Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          1+f6u0BnXlF6gVrcixUkin7/iXmNTIiFcwLNF0D8k+U=
Subject key identifier:   6E:88:61:17:08:24:15:34:9D:86:70:1B:30:3B:3F:7A:93:E9:52:9F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       446D04770F582257BBB9234ED6BC18677D3DF95E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
Signing time:             Sat 11 Jul 2026 08:08:42 +0000
ROA not before:           Sat 11 Jul 2026 08:03:42 +0000
ROA not after:            Sat 10 Jul 2027 08:08:42 +0000
asID:                     16276
IP address blocks:        23.95.142.0/24 maxlen: 24
                          64.188.20.0/24 maxlen: 24
                          72.11.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6d:04:77:0f:58:22:57:bb:b9:23:4e:d6:bc:18:67:7d:3d:f9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 11 08:03:42 2026 GMT
            Not After : Jul 10 08:08:42 2027 GMT
        Subject: CN=6E886117082415349D86701B303B3F7A93E9529F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:49:d4:44:b2:a3:a4:b9:10:bd:03:16:5f:82:
                    f9:23:e4:f2:d3:41:32:8c:d4:b8:b2:da:11:0a:68:
                    8a:a2:c2:d5:98:53:76:15:e3:5e:7b:a6:3a:79:6d:
                    6e:cc:91:29:15:70:d4:9d:c6:5e:d2:28:b9:86:8f:
                    90:a1:c9:6e:17:9c:d7:59:8d:00:5a:78:d9:e9:b0:
                    a7:b1:e6:37:56:e7:2c:f6:fd:10:ca:bf:36:cd:83:
                    72:4c:fa:49:4b:b3:db:da:62:1e:69:9f:32:22:ad:
                    01:d6:34:f6:6f:09:da:29:6f:54:dd:18:e9:b4:6b:
                    84:a4:3d:24:3a:23:0e:47:ef:56:dd:58:0f:90:5e:
                    5e:02:68:24:c4:67:eb:1f:cc:00:49:21:47:a9:e6:
                    51:37:fd:dc:05:44:ec:1c:5b:79:90:b6:99:cb:4e:
                    c7:47:20:d1:27:4a:21:d6:14:b1:72:b7:15:b0:3b:
                    c2:9b:95:1b:92:b2:87:05:6d:3a:7c:5c:25:79:65:
                    04:d2:9f:da:c5:d5:9c:ee:f2:8a:ac:8d:39:7e:55:
                    d0:a8:06:aa:f3:86:5a:b8:4e:2e:47:c6:d2:78:c2:
                    40:97:59:0f:b2:9b:e9:9f:a4:8b:8f:b4:1b:2e:bc:
                    2f:58:23:eb:75:f5:53:d5:c1:f4:9f:09:52:42:1c:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:88:61:17:08:24:15:34:9D:86:70:1B:30:3B:3F:7A:93:E9:52:9F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  64.188.20.0/24
                  72.11.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a5:34:f0:0e:be:d4:29:b4:76:b7:9a:39:e0:8b:f3:2e:fa:
         a1:bf:a4:83:80:68:62:01:a1:78:77:18:60:24:4f:5e:12:a2:
         7e:60:43:d8:44:f0:74:01:f1:ea:5b:e8:10:77:f0:f1:62:18:
         3b:26:f8:89:57:2c:1e:5a:32:3d:60:6a:10:64:07:98:de:f0:
         f8:5a:e6:8f:64:48:8b:41:f6:ba:9e:66:aa:25:97:6c:19:bb:
         8a:78:b3:fe:e0:b4:78:64:d7:f5:db:8c:21:35:7a:2f:61:31:
         59:7c:8b:72:7d:23:7e:99:2c:f5:61:7a:fd:0d:cd:a1:90:ae:
         2d:57:29:29:7f:bc:b2:c2:9f:a4:fe:30:b2:38:71:3d:65:48:
         f3:0b:af:51:62:c5:f3:96:cf:c2:42:67:4b:c9:b6:16:08:0b:
         de:22:71:f6:f1:51:86:03:97:89:02:b9:97:00:51:0d:b8:e8:
         1d:75:89:94:de:ab:e2:31:3d:3d:26:15:26:3a:d4:38:a2:3b:
         1e:74:7b:c7:21:31:11:04:c8:54:ab:76:17:2b:b5:24:5b:26:
         94:ae:37:f5:69:da:92:78:4f:36:7a:9c:98:43:a7:72:b4:0a:
         90:61:30:d9:8e:69:44:f9:da:a6:48:4c:42:87:38:13:71:e5:
         ef:f9:cf:f0
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIURG0Edw9YIle7uSNO1rwYZ309+V4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNzExMDgwMzQyWhcNMjcwNzEwMDgwODQy
WjAzMTEwLwYDVQQDEyg2RTg4NjExNzA4MjQxNTM0OUQ4NjcwMUIzMDNCM0Y3QTkz
RTk1MjlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjknURLKjpLkQ
vQMWX4L5I+Ty00EyjNS4stoRCmiKosLVmFN2FeNee6Y6eW1uzJEpFXDUncZe0ii5
ho+QocluF5zXWY0AWnjZ6bCnseY3Vucs9v0Qyr82zYNyTPpJS7Pb2mIeaZ8yIq0B
1jT2bwnaKW9U3RjptGuEpD0kOiMOR+9W3VgPkF5eAmgkxGfrH8wASSFHqeZRN/3c
BUTsHFt5kLaZy07HRyDRJ0oh1hSxcrcVsDvCm5UbkrKHBW06fFwleWUE0p/axdWc
7vKKrI05flXQqAaq84ZauE4uR8bSeMJAl1kPspvpn6SLj7QbLrwvWCPrdfVT1cH0
nwlSQhy/AQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFG6IYRcIJBU0nYZwGzA7P3qT
6VKfMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF1+OAwQAQLwUAwQASAuLMA0GCSqG
SIb3DQEBCwUAA4IBAQABpTTwDr7UKbR2t5o54IvzLvqhv6SDgGhiAaF4dxhgJE9e
EqJ+YEPYRPB0AfHqW+gQd/DxYhg7JviJVyweWjI9YGoQZAeY3vD4WuaPZEiLQfa6
nmaqJZdsGbuKeLP+4LR4ZNf124whNXovYTFZfItyfSN+mSz1YXr9Dc2hkK4tVykp
f7yywp+k/jCyOHE9ZUjzC69RYsXzls/CQmdLybYWCAveInH28VGGA5eJArmXAFEN
uOgddYmU3qviMT09JhUmOtQ4ojsedHvHITERBMhUq3YXK7UkWyaUrjf1adqSeE82
epyYQ6dytAqQYTDZjmlE+dqmSExChzgTceXv+c/w
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:51:05 2026 by rpki-client