Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          qeKJvU5rI49cPGQAq6lobSYg2iCF1bT2n4OvykNnFGs=
Subject key identifier:   6D:6D:6C:A5:15:E1:97:0B:B3:95:93:E1:48:B8:08:E1:A4:0B:01:C7
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       141117FC99ECBA65F79EF9D31AAC80E24CC30CFB
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa
Signing time:             Wed 05 Aug 2026 06:36:19 +0000
ROA not before:           Wed 05 Aug 2026 06:31:19 +0000
ROA not after:            Wed 04 Aug 2027 06:36:19 +0000
asID:                     16509
IP address blocks:        140.99.12.0/24 maxlen: 24
                          140.99.50.0/24 maxlen: 24
                          140.99.51.0/24 maxlen: 24
                          140.99.52.0/24 maxlen: 24
                          140.99.53.0/24 maxlen: 24
                          140.99.54.0/24 maxlen: 24
                          140.99.55.0/24 maxlen: 24
                          140.99.56.0/24 maxlen: 24
                          140.99.57.0/24 maxlen: 24
                          140.99.61.0/24 maxlen: 24
                          140.99.63.0/24 maxlen: 24
                          140.99.64.0/24 maxlen: 24
                          140.99.65.0/24 maxlen: 24
                          140.99.66.0/24 maxlen: 24
                          140.99.67.0/24 maxlen: 24
                          140.99.70.0/24 maxlen: 24
                          140.99.71.0/24 maxlen: 24
                          140.99.72.0/24 maxlen: 24
                          140.99.73.0/24 maxlen: 24
                          140.99.74.0/24 maxlen: 24
                          140.99.75.0/24 maxlen: 24
                          140.99.76.0/24 maxlen: 24
                          140.99.221.0/24 maxlen: 24
                          140.99.232.0/24 maxlen: 24
                          140.99.234.0/24 maxlen: 24
                          140.99.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 12:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:11:17:fc:99:ec:ba:65:f7:9e:f9:d3:1a:ac:80:e2:4c:c3:0c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug  5 06:31:19 2026 GMT
            Not After : Aug  4 06:36:19 2027 GMT
        Subject: CN=6D6D6CA515E1970BB39593E148B808E1A40B01C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:3e:e4:b1:d5:3c:8b:e0:a5:e5:bb:19:c3:
                    5e:bb:54:11:f6:3c:bf:41:74:2c:19:d9:09:7f:cd:
                    ad:dc:bf:43:14:1f:88:6a:6f:fa:b1:49:3d:9e:ee:
                    66:a7:64:38:be:99:1c:67:03:27:d1:02:d1:59:f0:
                    12:08:3d:6e:71:05:c3:b8:d2:ff:51:18:f6:96:0b:
                    41:5f:b0:fb:01:28:7e:21:25:00:ce:d3:d3:71:0d:
                    0b:0e:65:eb:9e:34:01:69:c5:42:b6:78:60:7b:8d:
                    56:e7:ba:c1:48:aa:22:58:dd:50:2f:11:5d:3a:2a:
                    b0:43:5f:1c:c1:d6:55:18:4a:88:83:ff:b4:66:ce:
                    8d:8c:80:e0:8f:67:18:57:39:8b:3d:fd:42:fb:ec:
                    25:13:05:3c:2e:ee:70:09:a5:b9:0d:3d:37:11:84:
                    24:04:f3:c8:56:47:04:6b:36:00:26:1e:c1:7a:c5:
                    2d:c2:f1:66:a1:a0:c1:b6:1c:c5:f9:54:24:fa:ac:
                    41:67:13:81:0a:ba:80:0e:42:13:5a:a9:76:0d:e5:
                    0a:0e:c2:bb:dc:98:ee:b6:88:c6:40:39:8e:88:da:
                    cf:2d:ec:37:04:c4:e2:89:aa:8c:d2:70:2b:8f:70:
                    3b:4b:fc:91:32:ca:be:6b:2e:c7:21:3c:44:b6:f6:
                    b1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6D:6C:A5:15:E1:97:0B:B3:95:93:E1:48:B8:08:E1:A4:0B:01:C7
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.12.0/24
                  140.99.50.0-140.99.57.255
                  140.99.61.0/24
                  140.99.63.0-140.99.67.255
                  140.99.70.0-140.99.76.255
                  140.99.221.0/24
                  140.99.232.0/24
                  140.99.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:ff:ff:3e:42:01:83:c6:80:26:00:0b:6f:27:d2:d9:94:
         a8:3a:33:83:bc:52:7c:be:39:f0:a9:29:b3:32:f4:c0:9e:3d:
         15:79:e8:59:14:56:3c:27:39:af:ba:be:9e:ad:f8:1a:65:c0:
         af:78:8c:80:81:0d:61:92:78:49:aa:1e:04:f6:7f:b8:dc:4f:
         de:3b:99:b1:c8:fa:e4:97:a6:1e:2c:a7:2d:5e:3f:f2:2b:c7:
         f0:c9:ff:d6:fb:44:84:b5:ca:c1:c5:83:a8:1e:99:90:d9:5f:
         35:21:7d:51:d3:2d:7b:92:6a:ac:00:f8:f0:61:92:44:84:04:
         03:98:05:7e:b0:42:fd:a1:62:35:17:69:91:f9:bd:e2:31:2e:
         69:de:87:fb:07:00:fe:9c:bb:cd:25:ab:64:d1:35:ad:bb:6b:
         93:9c:e5:16:cb:d6:f6:9b:47:7e:96:94:8d:9d:0f:fb:4f:59:
         e1:a0:ce:0e:8d:28:11:1a:76:74:98:19:f0:0e:1d:74:54:e0:
         7d:8b:7e:b2:81:23:e3:14:5f:fd:35:5c:a2:45:a5:a9:89:f6:
         5c:95:04:5d:91:9f:54:af:73:c2:3e:f0:b2:9f:2d:4a:36:25:
         54:56:7a:aa:01:09:0f:98:c9:44:e6:2e:fc:9e:e8:b4:df:ee:
         54:1b:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:33:48 2026 by rpki-client