Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          yfWJOBiJ7qcS1PWc3V+dGrVqI7relJqmqwj3k/SOhzk=
Subject key identifier:   79:AD:6C:F0:66:49:6F:91:31:82:ED:67:05:62:B3:7D:81:6D:50:20
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       175639437FB3D3DBA72E48BF1AFC0844CA6D9FA1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa
Signing time:             Fri 01 Aug 2025 06:34:53 +0000
ROA not before:           Fri 01 Aug 2025 06:29:53 +0000
ROA not after:            Fri 31 Jul 2026 06:34:53 +0000
asID:                     16276
IP address blocks:        157.254.30.0/24 maxlen: 24
                          157.254.155.0/24 maxlen: 24
                          157.254.218.0/24 maxlen: 24
                          199.103.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:56:39:43:7f:b3:d3:db:a7:2e:48:bf:1a:fc:08:44:ca:6d:9f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug  1 06:29:53 2025 GMT
            Not After : Jul 31 06:34:53 2026 GMT
        Subject: CN=79AD6CF066496F913182ED670562B37D816D5020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:af:8c:80:10:b3:ea:8f:d0:a5:bd:1b:28:
                    6a:5c:83:4f:ef:3f:ad:45:62:f1:9d:42:75:45:d3:
                    a1:9d:77:7e:24:42:c0:6a:78:ce:b4:52:46:ac:8c:
                    da:60:39:34:3a:00:66:c1:2f:2d:ca:d5:99:ee:96:
                    41:d4:46:c2:91:ff:42:c4:84:41:d4:a8:ad:e7:a5:
                    2b:ed:ff:1d:f7:53:59:07:0c:95:85:13:17:3f:5d:
                    68:2e:21:12:00:f6:ba:14:03:b8:c0:33:b6:93:7d:
                    d5:83:f2:67:89:e9:db:59:50:9c:a4:1f:a1:ba:d0:
                    bd:0f:4f:37:56:d2:3a:ee:ea:73:b7:c1:43:39:e3:
                    e3:96:1b:21:51:e8:87:73:c4:36:2d:46:a1:8a:fb:
                    9c:72:c0:2a:3d:08:a4:da:0c:dd:d5:cb:94:41:06:
                    21:6c:f4:f9:65:2c:24:7f:25:c2:b0:76:07:cf:9a:
                    d4:f7:d2:b6:d5:16:3c:bc:84:74:1b:9f:b0:b3:38:
                    71:d4:bc:1a:13:b6:43:6a:2f:86:f9:cd:98:77:72:
                    09:45:96:e3:94:6c:bb:a6:55:f5:7d:ca:24:46:73:
                    af:6d:0a:76:42:a4:27:8f:1a:a8:51:5c:8a:6f:60:
                    e3:c9:c6:9d:80:44:bd:9e:a7:3f:a0:92:6a:b0:82:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AD:6C:F0:66:49:6F:91:31:82:ED:67:05:62:B3:7D:81:6D:50:20
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.30.0/24
                  157.254.155.0/24
                  157.254.218.0/24
                  199.103.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:7c:5e:35:e5:c8:dc:79:53:cb:ca:6c:52:7b:22:4d:78:f1:
         51:9e:cb:72:e0:b8:cb:f3:4f:17:d6:37:c0:f8:69:59:06:df:
         19:34:73:3e:be:38:b6:48:e5:e2:de:91:16:3d:df:c8:4c:8b:
         8b:ad:48:55:c3:77:ef:3a:64:59:87:9e:ba:72:f8:1d:d4:f6:
         5b:8d:5c:d9:b7:34:8f:4c:e6:23:7d:2f:8d:49:39:67:8e:64:
         68:34:f3:16:cf:9c:13:30:ea:12:6c:da:25:cf:7f:4b:d1:0a:
         c1:08:70:fa:03:f9:d1:2b:e6:15:47:60:46:2f:32:28:46:3d:
         c0:b7:03:c4:be:93:e4:ba:82:7e:f6:52:fc:23:8b:bc:e7:cf:
         c9:83:fd:bb:17:e8:89:26:72:5c:a8:c9:8a:48:8c:ad:d4:be:
         23:87:f8:80:3c:ee:ef:a9:36:6a:7a:5b:72:15:c4:39:fa:e1:
         24:33:b3:0d:f5:c2:64:8c:8c:ec:f8:39:1e:f3:90:45:8c:ea:
         19:9d:0b:78:ff:07:2d:e2:2a:6c:c8:ca:91:2b:38:72:0c:15:
         75:d9:90:49:18:96:c0:35:31:53:c1:b1:a7:08:93:66:1c:40:
         53:00:93:01:3f:40:e9:e5:37:bf:4b:01:18:e4:ad:52:99:01:
         46:18:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:04 2025 by rpki-client