Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          TSs7yTidxwy2zyN++1DeijI3ztY2zTS50nHILTYAbQE=
Subject key identifier:   01:51:29:E7:E3:D3:64:CF:24:27:83:C2:88:9C:86:0D:B0:ED:23:09
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1A97FE36B6F279B66FD7F8375FD22E9735A2D04E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa
Signing time:             Sat 11 Apr 2026 20:50:34 +0000
ROA not before:           Sat 11 Apr 2026 20:45:34 +0000
ROA not after:            Sat 10 Apr 2027 20:50:34 +0000
asID:                     16509
IP address blocks:        23.95.142.0/24 maxlen: 24
                          23.95.162.0/24 maxlen: 24
                          64.50.161.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.183.0/24 maxlen: 24
                          67.210.104.0/24 maxlen: 24
                          209.200.231.0/24 maxlen: 24
                          209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:97:fe:36:b6:f2:79:b6:6f:d7:f8:37:5f:d2:2e:97:35:a2:d0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 11 20:45:34 2026 GMT
            Not After : Apr 10 20:50:34 2027 GMT
        Subject: CN=015129E7E3D364CF242783C2889C860DB0ED2309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:b2:26:ef:73:3e:42:e3:91:45:0c:2f:f7:
                    24:bf:b0:ee:b1:0f:a7:d5:93:21:7c:2a:9f:a1:e6:
                    ae:0e:2f:e7:25:2c:46:66:fc:b9:a0:75:79:32:6f:
                    f0:77:34:88:16:66:4c:fb:ba:e5:e4:cc:36:c4:bd:
                    af:20:cc:89:3c:22:b6:61:81:a0:80:f4:15:bd:dd:
                    fc:ab:ac:a3:a5:f3:bb:83:c0:3d:cf:b5:fa:0f:d1:
                    bb:d9:f4:28:e5:3e:2b:ad:ad:7e:8b:03:dc:98:72:
                    23:40:da:db:6e:0e:9d:54:af:a9:10:24:b7:d3:a7:
                    56:61:bf:7a:29:39:c4:1d:ec:81:55:6e:6b:f5:6b:
                    84:db:59:5d:6a:c6:03:85:28:54:b7:f0:28:b3:14:
                    43:9e:c6:83:73:ca:df:73:ca:79:4e:68:1d:5e:f4:
                    cd:67:8b:8f:52:8f:04:67:23:1f:19:3d:77:51:26:
                    f9:50:a6:69:e6:80:20:85:18:e3:6c:18:84:01:28:
                    6b:d6:f5:93:a2:4f:f9:1d:13:11:8b:bc:f8:88:46:
                    a1:df:dc:89:1d:d5:b4:b0:55:a2:bc:d9:cd:08:95:
                    52:7a:28:8b:05:be:5b:28:3b:f1:36:71:8e:9f:17:
                    89:3e:7e:bf:f9:1f:23:22:23:85:1b:e6:20:fc:b5:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:51:29:E7:E3:D3:64:CF:24:27:83:C2:88:9C:86:0D:B0:ED:23:09
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  23.95.162.0/24
                  64.50.161.0/24
                  64.50.166.0/24
                  64.50.183.0/24
                  67.210.104.0/24
                  209.200.231.0/24
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:bc:7c:23:eb:6e:60:f6:e7:82:6c:34:22:e6:e7:a5:65:
         15:9b:a8:14:e8:8c:fe:d8:d0:41:51:d4:ae:3b:ec:67:09:47:
         19:a6:18:d1:6a:27:9c:f6:ea:ea:1f:80:b4:b6:76:93:ed:ce:
         7a:7c:b2:b5:e0:04:cf:ea:82:ba:e3:50:2a:96:06:31:70:8f:
         19:e6:51:75:79:ab:9f:72:53:21:69:ee:53:a9:ef:c4:42:85:
         f1:82:1e:3f:97:81:b0:be:f9:e9:35:f0:51:29:ca:3b:eb:d8:
         98:71:d2:f3:9e:27:dd:5d:76:31:09:98:cb:12:1e:38:37:c4:
         f0:d5:8b:70:b6:aa:f5:f5:6c:32:ee:86:5a:c0:fc:0a:c5:bc:
         51:2c:ac:88:30:26:93:e3:77:55:c1:dc:2f:f5:8d:2d:7b:da:
         90:05:a8:87:c0:58:03:cb:90:77:8a:62:5e:37:75:3f:4c:b9:
         2e:18:ae:9d:ab:07:07:1e:51:5a:28:90:ae:b7:80:da:49:c5:
         34:b1:fb:f5:f0:7c:f1:45:7c:11:3e:2e:e7:d7:ca:91:15:b8:
         ac:54:ac:a9:60:72:e1:a0:eb:41:15:64:2a:d2:4a:cd:ea:fb:
         b0:08:73:d3:7d:99:e3:1b:53:f7:2d:83:a0:f7:c4:8e:02:0d:
         65:f4:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:39:06 2026 by rpki-client