Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          FudY+JSOgH6onUjTHqIBVHqr3FhX0lFczmx4j92BHd8=
Subject key identifier:   F8:A5:75:4A:03:78:1F:94:24:4D:2B:F4:D7:B2:1A:E4:36:A7:8D:BD
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1E4AED7A005127310208B396E414BCFA0DFC967F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa
Signing time:             Sun 24 May 2026 02:18:29 +0000
ROA not before:           Sun 24 May 2026 02:13:29 +0000
ROA not after:            Sun 23 May 2027 02:18:29 +0000
asID:                     16509
IP address blocks:        157.254.2.0/23 maxlen: 24
                          157.254.141.0/24 maxlen: 24
                          157.254.169.0/24 maxlen: 24
                          157.254.200.0/22 maxlen: 22
                          157.254.217.0/24 maxlen: 24
                          157.254.224.0/24 maxlen: 24
                          157.254.239.0/24 maxlen: 24
                          192.231.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4a:ed:7a:00:51:27:31:02:08:b3:96:e4:14:bc:fa:0d:fc:96:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 24 02:13:29 2026 GMT
            Not After : May 23 02:18:29 2027 GMT
        Subject: CN=F8A5754A03781F94244D2BF4D7B21AE436A78DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:ba:4e:7d:c2:44:dc:42:5e:8d:23:9e:a2:
                    c3:8e:01:b5:74:6a:8d:e8:ed:0d:69:19:87:e4:d5:
                    e4:7e:d3:5c:bf:fd:45:91:6b:5c:34:e0:9e:37:db:
                    09:e0:e2:ab:bf:32:6f:a7:2e:35:6f:f7:fc:48:61:
                    53:0a:3d:15:b9:d7:a2:35:08:26:89:2a:be:02:d1:
                    39:2f:d5:6e:6d:d9:b6:ac:9c:e3:d7:b7:9f:19:d3:
                    f2:fd:a4:14:6a:f9:47:d1:29:0a:42:33:ce:4f:b8:
                    16:99:12:e5:3e:25:10:71:17:bb:b7:75:09:b1:78:
                    de:bc:a4:b9:28:fa:d1:43:f7:97:59:4e:d2:a7:0d:
                    ba:21:e2:31:e8:85:c3:b1:aa:41:59:27:ca:11:2a:
                    64:2a:89:74:f4:62:f9:41:c2:66:8c:70:ba:42:0e:
                    ae:34:ef:fc:97:5a:36:bb:34:9b:8d:4c:77:2d:44:
                    b2:38:cc:94:d3:76:fb:8d:21:c1:dd:12:98:64:ed:
                    d0:51:7e:57:33:9d:a6:5d:6a:41:8a:01:bf:24:41:
                    85:9d:7f:c6:96:de:e0:db:13:1d:18:29:69:fe:91:
                    7f:63:af:69:08:69:ef:7e:d6:0c:b6:d6:52:a2:ff:
                    70:da:7e:f9:40:fc:38:6a:b9:24:2c:e4:d8:f1:17:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A5:75:4A:03:78:1F:94:24:4D:2B:F4:D7:B2:1A:E4:36:A7:8D:BD
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.2.0/23
                  157.254.141.0/24
                  157.254.169.0/24
                  157.254.200.0/22
                  157.254.217.0/24
                  157.254.224.0/24
                  157.254.239.0/24
                  192.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:13:4d:99:01:de:89:84:1a:91:cf:c3:5c:0e:6e:e8:9e:
         74:57:59:62:85:15:0b:c2:12:d1:c2:4a:51:8a:e7:9f:07:c7:
         cc:a1:5c:6a:b9:28:48:94:3c:4b:d0:10:8c:b0:1d:a4:b0:22:
         a2:ac:e6:00:c3:cb:c3:07:a9:e0:6b:40:57:11:ed:44:1b:5a:
         bf:67:ca:c9:17:04:fb:47:e8:6f:c2:54:44:de:72:40:57:24:
         83:8f:a0:3f:e5:36:15:9d:6d:0e:4c:5c:11:a4:89:c2:cf:e0:
         95:92:ff:dc:01:b9:ad:f1:9e:49:e1:4d:f4:c5:03:b3:3c:61:
         1e:33:c5:af:85:93:62:dc:6b:29:4a:f1:1e:32:69:20:62:59:
         d9:b3:02:c7:d5:36:f9:d1:ac:70:a5:17:b1:6e:91:e7:67:35:
         9c:4e:9b:7e:8e:d4:ec:3b:80:53:0e:7a:95:7e:ee:8f:ba:dd:
         6e:06:69:76:ec:f1:ba:eb:da:f8:2b:7f:39:91:41:86:cf:c5:
         b5:f7:5c:f1:ba:be:ae:68:31:ec:c5:20:f1:46:ab:6f:74:29:
         75:36:ad:cd:5c:09:a1:3b:d0:8b:41:cf:d8:bc:ab:82:23:02:
         e7:44:9b:a3:d3:24:45:6c:cf:f9:9b:d5:e6:a5:a2:c4:fd:b0:
         98:37:78:6c
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIUHkrtegBRJzECCLOW5BS8+g38ln8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNTI0MDIxMzI5WhcNMjcwNTIzMDIxODI5
WjAzMTEwLwYDVQQDEyhGOEE1NzU0QTAzNzgxRjk0MjQ0RDJCRjREN0IyMUFFNDM2
QTc4REJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPO6Tn3CRNxC
Xo0jnqLDjgG1dGqN6O0NaRmH5NXkftNcv/1FkWtcNOCeN9sJ4OKrvzJvpy41b/f8
SGFTCj0VudeiNQgmiSq+AtE5L9Vubdm2rJzj17efGdPy/aQUavlH0SkKQjPOT7gW
mRLlPiUQcRe7t3UJsXjevKS5KPrRQ/eXWU7Spw26IeIx6IXDsapBWSfKESpkKol0
9GL5QcJmjHC6Qg6uNO/8l1o2uzSbjUx3LUSyOMyU03b7jSHB3RKYZO3QUX5XM52m
XWpBigG/JEGFnX/Glt7g2xMdGClp/pF/Y69pCGnvftYMttZSov9w2n75QPw4arkk
LOTY8ReERwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPildUoDeB+UJE0r9NeyGuQ2
p429MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG
CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBnf4CAwQAnf6NAwQAnf6pAwQCnf7I
AwQAnf7ZAwQAnf7gAwQAnf7vAwQAwOcQMA0GCSqGSIb3DQEBCwUAA4IBAQBATBNN
mQHeiYQakc/DXA5u6J50V1lihRULwhLRwkpRiuefB8fMoVxquShIlDxL0BCMsB2k
sCKirOYAw8vDB6nga0BXEe1EG1q/Z8rJFwT7R+hvwlRE3nJAVySDj6A/5TYVnW0O
TFwRpInCz+CVkv/cAbmt8Z5J4U30xQOzPGEeM8WvhZNi3GspSvEeMmkgYlnZswLH
1Tb50axwpRexbpHnZzWcTpt+jtTsO4BTDnqVfu6Put1uBml27PG669r4K385kUGG
z8W191zxur6uaDHsxSDxRqtvdCl1Nq3NXAmhO9CLQc/YvKuCIwLnRJuj0yRFbM/5
m9XmpaLE/bCYN3hs
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:38:13 2026 by rpki-client