Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          cTTDtzEDM3lJFREhrrF7hQ8cPpuiJq2au2ClVATpigY=
Subject key identifier:   4F:DB:18:4E:78:12:AF:B0:11:6D:E1:F5:8A:C7:A7:1A:63:91:6E:57
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       08B49AEF973AFD7EED9DAA4733C7418F37199BF9
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa
Signing time:             Tue 26 May 2026 11:42:53 +0000
ROA not before:           Tue 26 May 2026 11:37:53 +0000
ROA not after:            Tue 25 May 2027 11:42:53 +0000
asID:                     16276
IP address blocks:        40.27.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b4:9a:ef:97:3a:fd:7e:ed:9d:aa:47:33:c7:41:8f:37:19:9b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May 26 11:37:53 2026 GMT
            Not After : May 25 11:42:53 2027 GMT
        Subject: CN=4FDB184E7812AFB0116DE1F58AC7A71A63916E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:8b:5b:ba:85:27:21:24:07:83:de:28:ba:
                    22:b4:2b:8a:de:a8:4b:78:cb:e5:dc:07:d1:ea:2c:
                    86:82:85:8f:f8:ae:59:a8:77:f8:5d:0c:6c:72:ee:
                    bc:23:78:9e:df:18:24:aa:32:e4:ee:eb:12:48:12:
                    c6:33:3d:af:7b:1f:35:c1:0b:79:d1:ac:6c:2b:01:
                    2a:dc:8c:90:e1:dd:96:7b:39:88:3f:c0:4a:6d:cd:
                    a0:a9:53:48:e7:19:0b:50:e4:d1:6d:17:6a:6d:c7:
                    d4:f2:c3:8a:bd:68:32:f5:d5:01:8d:49:a8:a8:11:
                    c1:a5:91:22:cd:a1:28:76:0c:7e:4f:f1:61:9c:39:
                    00:17:cb:34:f1:8f:df:e4:62:84:c9:9b:59:95:f2:
                    3b:e3:9b:3c:e2:1b:24:58:71:13:b8:e9:db:81:6c:
                    69:f7:b5:af:7f:a8:d0:c6:6b:c6:46:b3:54:0a:18:
                    6d:98:f7:64:6b:9c:28:43:c0:64:fa:19:5e:40:1d:
                    ff:0e:d0:bc:08:99:02:5f:a2:40:71:02:7b:82:3c:
                    ab:f6:01:6d:c4:d7:b6:d4:36:6e:3a:c6:21:e2:67:
                    84:dd:28:e1:e8:08:1e:a2:e1:91:a0:fe:22:f2:5d:
                    0b:fb:d8:d7:7e:dd:ff:da:09:47:01:82:56:0a:5c:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DB:18:4E:78:12:AF:B0:11:6D:E1:F5:8A:C7:A7:1A:63:91:6E:57
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:bf:c8:0a:7e:99:05:f3:75:d6:38:59:46:29:c1:42:8c:a6:
         2a:b8:fa:ea:b3:1f:57:a9:ef:89:72:68:51:92:ae:22:5d:e7:
         6d:fd:b6:86:73:bf:10:f7:f9:cf:6e:84:dc:a9:93:0d:3e:56:
         b1:ef:d3:b1:67:b4:1a:46:ea:9c:a0:50:a5:84:ed:cb:c6:73:
         80:f1:c7:68:a0:75:00:8e:e9:8e:79:43:79:b9:31:ae:b3:2a:
         1a:4a:57:be:35:fd:7b:2d:75:93:79:a6:11:8b:cb:67:35:c3:
         53:c6:59:51:f1:21:77:00:41:21:05:e0:3b:ba:18:7a:3c:ce:
         36:da:21:b1:dc:4a:79:1b:7a:1c:24:0a:9d:e9:5c:9e:b9:f6:
         7a:14:fb:bf:37:cc:3b:33:bd:fd:29:c6:35:be:3a:a0:f7:80:
         46:8d:3c:6b:65:f7:8d:d0:c8:29:f8:9a:f6:72:fd:ff:c1:39:
         0d:10:8c:bd:06:65:b4:b8:a3:c0:44:51:18:b3:a3:98:fe:62:
         c5:dc:4e:a3:0e:3f:10:3a:e8:ea:85:fa:5a:fb:b5:06:b0:d7:
         2f:ae:38:c8:e4:3c:cd:81:33:b3:62:42:17:31:80:92:ba:db:
         47:7b:84:3a:e5:85:a0:ca:3a:9c:54:04:4d:78:4a:26:4f:a2:
         5a:2f:17:3f
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUCLSa75c6/X7tnapHM8dBjzcZm/kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNTI2MTEzNzUzWhcNMjcwNTI1MTE0MjUz
WjAzMTEwLwYDVQQDEyg0RkRCMTg0RTc4MTJBRkIwMTE2REUxRjU4QUM3QTcxQTYz
OTE2RTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAGLW7qFJyEk
B4PeKLoitCuK3qhLeMvl3AfR6iyGgoWP+K5ZqHf4XQxscu68I3ie3xgkqjLk7usS
SBLGMz2vex81wQt50axsKwEq3IyQ4d2WezmIP8BKbc2gqVNI5xkLUOTRbRdqbcfU
8sOKvWgy9dUBjUmoqBHBpZEizaEodgx+T/FhnDkAF8s08Y/f5GKEyZtZlfI745s8
4hskWHETuOnbgWxp97Wvf6jQxmvGRrNUChhtmPdka5woQ8Bk+hleQB3/DtC8CJkC
X6JAcQJ7gjyr9gFtxNe21DZuOsYh4meE3Sjh6AgeouGRoP4i8l0L+9jXft3/2glH
AYJWClzGkQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFE/bGE54Eq+wEW3h9YrHpxpj
kW5XMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKBsdMA0GCSqGSIb3DQEBCwUAA4IB
AQBNv8gKfpkF83XWOFlGKcFCjKYquPrqsx9Xqe+JcmhRkq4iXedt/baGc78Q9/nP
boTcqZMNPlax79OxZ7QaRuqcoFClhO3LxnOA8cdooHUAjumOeUN5uTGusyoaSle+
Nf17LXWTeaYRi8tnNcNTxllR8SF3AEEhBeA7uhh6PM422iGx3Ep5G3ocJAqd6Vye
ufZ6FPu/N8w7M739KcY1vjqg94BGjTxrZfeN0Mgp+Jr2cv3/wTkNEIy9BmW0uKPA
RFEYs6OY/mLF3E6jDj8QOujqhfpa+7UGsNcvrjjI5DzNgTOzYkIXMYCSuttHe4Q6
5YWgyjqcVARNeEomT6JaLxc/
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:48 2026 by rpki-client