Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          fzB0EpSvV7wIo4Xym3lexwy1MTc/+PrOaQeWz4BFBvI=
Subject key identifier:   ED:4D:E3:C0:79:2A:0A:D6:CF:84:E9:DD:79:41:1D:54:4E:CE:82:6E
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       4C61DD85CFCEE7F75C5B27070E9B3D5703D5A8C4
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa
Signing time:             Mon 20 Apr 2026 15:49:29 +0000
ROA not before:           Mon 20 Apr 2026 15:44:29 +0000
ROA not after:            Mon 19 Apr 2027 15:49:29 +0000
asID:                     16276
IP address blocks:        40.27.29.0/24 maxlen: 24
                          40.183.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 14:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:61:dd:85:cf:ce:e7:f7:5c:5b:27:07:0e:9b:3d:57:03:d5:a8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 20 15:44:29 2026 GMT
            Not After : Apr 19 15:49:29 2027 GMT
        Subject: CN=ED4DE3C0792A0AD6CF84E9DD79411D544ECE826E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:6c:bb:5e:89:d1:06:f8:9d:0b:a1:d2:54:
                    aa:91:98:0d:26:4a:c5:7a:a0:d6:3d:fe:49:40:9d:
                    dc:2b:a6:a4:c6:3a:92:06:66:cf:ef:42:05:56:7d:
                    3a:ab:9b:6f:26:69:df:6a:ef:89:57:19:6a:7d:8f:
                    d0:f6:54:b2:36:28:ad:43:34:05:16:37:2b:8e:bd:
                    db:37:96:33:58:43:ac:bf:74:b4:ec:d0:74:71:92:
                    20:c0:dd:77:5c:ac:29:8f:c3:7f:c4:51:d5:9e:01:
                    02:c6:ee:42:65:eb:3b:c8:64:23:3d:08:84:d5:fc:
                    4b:f1:6c:25:ed:20:51:31:20:06:a9:47:a9:6b:f5:
                    2e:16:2f:5c:50:d6:4b:8f:1c:44:50:a0:80:c1:8b:
                    ee:bb:ad:60:a2:dc:4a:df:b7:1e:75:fc:a0:b7:ab:
                    51:fd:26:bb:fd:67:c9:de:5f:22:2e:b9:a1:1e:43:
                    21:c9:b2:aa:3e:ec:83:15:ad:48:4c:d1:b2:f9:ad:
                    0d:51:87:55:7f:82:60:43:fb:e6:c5:ae:3b:c9:63:
                    6f:08:f6:e7:f4:b7:ba:7f:75:84:2b:3d:7b:7a:47:
                    52:c5:e3:e0:b5:0f:a1:e9:ad:46:23:48:64:3b:3b:
                    f0:42:9f:36:8d:e0:61:9b:50:73:a7:bf:07:d2:74:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4D:E3:C0:79:2A:0A:D6:CF:84:E9:DD:79:41:1D:54:4E:CE:82:6E
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.29.0/24
                  40.183.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:41:a9:9c:7f:70:c1:84:b9:9d:c1:22:99:f3:ac:d3:da:af:
         ff:3b:0b:0d:66:68:b5:f9:9a:8c:62:cd:a7:2c:ca:f6:4a:04:
         3a:2b:a5:59:8b:aa:81:53:77:ce:56:8d:2b:11:5d:8f:7c:a0:
         6b:20:5c:a9:83:33:af:5a:99:a1:6b:cd:4f:43:48:e4:39:69:
         48:6f:91:39:26:09:62:1b:89:68:32:c2:6f:2d:90:bc:92:06:
         2a:f4:62:61:97:62:c5:c1:87:5a:a9:00:7c:9c:01:69:c2:00:
         cc:50:f9:f1:ee:34:86:2f:7a:92:90:df:b9:3f:ee:c0:96:f1:
         6c:a4:bc:ec:65:29:22:d1:c6:56:51:9c:69:af:bc:0d:87:10:
         60:07:9c:ca:db:02:51:7b:a3:77:28:ed:12:2c:5e:57:5a:02:
         07:5a:9c:2e:2b:ce:7f:a3:74:2f:7e:01:7a:9d:3c:fb:4b:80:
         6e:06:5f:2d:cc:0a:8a:f4:24:f1:fd:e5:cc:29:7f:4e:19:8e:
         a0:df:0b:3d:12:93:e7:52:67:ad:c5:12:01:a9:f3:6d:52:1c:
         c5:0b:0c:ea:cb:7d:0a:7d:c6:46:74:4f:7a:9c:79:fb:fa:30:
         4e:03:c1:03:f3:49:91:41:b6:cb:2b:c2:25:a4:0d:ff:2b:01:
         17:44:43:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:27:06 2026 by rpki-client