Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          1N/9Yb+XE9TmyWQBTltZsWfGArFcXbZJn3hgio/eRlA=
Subject key identifier:   B0:22:0A:14:AC:9E:22:8F:DC:48:DE:A6:FC:B7:B8:20:88:5E:93:5E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       650E005DAB3C15C276C985CF3FDF0840ACC6F4BF
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa
Signing time:             Tue 14 Oct 2025 03:26:07 +0000
ROA not before:           Tue 14 Oct 2025 03:21:07 +0000
ROA not after:            Tue 13 Oct 2026 03:26:07 +0000
asID:                     16276
IP address blocks:        157.254.30.0/24 maxlen: 24
                          157.254.185.0/24 maxlen: 24
                          157.254.187.0/24 maxlen: 24
                          157.254.218.0/24 maxlen: 24
                          199.103.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0e:00:5d:ab:3c:15:c2:76:c9:85:cf:3f:df:08:40:ac:c6:f4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 14 03:21:07 2025 GMT
            Not After : Oct 13 03:26:07 2026 GMT
        Subject: CN=B0220A14AC9E228FDC48DEA6FCB7B820885E935E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:bd:80:ef:a2:c1:b2:53:ef:95:a7:23:78:
                    02:8c:02:46:b0:03:d8:05:3d:7f:fb:03:6b:d9:24:
                    f4:95:72:d1:e3:71:6b:93:55:da:43:47:ba:39:1e:
                    26:bf:00:38:67:a7:6e:1d:96:ac:bf:c9:32:53:88:
                    50:d8:cf:93:79:a2:8f:80:d1:88:e6:12:aa:11:fb:
                    06:f7:97:c5:f4:51:fb:0f:12:74:48:ca:3e:79:25:
                    67:c6:73:53:5f:47:e6:d7:81:c1:63:69:f9:5e:29:
                    6a:df:0b:ea:d7:64:2b:b1:32:3b:cc:45:82:8c:3e:
                    91:78:35:11:a6:6b:30:fd:8e:63:e2:a4:74:cb:54:
                    5c:3e:06:a8:91:7e:6f:9a:4f:5c:49:6c:2b:a3:05:
                    a7:10:43:47:6c:4c:49:e9:34:a2:8e:de:d1:65:d1:
                    88:f6:04:99:60:75:69:92:62:ba:83:bc:af:22:b7:
                    3e:54:39:ed:73:2a:80:23:e4:f5:a9:c3:83:b1:a0:
                    c1:1f:30:12:e6:04:7d:cc:ef:b1:ba:6c:b4:79:fe:
                    02:64:25:25:94:f4:a0:f6:e1:75:8f:8b:e9:70:13:
                    f4:2e:44:5c:b4:ad:fc:33:26:bd:a4:c9:a2:19:1b:
                    c5:fa:91:84:98:ea:ce:6a:1a:1b:d7:e5:c6:16:fd:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:22:0A:14:AC:9E:22:8F:DC:48:DE:A6:FC:B7:B8:20:88:5E:93:5E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.30.0/24
                  157.254.185.0/24
                  157.254.187.0/24
                  157.254.218.0/24
                  199.103.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f4:a6:f7:78:f2:57:b1:1e:ee:dc:df:d3:0f:d2:1d:0a:52:
         3e:03:c2:19:68:77:a5:d2:fd:23:ee:eb:e7:62:32:86:4e:38:
         70:dd:76:e0:1b:4b:40:92:74:d3:28:2d:b1:ca:ef:b2:a5:06:
         aa:36:73:3e:7d:f4:df:fd:9b:78:02:9e:b3:5b:ce:a2:32:6e:
         9f:18:74:86:90:a6:36:25:a3:fb:eb:2b:92:ab:8d:a9:60:35:
         1c:76:ba:f9:d8:62:15:09:f3:1b:3f:76:ab:84:9e:6f:e7:21:
         5c:1a:8b:cd:ea:76:b9:66:2e:13:5d:0d:9d:d2:1e:a2:4f:d1:
         6d:c3:59:28:b3:37:97:04:2d:2e:f2:1c:c9:fb:4d:82:65:ac:
         65:08:47:31:1a:4b:73:d8:a8:e0:87:18:1a:6d:a5:06:de:f3:
         bf:37:b9:e6:d2:0d:7f:60:83:a1:57:97:0a:d9:87:3c:c9:13:
         a4:9a:4b:b4:16:77:e5:b9:02:b4:7b:f4:e5:2e:9c:63:a1:64:
         a4:99:a2:1e:2f:60:e8:df:7d:fa:f0:40:10:50:da:d9:9f:42:
         71:7f:6d:40:e4:71:88:9f:63:2f:31:81:94:25:f3:e3:8d:71:
         ab:85:14:c2:fa:66:a2:a3:23:85:32:03:38:f6:7a:6d:77:74:
         37:b6:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:56:12 2025 by rpki-client