Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          ZuA8noD5G+ODzXYGUiztRBbKK3XAgenwUIIvRoec2ZI=
Subject key identifier:   D2:66:71:C7:51:A4:40:74:68:73:8F:01:55:03:E6:44:1C:A1:18:AA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2C57390C6A4E6B6C482C286A3AACEC0991D4A1C8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
Signing time:             Fri 11 Jul 2025 12:44:10 +0000
ROA not before:           Fri 11 Jul 2025 12:39:10 +0000
ROA not after:            Fri 10 Jul 2026 12:44:10 +0000
asID:                     16276
IP address blocks:        23.95.142.0/24 maxlen: 24
                          67.210.103.0/24 maxlen: 24
                          192.228.116.0/24 maxlen: 24
                          216.97.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:57:39:0c:6a:4e:6b:6c:48:2c:28:6a:3a:ac:ec:09:91:d4:a1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 11 12:39:10 2025 GMT
            Not After : Jul 10 12:44:10 2026 GMT
        Subject: CN=D26671C751A4407468738F015503E6441CA118AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:e9:cb:25:15:8a:a4:dc:09:1f:94:0f:0b:
                    7d:1e:3c:40:d2:72:cf:da:9d:d4:ae:60:a6:43:62:
                    bf:3c:5f:4f:ab:53:b3:01:da:44:43:ea:8c:46:0e:
                    ce:4c:d4:a7:d0:34:7a:7c:54:09:ff:51:ee:12:99:
                    e5:35:5c:d6:f9:f6:6a:e7:91:45:89:5e:51:75:b7:
                    75:50:97:c1:36:38:92:45:5d:37:e2:41:5c:26:5d:
                    b1:95:b5:e3:53:de:0f:7f:1e:2e:fd:d0:f2:ef:76:
                    43:24:80:58:c9:52:80:3e:8c:08:6c:d1:e8:a2:f1:
                    95:84:88:3f:bd:9a:ee:1f:89:7d:b8:3a:5c:00:e9:
                    22:9b:6f:0f:4d:06:67:d3:c4:a6:47:34:a1:76:52:
                    2d:64:63:9d:25:ee:41:f7:a7:ed:d6:19:5b:40:2d:
                    bd:8c:05:2f:db:64:c4:b0:ad:0b:10:e0:cf:87:04:
                    e5:60:48:b3:49:34:fa:bb:a8:97:3c:65:80:3c:7a:
                    19:ba:12:c7:53:06:3f:9b:98:cc:3a:01:70:c0:6a:
                    39:8c:76:69:4e:42:49:da:20:23:92:da:8d:63:30:
                    fa:be:09:66:1b:01:26:5c:42:30:66:31:6c:9d:da:
                    6e:ae:96:d4:8f:2b:6b:8a:ea:ba:af:98:6b:f0:d1:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:66:71:C7:51:A4:40:74:68:73:8F:01:55:03:E6:44:1C:A1:18:AA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  67.210.103.0/24
                  192.228.116.0/24
                  216.97.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:10:4e:a2:ad:64:29:55:87:7b:41:ab:61:ee:1c:9e:7b:
         39:d7:0a:cd:3e:1a:0c:9a:0f:af:a4:b1:44:64:c1:32:87:3c:
         bf:a2:f2:51:d1:7f:ac:76:75:56:16:41:bd:4f:61:8e:37:59:
         eb:ae:d1:8a:34:90:0a:b0:d8:0b:34:c4:c0:38:2c:45:e3:3e:
         aa:9a:4e:40:d9:2a:01:45:c4:c5:60:dc:81:75:cc:84:86:78:
         27:37:e9:c1:ec:14:4a:c9:3b:e5:1f:22:c0:0c:a8:67:ad:7c:
         15:1c:34:66:5c:97:e2:7e:83:98:81:11:aa:36:50:09:96:7f:
         cb:60:a0:84:c2:05:2e:da:5b:81:d3:2e:7e:4d:c3:70:91:a1:
         ef:5a:19:c0:26:05:db:93:16:bf:cb:28:7b:0e:12:30:f5:33:
         34:af:d6:e7:57:6c:a8:33:f0:50:af:d8:60:3d:35:2e:ba:ce:
         c5:b4:1e:11:92:2e:ca:ba:83:8c:a7:6e:d3:75:eb:54:b6:1f:
         a9:d9:86:2f:5a:2b:f8:d0:24:8f:bc:2a:09:30:97:4a:20:d0:
         0b:2b:61:c4:63:1e:67:c6:42:7f:9c:da:b7:82:c8:a9:8d:67:
         19:0b:04:ed:c2:bb:ef:5c:ba:0c:e1:8e:8b:96:5f:56:e3:ce:
         47:ec:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:36:07 2025 by rpki-client