Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          +ShKbBRz4UgRctF12DwcK3J5yfUqQk+sWkdcx5HUALE=
Subject key identifier:   C7:71:02:1F:4F:84:22:49:12:15:25:9B:3D:26:C9:3C:A2:D8:7E:39
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       251EE27E7569982B6B6AF8A351C1AEAE1A945437
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
Signing time:             Wed 12 Aug 2026 03:52:23 +0000
ROA not before:           Wed 12 Aug 2026 03:47:23 +0000
ROA not after:            Wed 11 Aug 2027 03:52:23 +0000
asID:                     16276
IP address blocks:        23.95.142.0/24 maxlen: 24
                          72.11.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1e:e2:7e:75:69:98:2b:6b:6a:f8:a3:51:c1:ae:ae:1a:94:54:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 12 03:47:23 2026 GMT
            Not After : Aug 11 03:52:23 2027 GMT
        Subject: CN=C771021F4F8422491215259B3D26C93CA2D87E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:a4:34:c4:8e:ed:6d:fa:ad:55:5d:ac:42:
                    d2:27:bd:d6:ff:b9:b7:92:bc:08:1d:e6:84:aa:a6:
                    69:0f:52:a4:a6:b6:cc:35:4c:f4:79:de:d7:2c:5c:
                    42:2a:5d:a9:87:53:a5:9c:f8:bc:0f:39:7b:00:ca:
                    86:a2:04:f0:bd:39:b3:66:a2:14:8f:97:e8:47:b2:
                    52:39:b5:72:13:8d:ae:b7:c9:52:bb:2a:7c:4f:ec:
                    3e:6d:8a:1a:9b:73:d1:75:25:ab:c2:61:14:e2:2e:
                    d8:8b:8a:50:f3:5a:6e:2d:94:46:60:83:87:b8:15:
                    4a:47:43:a2:ac:83:bf:dd:c3:60:fa:57:45:0e:9e:
                    bb:49:9a:f8:02:fc:88:22:cf:ec:a5:a5:36:c3:17:
                    d1:96:cf:73:2e:2d:8f:98:9a:ee:2b:ab:30:69:4c:
                    25:00:d0:38:84:79:eb:bc:a6:f3:d3:a2:d3:1c:35:
                    26:47:10:bf:d2:4d:f4:8a:de:ce:f5:25:3c:ec:de:
                    e2:52:c9:2e:af:37:e7:0a:9e:e3:d5:87:ff:65:58:
                    00:6f:4d:b2:5f:04:9e:86:17:6e:10:12:a4:99:c2:
                    6c:a2:3f:5f:1b:e4:50:b7:ca:91:79:f4:ba:da:8b:
                    de:73:20:57:61:93:8c:a7:a4:04:58:16:6c:ab:de:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:71:02:1F:4F:84:22:49:12:15:25:9B:3D:26:C9:3C:A2:D8:7E:39
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  72.11.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:ef:75:58:19:12:67:8f:8c:6b:82:69:bb:c9:82:37:64:
         5a:90:e5:b9:3a:0c:ae:44:2d:94:f8:a8:eb:33:42:84:11:85:
         74:16:4f:a7:6c:a2:8d:5b:57:92:b1:7c:e5:c1:8e:ca:e7:1e:
         86:9c:3a:db:b9:d4:0b:fe:94:5a:62:da:91:5b:84:d1:6b:05:
         b5:d2:bd:9a:65:b0:4e:01:42:33:cf:93:b8:49:b1:da:8c:f6:
         84:34:5c:ca:f5:ee:c6:3e:84:08:0d:3a:ab:d8:ef:f9:19:3f:
         88:13:a0:77:70:75:90:50:71:32:a0:8b:20:89:dd:ef:33:4a:
         37:9e:77:41:9f:e6:44:08:96:2d:e1:7f:46:05:26:c6:2d:98:
         b2:b8:79:9c:39:0b:44:62:10:ab:ac:68:75:89:80:1b:88:17:
         7b:b6:ce:7c:25:aa:22:0a:b5:15:af:49:3b:a1:9c:a6:84:47:
         e2:38:d7:9d:3b:9c:55:d3:0f:89:2f:2d:e2:47:ab:1a:1e:0a:
         63:f7:1b:74:ed:de:bd:af:a5:16:60:1f:15:1b:9d:29:56:83:
         a8:d9:45:6a:d2:45:54:ce:27:aa:78:2a:92:38:cd:dc:f8:9a:
         91:bc:65:82:a4:b8:88:a5:37:c1:04:43:80:0f:5a:18:cf:1b:
         2c:30:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:46:41 2026 by rpki-client