fa:3e:b8:92:83:fc:3b:bf:3f:fc:92:ad:c7:f1:
                    f3:56:78:a1:91:20:bc:4c:4f:f7:ae:ff:fe:a9:ec:
                    37:a9:33:00:83:43:aa:0d:67:79:31:a8:96:f4:42:
                    af:04:cc:de:0f:4c:0a:0c:d7:62:b8:6c:6f:dd:85:
                    f2:ab:f5:31:0e:1a:c4:42:2a:7d:fa:33:06:40:0f:
                    b7:1b:10:c0:8c:2a:48:4f:31:b9:1a:de:8e:52:61:
                    c4:95:a3:2b:93:8a:9c:fd:5d:ba:1e:88:14:3a:8b:
                    46:66:5d:16:b8:b2:e0:df:1e:b5:25:f3:e3:3e:c2:
                    1f:76:7d:ad:80:d4:0a:e0:ed:54:27:8c:80:10:13:
                    a9:13:43:2a:2e:b2:1e:2a:30:91:20:b9:d4:20:b2:
                    92:c9:ea:ea:5e:a7:a1:93:e9:10:81:95:77:00:21:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2B:09:9D:58:FF:46:F8:90:B5:57:4C:D2:CF:BA:9E:AB:6A:04:99
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:d7:a3:7a:51:7c:cc:4c:69:06:a6:50:56:41:b6:55:da:56:
         08:f0:79:b4:2f:82:73:77:41:5f:de:27:45:15:ba:dd:2b:b9:
         ad:85:6c:c7:87:14:71:d3:9a:46:7d:53:f7:75:e7:78:d7:55:
         09:c0:16:fb:01:22:fc:c3:a3:ac:2c:51:ce:45:be:7a:81:8e:
         4c:06:d5:55:d0:61:0d:7a:7e:ff:f3:54:c2:36:18:8c:88:4c:
         55:85:ad:6e:ff:6b:21:e5:be:cb:e1:0a:14:4e:ee:38:f5:68:
         b1:75:d8:7f:ab:9d:4b:9a:72:50:e1:59:68:86:67:8f:cd:f4:
         3a:e8:94:4a:bb:ca:0f:be:33:08:20:8b:ae:d5:11:d9:2b:ba:
         29:5f:c0:62:e7:25:57:74:c3:48:28:9c:0d:d4:68:d5:31:75:
         b1:f6:9c:e7:42:3c:d6:df:07:31:e4:c9:b0:77:61:d7:46:4e:
         9d:cc:8b:64:bd:00:b8:db:90:63:ff:f1:f1:68:9d:8b:2c:c9:
         64:17:30:e2:62:b0:6b:33:51:06:fe:a2:79:f9:00:7e:53:1c:
         58:86:20:22:70:9f:c8:10:4d:f2:a6:ad:25:94:aa:88:66:ae:
         b3:1b:da:4c:46:1b:00:90:5c:3f:94:01:24:ca:22:cc:90:e9:
         9a:57:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:35 2025 by rpki-client