Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: knThgbZt/LfRXvjAUNW+6bf91P/F+ZvYm2+8Gn08PKY=
Subject key identifier: 30:5C:54:75:DF:91:FA:01:92:C6:E8:CF:CE:AE:39:17:F2:75:EA:0D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3F3C8BE0F31D30AD1F3D6C00817E9BF72333CCD5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS16509.roa
Signing time: Thu 04 Jun 2026 15:58:50 +0000
ROA not before: Thu 04 Jun 2026 15:53:50 +0000
ROA not after: Thu 03 Jun 2027 15:58:50 +0000
asID: 16509
IP address blocks: 2a0a:6043::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3c:8b:e0:f3:1d:30:ad:1f:3d:6c:00:81:7e:9b:f7:23:33:cc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:50 2026 GMT
Not After : Jun 3 15:58:50 2027 GMT
Subject: CN=305C5475DF91FA0192C6E8CFCEAE3917F275EA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:64:9f:fa:ae:70:05:c3:45:e9:a9:67:f6:
cd:67:f8:21:98:b7:30:37:8f:04:8b:7c:31:e2:77:
3e:06:93:4e:6d:12:bb:6f:f5:47:ab:07:66:15:e5:
8d:2c:5e:53:20:aa:4e:5b:c4:ef:da:d5:32:e7:08:
79:97:5a:10:a0:c1:cd:3e:90:39:aa:17:f1:3a:60:
c3:34:b4:70:34:6b:3a:f0:e6:9e:be:11:4c:dc:6f:
fc:ea:7a:a8:be:10:df:fb:8e:b1:f4:19:b5:ac:9c:
25:6f:b9:b9:14:55:96:ad:75:0a:d1:34:77:b1:cb:
ec:3e:ad:5a:ec:03:ed:57:2b:c5:99:f2:82:8d:00:
d0:52:ce:e5:25:34:a4:59:79:fc:cb:58:67:72:36:
31:63:0d:28:45:64:ee:20:9f:3e:b1:11:54:b4:bf:
77:f0:14:fe:37:75:96:c4:40:e2:c9:72:e9:42:62:
71:7f:be:c9:4d:2e:97:03:6a:26:16:bd:ce:8e:07:
f9:64:cc:d2:28:52:57:d3:5f:99:b3:12:ec:76:cf:
13:89:9d:6e:10:ae:0c:6a:0e:aa:7a:1d:4f:8d:9b:
a8:df:8a:a8:65:0c:7b:66:04:63:07:53:dd:03:06:
2e:64:fa:dd:7f:e7:75:1e:0d:ea:e8:c1:16:24:64:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5C:54:75:DF:91:FA:01:92:C6:E8:CF:CE:AE:39:17:F2:75:EA:0D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6043::/40
Signature Algorithm: sha256WithRSAEncryption
41:75:25:e2:da:4f:ed:58:76:92:32:0e:3c:83:a6:46:46:b4:
c6:d3:33:7e:4f:65:74:5a:1d:44:ce:d4:62:f1:84:6d:60:d0:
e4:56:31:c2:2e:31:58:0b:b8:34:55:1c:9c:3a:e2:7f:a5:15:
4d:ab:5f:d5:22:e5:d6:33:d7:c4:b5:ee:47:d6:82:10:00:a9:
61:eb:76:b3:28:d3:9f:7e:c1:5c:3f:9f:90:2a:83:e1:c1:c0:
cb:61:f0:16:48:41:2d:d0:69:99:b5:30:35:16:bc:71:28:1e:
ab:37:66:ad:33:01:36:98:2b:ba:d6:2f:36:c1:23:37:15:af:
ee:8f:ce:d5:97:a5:fd:5d:45:36:69:a9:4c:20:4a:c6:fb:27:
b4:94:f0:6d:43:e6:ca:b6:25:c7:9a:6d:bb:8c:8f:83:f8:72:
73:51:dc:90:df:25:85:16:ee:c4:9d:1a:9c:33:cf:64:ee:0a:
08:1a:96:c9:56:39:17:68:69:65:25:00:4e:62:33:1d:5e:59:
9d:16:15:39:09:ca:28:43:2e:17:9d:32:34:d0:8a:e6:30:74:
5a:60:f1:10:4f:64:38:8f:c7:69:3e:43:16:95:d4:35:6d:ff:
8e:b7:b8:6d:7f:ef:64:38:58:a4:a8:5c:8e:53:3f:03:0e:66:
16:5a:31:95
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUPzyL4PMdMK0fPWwAgX6b9yMzzNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNTBaFw0yNzA2MDMxNTU4NTBaMDMxMTAvBgNV
BAMTKDMwNUM1NDc1REY5MUZBMDE5MkM2RThDRkNFQUUzOTE3RjI3NUVBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSWSf+q5wBcNF6aln9s1n+CGY
tzA3jwSLfDHidz4Gk05tErtv9UerB2YV5Y0sXlMgqk5bxO/a1TLnCHmXWhCgwc0+
kDmqF/E6YMM0tHA0azrw5p6+EUzcb/zqeqi+EN/7jrH0GbWsnCVvubkUVZatdQrR
NHexy+w+rVrsA+1XK8WZ8oKNANBSzuUlNKRZefzLWGdyNjFjDShFZO4gnz6xEVS0
v3fwFP43dZbEQOLJculCYnF/vslNLpcDaiYWvc6OB/lkzNIoUlfTX5mzEux2zxOJ
nW4QrgxqDqp6HU+Nm6jfiqhlDHtmBGMHU90DBi5k+t1/53UeDerowRYkZJsNAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUMFxUdd+R+gGSxujPzq45F/J16g0wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MTY1MDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAqCmBDADANBgkqhkiG9w0BAQsFAAOCAQEAQXUl4tpP
7Vh2kjIOPIOmRka0xtMzfk9ldFodRM7UYvGEbWDQ5FYxwi4xWAu4NFUcnDrif6UV
Tatf1SLl1jPXxLXuR9aCEACpYet2syjTn37BXD+fkCqD4cHAy2HwFkhBLdBpmbUw
NRa8cSgeqzdmrTMBNpgrutYvNsEjNxWv7o/O1Zel/V1FNmmpTCBKxvsntJTwbUPm
yrYlx5ptu4yPg/hyc1HckN8lhRbuxJ0anDPPZO4KCBqWyVY5F2hpZSUATmIzHV5Z
nRYVOQnKKEMuF50yNNCK5jB0WmDxEE9kOI/HaT5DFpXUNW3/jre4bX/vZDhYpKhc
jlM/Aw5mFloxlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:03 2026 by rpki-client