Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          iLJkdJ5zhDcAzv6kbBn8KMhZstnBWTWRNXNX9kpxEzQ=
Subject key identifier:   DF:86:5B:EE:9C:3B:37:CE:68:EF:24:9F:60:66:EF:70:26:C1:99:CB
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3A4CB7E29745AF25FCA204E8D524A9505E379B0C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa
Signing time:             Thu 19 Jun 2025 09:39:35 +0000
ROA not before:           Thu 19 Jun 2025 09:34:35 +0000
ROA not after:            Thu 18 Jun 2026 09:39:35 +0000
asID:                     16509
IP address blocks:        40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 12:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4c:b7:e2:97:45:af:25:fc:a2:04:e8:d5:24:a9:50:5e:37:9b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 19 09:34:35 2025 GMT
            Not After : Jun 18 09:39:35 2026 GMT
        Subject: CN=DF865BEE9C3B37CE68EF249F6066EF7026C199CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:91:23:b3:8e:fd:c2:d4:42:3d:49:41:27:
                    e9:12:f2:90:c3:d7:21:50:c0:4e:c2:a8:f2:90:e1:
                    2b:5e:85:a3:a1:8c:e6:df:8d:86:9a:94:c9:1f:5c:
                    13:08:44:da:14:79:9e:a2:4b:4c:49:bf:0e:97:ee:
                    6d:74:aa:a9:92:ee:3c:0b:ee:85:7b:c7:af:55:ff:
                    57:12:dc:60:60:3d:de:be:b0:7f:d6:92:a5:79:7f:
                    90:67:e5:e0:18:9d:c2:13:b6:bf:25:15:ed:b7:ac:
                    d2:c2:44:d9:c8:05:71:d7:40:35:fb:5b:d6:c0:6e:
                    ce:27:3f:4a:ae:39:6f:2c:67:c7:71:1c:ca:c6:cd:
                    be:57:f9:a6:56:7a:4b:ea:40:04:c7:b9:9b:e3:2d:
                    ed:23:3b:a7:5f:b5:33:14:e5:54:9b:33:5f:36:b6:
                    4a:97:43:b9:38:cc:41:e9:f8:f7:b3:68:89:65:7d:
                    fe:2b:3c:2d:0a:be:7c:65:63:89:55:76:ff:ef:e2:
                    aa:67:bc:a3:22:3d:31:05:37:0c:fd:6d:dd:1f:6b:
                    68:fd:af:88:dd:3d:8d:96:19:fb:76:72:d0:11:fc:
                    3c:34:14:59:0b:27:8f:7b:ce:e5:42:2f:aa:b6:01:
                    e3:b2:ee:6a:1b:30:d0:b0:e5:77:7f:33:4a:bb:61:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:86:5B:EE:9C:3B:37:CE:68:EF:24:9F:60:66:EF:70:26:C1:99:CB
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:38:64:c3:63:19:99:a9:08:6b:48:45:6f:83:f8:65:78:
         01:51:dc:00:0f:da:0f:4d:81:48:b1:70:2a:1b:72:32:b6:6d:
         3f:dc:54:9e:ee:f6:1b:49:4a:17:af:9e:f5:e0:45:d2:be:b7:
         a5:7f:ae:3a:df:c3:9e:65:54:b0:7a:72:bb:63:f7:e5:98:50:
         36:51:3f:73:29:a3:96:8b:04:6a:8d:cf:25:30:cc:f3:10:d5:
         d6:9d:b3:dd:7e:77:07:cb:f8:f0:29:4a:a6:0b:33:fc:7c:77:
         b5:da:5d:23:c7:0f:c8:be:46:3f:83:f1:b0:a0:3a:f3:e0:4c:
         8a:1b:35:e0:06:83:03:79:9f:c9:c8:8f:13:56:1f:01:1f:0f:
         c5:4b:d4:56:be:00:a0:ae:1b:69:3f:cf:54:e1:18:6f:8a:72:
         87:9c:45:e1:93:06:78:ca:75:1d:43:35:1c:39:b4:93:ff:b7:
         04:9f:c2:d0:b6:9c:e6:8d:60:66:f9:42:4b:8f:f4:1b:37:01:
         a4:73:ad:80:5e:90:a3:67:4e:14:24:dc:83:22:81:e1:4b:02:
         be:24:70:d1:6a:22:1a:50:b0:14:07:74:cb:61:b3:04:fa:84:
         b6:72:61:25:97:d2:4d:76:b1:81:c5:a7:50:7c:57:0d:33:ef:
         88:92:25:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUOky34pdFryX8ogTo1SSpUF43mwwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjE5MDkzNDM1WhcNMjYwNjE4MDkzOTM1
WjAzMTEwLwYDVQQDEyhERjg2NUJFRTlDM0IzN0NFNjhFRjI0OUY2MDY2RUY3MDI2
QzE5OUNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyyRI7OO/cLU
Qj1JQSfpEvKQw9chUMBOwqjykOErXoWjoYzm342GmpTJH1wTCETaFHmeoktMSb8O
l+5tdKqpku48C+6Fe8evVf9XEtxgYD3evrB/1pKleX+QZ+XgGJ3CE7a/JRXtt6zS
wkTZyAVx10A1+1vWwG7OJz9KrjlvLGfHcRzKxs2+V/mmVnpL6kAEx7mb4y3tIzun
X7UzFOVUmzNfNrZKl0O5OMxB6fj3s2iJZX3+KzwtCr58ZWOJVXb/7+KqZ7yjIj0x
BTcM/W3dH2to/a+I3T2Nlhn7dnLQEfw8NBRZCyePe87lQi+qtgHjsu5qGzDQsOV3
fzNKu2EgswIDAQABo4IChDCCAoAwHQYDVR0OBBYEFN+GW+6cOzfOaO8kn2Bm73Am
wZnLMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGKLcAAwQCKLdQMA0GCSqGSIb3DQEB
CwUAA4IBAQAxzDhkw2MZmakIa0hFb4P4ZXgBUdwAD9oPTYFIsXAqG3Iytm0/3FSe
7vYbSUoXr5714EXSvrelf64638OeZVSwenK7Y/flmFA2UT9zKaOWiwRqjc8lMMzz
ENXWnbPdfncHy/jwKUqmCzP8fHe12l0jxw/IvkY/g/GwoDrz4EyKGzXgBoMDeZ/J
yI8TVh8BHw/FS9RWvgCgrhtpP89U4RhvinKHnEXhkwZ4ynUdQzUcObST/7cEn8LQ
tpzmjWBm+UJLj/QbNwGkc62AXpCjZ04UJNyDIoHhSwK+JHDRaiIaULAUB3TLYbME
+oS2cmEll9JNdrGBxadQfFcNM++IkiVL
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:43:17 2025 by rpki-client