Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          p8X71EBwln/0UBVjDhZovgf7zD2L5qQIKV8pDzmLnGQ=
Subject key identifier:   3C:97:58:E7:86:2F:76:96:08:BD:DF:68:E6:B3:78:9F:DA:A8:3D:65
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       649B012117AFB50BC7C49E50E42C5D81114C82C1
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS16276.roa
Signing time:             Mon 02 Nov 2026 08:31:06 +0000
ROA not before:           Mon 02 Nov 2026 08:26:06 +0000
ROA not after:            Mon 01 Nov 2027 08:31:06 +0000
asID:                     16276
IP address blocks:        199.235.0.0/24 maxlen: 24
                          199.235.1.0/24 maxlen: 24
                          199.235.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 16:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9b:01:21:17:af:b5:0b:c7:c4:9e:50:e4:2c:5d:81:11:4c:82:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Nov  2 08:26:06 2026 GMT
            Not After : Nov  1 08:31:06 2027 GMT
        Subject: CN=3C9758E7862F769608BDDF68E6B3789FDAA83D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:ec:17:3c:df:68:0d:71:8d:6a:25:90:61:
                    c6:8b:2e:24:34:11:4c:20:b2:fe:74:ca:2c:53:b7:
                    d0:99:48:36:45:f6:f0:44:0c:1f:08:96:85:75:15:
                    e8:de:9f:57:5b:ff:66:5c:4d:0a:35:7b:5d:c6:98:
                    71:4a:2f:e1:c7:b5:01:b2:6a:fb:f5:36:98:0a:99:
                    e4:4a:d9:c9:d4:7e:ad:50:4d:f2:a1:4a:ed:4d:27:
                    cf:b6:82:42:36:74:71:b6:5c:be:a6:fc:38:26:0c:
                    82:ea:d9:29:93:3f:75:4d:d4:25:4d:67:37:65:a2:
                    53:7a:12:c1:c2:b4:71:81:9c:d1:f6:df:2c:86:1d:
                    c2:a5:1a:41:85:46:20:4d:f1:a5:55:07:db:70:e2:
                    63:0b:68:03:91:50:70:a5:4e:73:a9:67:a6:d9:30:
                    ea:44:10:49:11:78:e8:61:30:ce:ee:b2:5a:81:39:
                    f4:e9:ef:aa:a4:b8:27:36:2e:a3:a7:9c:0a:d1:55:
                    3a:e3:6a:61:7b:f2:fd:4c:21:7e:6a:13:34:0d:09:
                    3b:db:76:28:39:3b:5c:a4:96:b3:e2:81:8f:93:37:
                    3b:9c:6a:f4:e9:e2:95:cb:89:a7:1a:cd:35:3b:a3:
                    9e:fd:f5:b9:15:f7:43:7f:e2:75:d8:12:36:c8:d3:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:97:58:E7:86:2F:76:96:08:BD:DF:68:E6:B3:78:9F:DA:A8:3D:65
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.0.0/23
                  199.235.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:68:0b:be:01:80:70:b1:ad:ca:45:71:0d:1f:c7:59:23:f1:
         f7:61:19:18:66:a0:bf:db:7d:1d:b1:d3:a9:5a:2e:5e:f1:74:
         9f:58:c0:dc:e8:fd:fa:cd:01:6d:0a:97:11:69:db:2a:d6:45:
         6c:81:4f:a9:50:55:5f:43:48:12:64:f5:6b:f1:8b:be:76:9f:
         50:74:05:7d:b7:3b:ca:ad:4f:48:e3:b4:e8:06:6b:34:3c:69:
         d7:e3:ed:66:1d:fa:2e:f5:e9:4a:25:a9:b3:d8:80:42:38:df:
         e5:e7:d6:57:ea:fa:66:d4:a2:44:36:e7:dc:27:2c:80:44:45:
         38:c9:f4:c4:0d:1e:cf:fb:2e:c6:2e:5d:f2:90:03:60:57:3d:
         87:73:01:2f:87:12:bb:73:23:ba:74:b6:43:fc:d1:bd:73:a9:
         73:1c:3e:ca:5b:36:dc:0a:5e:dc:1b:e3:2c:0c:0e:1c:eb:0d:
         00:67:b6:d1:26:48:c9:88:98:d5:5b:30:4c:3e:b1:09:c5:b3:
         60:b4:41:24:3c:f5:6d:90:7f:50:ba:bf:09:0c:d2:de:60:2f:
         15:e3:16:6b:51:c5:e3:11:cd:71:37:d0:f3:16:c4:47:56:b4:
         12:c4:95:fa:0a:21:5a:a0:e1:b8:14:4e:16:c9:f5:68:a6:88:
         6b:0f:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:52:00 2026 by rpki-client