Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          ChZgdPtqfMDd/qGynsnNy7Si2XxQVqPVkNbjRNVnYgE=
Subject key identifier:   01:1C:91:C8:ED:67:5B:63:44:44:A9:67:EF:E2:D8:CE:A2:50:D5:AF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5DB560B18334579C0242591FD5C9D6404FEE1E9E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
Signing time:             Mon 09 Nov 2026 00:01:40 +0000
ROA not before:           Sun 08 Nov 2026 23:56:40 +0000
ROA not after:            Mon 08 Nov 2027 00:01:40 +0000
asID:                     16276
IP address blocks:        23.95.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Nov 2026 16:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b5:60:b1:83:34:57:9c:02:42:59:1f:d5:c9:d6:40:4f:ee:1e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov  8 23:56:40 2026 GMT
            Not After : Nov  8 00:01:40 2027 GMT
        Subject: CN=011C91C8ED675B634444A967EFE2D8CEA250D5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cd:ef:5b:0c:2d:f7:54:2e:6c:00:16:1f:5a:
                    ba:11:c8:92:3c:d5:e6:db:20:a5:bf:0b:69:8b:5c:
                    45:21:ff:97:16:03:d2:53:57:64:25:f3:d9:2d:08:
                    81:9d:f0:7c:e5:32:eb:d8:58:15:26:03:6e:0d:db:
                    43:ee:ea:bc:c7:d7:a1:84:52:43:ef:12:4e:56:77:
                    2c:e6:8f:da:8c:c8:4b:db:57:6c:7f:9d:72:8e:a3:
                    36:80:bd:9c:8e:78:c0:3e:18:3b:c2:80:3b:e8:36:
                    c9:ba:04:74:c9:de:13:ea:2a:22:82:66:30:32:18:
                    e5:59:4c:0d:b3:87:3c:da:ae:d1:b0:29:51:1f:62:
                    2e:15:49:0f:a4:f6:ca:1b:d7:a5:bd:51:18:1a:75:
                    a4:b1:cf:94:d3:3d:93:ed:a2:41:e4:d1:76:87:ec:
                    06:d4:68:1f:a7:02:4f:06:22:ca:f3:98:2c:ee:dd:
                    39:7c:77:07:06:c9:1f:01:48:01:50:50:93:f6:73:
                    ec:bc:3a:64:ee:db:6e:96:87:21:ec:75:3d:d2:fe:
                    de:1d:7d:6a:e8:dc:a9:ab:53:35:f6:be:8d:9b:0c:
                    de:a5:2c:90:fb:47:9b:f7:9f:f3:e0:56:61:dd:ac:
                    e4:d3:61:75:26:24:fc:a9:4a:51:e4:47:29:44:db:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:91:C8:ED:67:5B:63:44:44:A9:67:EF:E2:D8:CE:A2:50:D5:AF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:58:66:c8:36:6e:46:46:70:18:db:78:ca:bf:bf:bd:ad:
         e3:d2:aa:96:fe:1c:79:cb:d6:3d:65:42:f1:94:0f:90:5d:35:
         f9:94:af:f1:25:9b:ee:9c:0d:27:3e:ae:9c:79:91:76:20:ff:
         e8:48:c4:23:92:43:67:79:3c:03:05:f6:b3:33:f6:be:bc:0a:
         92:9e:f5:8f:8d:f6:de:af:17:b2:e9:31:21:e9:d9:87:eb:df:
         13:bb:e6:cf:a7:39:89:66:8e:80:03:99:a7:4a:38:7c:02:5b:
         db:4a:aa:89:20:12:86:5d:2e:e3:27:61:4d:ce:7d:55:49:fc:
         4f:46:3e:4a:d4:6a:3f:70:35:47:67:15:18:5d:c6:36:71:58:
         97:e9:c2:ac:25:3b:09:59:10:23:1d:bd:42:3b:18:87:6f:ea:
         51:ee:06:0c:1f:85:04:17:c5:74:10:49:aa:62:f9:db:ef:af:
         6e:74:10:ea:5d:04:88:b3:8c:c3:84:2d:fd:85:1d:76:6f:fc:
         bd:a2:53:8b:ce:95:95:08:94:12:4a:59:b1:d5:32:ec:0d:3a:
         fd:e2:a4:1f:b1:07:0b:59:5c:e3:91:d1:88:b1:b8:64:36:2e:
         b8:a1:2a:d4:73:be:bd:be:c0:ab:7c:82:09:fc:2f:28:31:10:
         0e:bc:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:43:42 2026 by rpki-client