Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          KBuE0hmHpJt5v+VQTHq8ZFrxtqe76XViw7iNJThM9Eo=
Subject key identifier:   CF:BD:AA:75:09:F9:FF:2A:E8:A7:78:B4:0E:5E:AD:09:53:06:A5:15
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       750062495A349DBD35F93C0D903910EA02FE17A4
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa
Signing time:             Thu 05 Mar 2026 05:39:46 +0000
ROA not before:           Thu 05 Mar 2026 05:34:46 +0000
ROA not after:            Thu 04 Mar 2027 05:39:46 +0000
asID:                     16509
IP address blocks:        40.183.0.0/18 maxlen: 24
                          40.183.80.0/22 maxlen: 24
                          40.183.100.0/24 maxlen: 24
                          40.183.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 08:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:00:62:49:5a:34:9d:bd:35:f9:3c:0d:90:39:10:ea:02:fe:17:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar  5 05:34:46 2026 GMT
            Not After : Mar  4 05:39:46 2027 GMT
        Subject: CN=CFBDAA7509F9FF2AE8A778B40E5EAD095306A515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:0f:ca:8c:ae:e8:4b:b2:36:f8:d8:e7:44:
                    40:86:56:99:3f:67:b3:d7:d7:07:bf:03:a1:b7:d1:
                    b3:90:9d:f5:30:a8:01:72:d2:06:8f:8b:2d:98:89:
                    47:5f:8c:d7:bf:5a:11:10:05:69:b8:a7:bd:03:06:
                    82:e4:4b:99:ab:06:e8:db:53:63:76:cf:56:16:5c:
                    67:0e:2d:6f:ab:9a:0d:3c:7a:e2:87:6e:b9:0b:74:
                    fc:38:aa:a7:3a:ed:29:97:01:e4:8e:d4:7b:ab:a4:
                    87:d0:ad:b7:21:ec:61:f8:63:71:21:35:58:85:b0:
                    34:c0:62:fa:d6:06:d5:1b:58:6d:23:0e:e4:f7:de:
                    23:44:49:a9:cb:ac:ef:d8:a7:96:8a:a0:f3:99:83:
                    42:21:1a:50:7b:87:d7:e1:d3:16:e8:91:d0:1d:d8:
                    60:b8:87:63:a6:e1:55:7e:94:67:09:4f:cf:61:12:
                    cd:d0:01:27:32:c1:f2:95:5d:99:0c:cf:46:fb:34:
                    9f:45:47:f7:e2:b3:11:76:1a:d6:1f:11:c7:59:10:
                    5f:cf:07:c6:92:3d:73:ca:63:86:32:7a:ff:48:7f:
                    dd:ba:29:de:f7:0f:de:a4:eb:3a:4b:56:1d:29:25:
                    76:dd:05:5b:28:80:98:a1:f9:a0:0c:4f:0b:46:22:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BD:AA:75:09:F9:FF:2A:E8:A7:78:B4:0E:5E:AD:09:53:06:A5:15
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18
                  40.183.80.0/22
                  40.183.100.0/24
                  40.183.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:17:07:b4:f1:76:8b:1b:41:8b:bd:9c:29:b6:7a:a6:7c:
         3a:00:32:17:f0:e2:14:de:e0:23:05:03:8e:07:7e:13:b6:bf:
         a8:c5:9e:fd:4d:11:03:65:95:a7:9a:b4:e7:eb:02:54:90:7c:
         36:21:8a:58:e1:eb:e5:50:a7:53:36:51:4e:be:ee:d6:47:d7:
         f7:6b:45:30:24:25:67:8a:b9:e7:08:64:dc:38:d1:ca:1d:57:
         db:ad:29:04:8d:5a:79:04:f3:8c:ee:1f:2e:dd:8c:98:b9:91:
         ec:8c:80:61:d3:3b:f8:72:16:72:2c:82:f2:41:98:48:fb:55:
         c2:0e:3b:3f:9b:79:5a:b8:13:16:4e:7d:14:a3:8f:92:f7:30:
         91:e9:b4:f5:59:19:8f:86:7f:c6:d6:c3:2a:c7:7b:a7:0c:33:
         3b:37:e3:22:6d:cc:e3:93:9e:92:f1:0a:23:46:dc:14:75:52:
         c9:9f:79:1e:c7:3b:59:b6:48:da:ef:04:7b:55:bf:ab:fa:41:
         77:8f:f4:f1:98:fe:3a:1b:7f:14:a2:3b:ec:ac:ea:85:50:c6:
         e2:71:8f:14:0b:cc:5f:4c:94:36:20:b9:b1:5b:e8:b7:ea:72:
         37:1a:16:d6:83:a3:99:db:8f:95:d3:8c:21:70:b7:28:35:b8:
         3b:d3:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:19:30 2026 by rpki-client