Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          pEbmuAS6C/HgOeH5SVhh/uJqwL2BIRpcxZrBowy4EoY=
Subject key identifier:   85:19:46:2D:4E:72:3D:3D:BA:39:B8:B1:7A:F5:FA:38:C4:25:99:AA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       10F5083DA5B19916082ECDD9C152F25CAC300D99
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
Signing time:             Thu 26 Mar 2026 11:58:25 +0000
ROA not before:           Thu 26 Mar 2026 11:53:25 +0000
ROA not after:            Thu 25 Mar 2027 11:58:25 +0000
asID:                     16276
IP address blocks:        23.95.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f5:08:3d:a5:b1:99:16:08:2e:cd:d9:c1:52:f2:5c:ac:30:0d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 26 11:53:25 2026 GMT
            Not After : Mar 25 11:58:25 2027 GMT
        Subject: CN=8519462D4E723D3DBA39B8B17AF5FA38C42599AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:be:0a:29:3f:c0:3f:8c:13:e5:f6:d5:e8:
                    bd:9a:71:8f:e8:35:cb:38:5b:c5:3a:d8:a9:86:4c:
                    cc:01:a7:b7:ec:79:26:16:bb:b0:4f:0a:bf:6b:45:
                    fe:25:a1:eb:17:22:57:d3:c2:c2:9f:14:47:58:68:
                    ec:51:b0:09:35:91:1d:81:9e:66:cb:f0:d4:58:ec:
                    eb:88:d2:4f:cf:9f:bd:a4:fc:28:07:e6:35:b8:fa:
                    19:86:11:15:a5:db:c2:d7:42:d6:9c:6e:96:8e:6a:
                    06:58:65:43:b0:14:d3:be:6f:ba:ac:46:58:ec:fa:
                    8a:f3:7c:a2:37:c2:11:29:5c:36:a1:5b:bd:fe:c3:
                    7a:5a:02:ab:67:9b:1a:98:3d:f3:76:9d:b2:66:85:
                    4d:ee:e3:8e:1a:1e:0d:71:cc:5f:2a:c2:e0:2f:27:
                    3f:f2:80:75:8f:6c:e3:2f:4a:51:05:fb:12:37:2a:
                    7a:6f:07:49:87:74:4e:7b:4f:c1:55:7d:23:3f:77:
                    ce:95:b4:8d:ff:06:ec:11:0a:bb:7a:52:84:af:76:
                    88:2d:99:41:86:5c:98:23:78:f5:e5:f5:8c:89:05:
                    ce:d7:e5:51:87:ef:9c:9f:d7:3f:d8:59:1e:0d:fc:
                    25:1c:71:d0:fe:ba:e0:89:15:7f:38:41:9c:e9:43:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:46:2D:4E:72:3D:3D:BA:39:B8:B1:7A:F5:FA:38:C4:25:99:AA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:86:56:75:93:bc:3e:a9:3a:84:8d:9e:ac:bf:fb:4e:59:f2:
         61:02:6d:4c:db:f8:51:a8:88:a7:54:c5:19:70:5b:94:27:e2:
         43:6e:13:35:62:65:64:13:fc:ca:6e:43:f4:6e:b9:17:94:4a:
         49:b8:f9:e9:59:d3:b1:3e:5a:f4:59:fc:c2:1b:bc:99:b3:e1:
         6a:14:8b:30:23:0c:f9:91:dc:5d:85:11:dd:14:e4:3c:b8:07:
         1e:83:c1:04:29:6c:86:b9:e8:d8:d0:0f:00:17:1c:a1:3f:e1:
         55:61:fe:5b:68:c6:40:d4:ac:0a:6e:80:00:68:0b:4e:74:9e:
         b3:73:a6:83:a5:26:78:7d:72:9c:89:0c:e0:e2:9f:f2:2d:80:
         7e:76:f9:e7:56:d9:32:4d:e7:60:77:4c:e0:ee:42:17:85:d9:
         ed:eb:8c:88:13:93:1b:25:7e:43:d9:ea:92:3e:88:af:e2:a9:
         16:de:74:e9:1b:93:3b:fc:9b:a7:8a:47:ef:39:29:0a:64:31:
         a6:a8:3c:ba:f0:0a:61:35:69:3c:14:91:20:3b:ed:b1:9b:8b:
         af:72:55:aa:d7:bb:16:73:6b:3b:04:b6:d9:7a:75:3b:27:30:
         90:f3:ea:bd:6d:82:d4:03:c6:ed:1e:9e:45:25:a4:09:5a:92:
         17:12:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:00 2026 by rpki-client