Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          dKs05ekjL6d7WqrIhBf/VJKpmz8XHAy3wLRBECR52d8=
Subject key identifier:   C2:CB:5B:1E:BA:E0:9E:15:79:25:A2:02:19:7A:29:0A:2E:E8:86:35
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       612D9ED32F07C13ED10AB5021D1E573A22E7AEA0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
Signing time:             Tue 17 Jun 2025 07:46:50 +0000
ROA not before:           Tue 17 Jun 2025 07:41:50 +0000
ROA not after:            Tue 16 Jun 2026 07:46:50 +0000
asID:                     16276
IP address blocks:        104.234.50.0/24 maxlen: 24
                          104.234.168.0/24 maxlen: 24
                          104.234.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2d:9e:d3:2f:07:c1:3e:d1:0a:b5:02:1d:1e:57:3a:22:e7:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 17 07:41:50 2025 GMT
            Not After : Jun 16 07:46:50 2026 GMT
        Subject: CN=C2CB5B1EBAE09E157925A202197A290A2EE88635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:56:2e:a2:37:2e:71:b9:44:aa:e5:99:9d:9b:
                    62:c8:c1:3e:b5:71:dc:73:15:73:82:d3:47:68:4b:
                    74:28:3e:68:8b:3d:33:00:9b:e0:62:a9:13:c9:a1:
                    17:54:23:a1:90:78:9d:fc:e5:2d:81:95:53:2c:b9:
                    d3:66:fb:e6:c6:a8:25:5c:e6:65:8d:ee:e0:c8:83:
                    5e:6a:bc:8c:70:1b:ae:52:db:13:5d:f2:b8:9e:2d:
                    cf:7a:42:69:fe:d0:28:1a:22:4d:cb:10:ff:84:66:
                    1a:42:6f:b6:80:9f:c5:47:59:ac:69:ea:df:f1:83:
                    f9:e8:aa:51:7a:ae:77:9a:f4:6f:d5:44:72:ac:a4:
                    3a:7e:3d:2a:05:ff:43:4e:cb:9a:7a:1c:fd:5e:79:
                    46:a7:a2:17:f3:a2:f9:28:ad:79:c7:92:64:b2:97:
                    f6:d6:62:fa:6f:c2:e8:f0:09:26:f8:92:d1:22:1d:
                    4a:c2:64:90:2f:30:ae:94:fd:e9:dd:e2:10:7f:e1:
                    0d:10:92:ab:4a:ec:0d:f7:bd:c3:c8:b8:4b:7e:20:
                    3d:d7:d6:3c:73:33:fe:c5:9b:23:99:02:d1:2d:02:
                    95:46:a6:85:34:58:d7:e1:43:c3:cc:90:76:82:76:
                    21:a8:81:56:6f:e5:a1:7b:86:59:10:c8:88:aa:17:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:5B:1E:BA:E0:9E:15:79:25:A2:02:19:7A:29:0A:2E:E8:86:35
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.50.0/24
                  104.234.168.0/24
                  104.234.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:61:c6:ed:2f:cf:e6:32:40:6f:41:59:d6:17:fe:f8:32:f7:
         ea:e4:30:08:a1:30:57:8e:8c:3e:9e:bb:67:b6:33:35:e7:cf:
         e6:52:47:36:f3:e0:8d:be:73:9f:41:2c:6a:00:86:7a:ea:aa:
         f3:d0:ae:bd:44:20:2d:29:0b:03:43:e5:53:37:75:19:6e:88:
         5b:34:35:d0:6e:99:7c:1d:90:c6:67:ae:ba:c4:2e:52:af:ee:
         8a:db:5a:05:0a:ae:b1:a6:49:5f:57:79:93:9a:4b:50:21:2d:
         44:71:88:1e:7a:fb:21:35:0f:1d:e7:95:f8:0b:b1:1e:b0:31:
         23:dc:7a:73:09:24:38:7c:c6:67:0f:56:f4:de:71:8b:fc:2d:
         3c:37:4e:72:ae:9b:ae:3d:85:b6:94:22:ca:c6:27:a2:3f:51:
         66:8b:3e:b2:7b:69:c6:db:4b:da:17:1b:88:ca:54:37:60:58:
         aa:4d:11:cd:9b:55:33:b7:9c:19:97:e3:4b:13:a3:77:96:d5:
         11:82:06:e4:07:a9:1d:53:02:60:23:0e:94:5a:a0:26:67:0a:
         65:b4:59:76:e2:03:98:32:f2:b4:f3:10:7a:ac:c1:3f:f0:6e:
         0c:18:38:14:b9:0b:9c:5e:7d:a5:6e:f0:db:10:0f:e6:e0:72:
         e4:a6:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:34:17 2025 by rpki-client