Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          WLH565HbMutnHO/N1T7/tlgGCKRUo7AKsdHK64B7WzI=
Subject key identifier:   B5:6E:CE:9A:CA:96:03:1C:06:43:31:56:40:CE:67:BA:47:57:7F:3F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5212D444C7698F215ECCC6096BF6DA39121D1BBC
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa
Signing time:             Tue 19 May 2026 15:30:47 +0000
ROA not before:           Tue 19 May 2026 15:25:47 +0000
ROA not after:            Tue 18 May 2027 15:30:47 +0000
asID:                     16509
IP address blocks:        23.95.142.0/24 maxlen: 24
                          23.95.162.0/24 maxlen: 24
                          64.50.161.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.183.0/24 maxlen: 24
                          67.210.104.0/24 maxlen: 24
                          192.227.203.0/24 maxlen: 24
                          209.200.231.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:12:d4:44:c7:69:8f:21:5e:cc:c6:09:6b:f6:da:39:12:1d:1b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 19 15:25:47 2026 GMT
            Not After : May 18 15:30:47 2027 GMT
        Subject: CN=B56ECE9ACA96031C0643315640CE67BA47577F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:6b:ca:2b:93:79:56:bc:97:48:dd:db:f7:
                    23:8f:6e:39:c9:d1:be:4a:d4:07:94:da:16:c3:a1:
                    31:15:d1:9e:a7:70:06:c4:e3:2d:f8:37:aa:de:b3:
                    d2:ff:a3:67:76:e0:dd:09:0f:e2:68:8d:32:4a:b8:
                    c3:0e:64:c5:ce:64:45:d1:ad:a9:47:38:cc:f7:33:
                    f4:76:33:26:91:d4:02:54:ea:d2:84:7a:6c:01:04:
                    bf:1e:43:da:67:df:ea:fa:3e:a4:9d:97:6d:3d:dd:
                    56:d2:df:b5:c2:41:a0:6f:d6:3a:03:4f:80:7d:d8:
                    e5:5d:91:cc:5e:9a:50:b0:f2:4a:c2:8d:b6:f9:41:
                    a7:9a:fd:66:97:0e:d5:d6:dc:44:0d:93:f1:25:4d:
                    46:0b:5b:93:0a:c2:f5:70:2d:83:24:15:05:5d:17:
                    1b:ce:9c:99:1e:4e:21:1f:f1:fb:0e:a6:a6:a0:ea:
                    ab:f1:d4:19:18:13:c5:f3:7c:bc:2c:9b:1c:03:9a:
                    5f:0a:17:43:b5:f1:83:d7:28:86:c0:4e:57:d4:e1:
                    1d:d6:c5:d9:af:c8:4b:ed:11:27:39:ff:c9:4f:04:
                    81:58:26:18:b8:1d:e4:c9:ac:af:63:c3:72:17:01:
                    6f:c6:49:a2:58:d7:66:a8:ca:86:21:2d:55:7f:e5:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6E:CE:9A:CA:96:03:1C:06:43:31:56:40:CE:67:BA:47:57:7F:3F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  23.95.162.0/24
                  64.50.161.0/24
                  64.50.166.0/24
                  64.50.183.0/24
                  67.210.104.0/24
                  192.227.203.0/24
                  209.200.231.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:4e:00:9c:01:8b:ee:c9:36:4b:c8:fa:11:b2:d5:73:47:6b:
         b1:4c:10:11:58:cd:12:75:7e:7d:79:58:2c:d1:b8:3d:4a:ef:
         46:52:fb:ad:31:72:60:7a:58:35:f4:cc:0d:3e:82:7f:d8:d6:
         80:d8:40:e6:b8:10:38:f2:56:17:77:15:a2:73:19:67:d0:5f:
         0f:c7:a1:d5:01:aa:71:eb:e9:cc:e2:55:81:f4:83:9b:51:68:
         fc:c5:65:e7:e6:12:9a:09:42:03:0e:80:f7:a4:fc:99:c5:d5:
         87:16:48:c9:eb:d9:a0:50:87:d6:35:42:c0:9a:fa:f4:cb:75:
         e2:a4:81:52:9e:7e:57:f4:cf:73:6f:b5:4f:14:19:d2:0e:9c:
         2f:0f:27:d0:07:66:6b:a3:a7:c4:6b:75:cb:ad:c0:dd:be:e8:
         af:8c:89:e2:20:bf:be:90:aa:c0:7f:c4:b3:86:f1:80:64:f1:
         c6:e3:64:d6:0f:ee:51:7a:bc:14:c6:84:79:c3:f8:14:75:9e:
         31:5c:9b:3f:35:ac:e1:a8:9c:4b:a3:a5:43:a3:b2:38:d7:fd:
         a0:40:ca:ab:9d:18:3b:1c:31:98:e3:c9:98:b9:20:4c:d1:63:
         93:6a:b9:80:06:66:13:c5:a3:4c:9a:07:28:57:9d:a0:ef:5b:
         0c:49:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:38:56 2026 by rpki-client