Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          mchK5wrVjr7nT9P3wLem/gC+UU9rb9vMhxRfmRBvvQs=
Subject key identifier:   66:C7:02:1B:6C:4E:B0:E7:A4:24:03:0D:52:FF:81:52:6C:89:D3:79
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1D0DFB04259A3A20AB446FED21E8A7739DF15BD3
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa
Signing time:             Tue 24 Mar 2026 23:35:06 +0000
ROA not before:           Tue 24 Mar 2026 23:30:06 +0000
ROA not after:            Tue 23 Mar 2027 23:35:06 +0000
asID:                     16276
IP address blocks:        40.183.94.0/24 maxlen: 24
                          40.183.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0d:fb:04:25:9a:3a:20:ab:44:6f:ed:21:e8:a7:73:9d:f1:5b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar 24 23:30:06 2026 GMT
            Not After : Mar 23 23:35:06 2027 GMT
        Subject: CN=66C7021B6C4EB0E7A424030D52FF81526C89D379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:fd:20:24:a5:16:ab:ea:f3:1a:74:e8:13:
                    b7:d8:85:20:c3:c8:71:dc:ec:6d:b1:8e:69:78:12:
                    33:02:25:54:51:81:f8:b9:55:b1:a7:a0:ef:73:a3:
                    d1:21:15:40:14:74:08:24:26:39:b2:cf:35:93:17:
                    13:09:30:c0:94:f6:a6:92:2c:82:51:e7:93:11:62:
                    71:4d:3d:e7:37:7c:9e:9f:dd:a5:a9:22:cc:57:57:
                    c1:f9:50:75:89:0d:24:97:c1:79:1f:0b:d5:06:28:
                    87:88:b4:5e:33:af:21:f8:32:e0:36:ef:9c:51:24:
                    18:26:d4:bc:af:98:86:48:c0:56:d6:c1:a0:34:a3:
                    f8:fb:5e:58:41:81:a2:b1:4e:50:2a:b8:a4:1b:3d:
                    58:64:b0:1c:82:11:8c:5e:4b:27:58:6a:64:da:fc:
                    84:ac:9d:53:8b:35:e4:c7:e0:dd:20:88:04:af:0c:
                    52:28:af:f6:e1:e6:a1:37:15:33:b6:80:77:7e:fd:
                    31:f9:d7:1a:1d:3a:7a:32:c5:fb:49:a0:8d:5d:f2:
                    79:74:1d:4b:5d:c6:c8:49:67:eb:67:99:a5:bd:56:
                    3e:36:2f:9e:93:5b:bf:ed:7b:e9:10:44:94:12:0e:
                    ac:1e:9b:76:0f:0c:c0:41:8d:64:4d:ad:0d:b9:7a:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C7:02:1B:6C:4E:B0:E7:A4:24:03:0D:52:FF:81:52:6C:89:D3:79
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.94.0/24
                  40.183.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:40:6f:f6:48:92:48:ba:ca:03:10:c7:55:e5:9b:f0:f7:a7:
         0b:53:9d:bc:85:6d:6e:13:99:c1:19:cc:a7:a4:cb:9f:5f:6e:
         ab:32:13:8f:dd:c1:df:30:94:0d:e9:b4:da:26:10:fc:ee:23:
         b5:54:ee:6e:e2:75:f1:84:fc:49:ef:26:6e:1f:90:59:b9:62:
         8a:88:f4:d0:03:b2:7a:1a:45:fb:d2:7b:a6:90:89:73:7b:11:
         9e:01:09:d8:5f:4e:37:1f:8c:85:67:6e:52:1c:d8:09:93:27:
         14:57:77:c7:b7:68:aa:d8:dd:9b:ca:f8:66:ca:b0:57:b0:8d:
         e8:31:41:3d:02:5c:58:d2:17:a1:f5:36:c2:31:d7:48:e2:2e:
         3a:00:aa:0f:34:2e:ee:5d:6b:20:6a:9e:2a:54:45:2a:fd:30:
         4c:98:72:3a:5b:35:8e:2a:1b:95:17:8d:7b:be:7a:c1:06:be:
         db:ab:bd:72:00:bb:dc:2e:05:c7:65:09:95:3f:64:d5:07:88:
         f4:fc:6e:5b:db:76:e8:bb:5d:02:ac:0a:ca:e1:3c:58:71:ba:
         5a:e5:d7:8d:af:07:20:45:6e:be:21:32:85:bb:2b:0f:7b:0a:
         d8:f8:26:d5:dd:7c:f3:70:d2:73:c1:71:ea:9f:55:0c:25:24:
         a1:8e:f5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:06:21 2026 by rpki-client