Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          XSY4kEQA+eEzMhs+mAF6XWNrk/IgC339NZqzGyRydVo=
Subject key identifier:   E6:D5:2E:93:56:C1:2C:A6:29:09:4D:2C:93:E1:30:97:B8:87:D8:D2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5185CA17229A3DF3E827E0069EF1409F7201F99A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa
Signing time:             Thu 10 Oct 2024 19:32:51 +0000
ROA not before:           Thu 10 Oct 2024 19:27:51 +0000
ROA not after:            Thu 09 Oct 2025 19:32:51 +0000
asID:                     16276
IP address blocks:        23.95.142.0/24 maxlen: 24
                          192.228.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:85:ca:17:22:9a:3d:f3:e8:27:e0:06:9e:f1:40:9f:72:01:f9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 10 19:27:51 2024 GMT
            Not After : Oct  9 19:32:51 2025 GMT
        Subject: CN=E6D52E9356C12CA629094D2C93E13097B887D8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:f7:12:f8:15:bd:aa:23:27:0a:ff:a2:ec:
                    a6:e1:f1:13:b3:db:db:28:93:0c:84:f2:83:2a:96:
                    a2:1d:30:9a:bd:ab:7f:0f:5e:dc:7a:2c:51:14:ab:
                    59:93:92:5f:44:f8:6a:df:21:91:21:6b:d6:df:f1:
                    4b:01:36:fc:56:40:5c:0d:a9:f7:2b:29:6b:11:1a:
                    5d:7b:43:95:5d:fb:74:0e:a7:97:4b:49:33:cf:e1:
                    af:85:bd:1e:70:a5:cb:f5:2c:01:ea:4e:d6:46:96:
                    8d:37:48:f5:30:cc:96:27:cd:03:ed:0b:e4:78:93:
                    b4:dd:30:b5:c3:77:34:03:81:11:bb:63:e6:a2:f1:
                    f7:ed:a4:b0:7a:8f:fe:21:c6:ae:4f:10:84:ef:96:
                    36:b8:85:1f:ef:be:db:fc:74:09:eb:62:dc:29:37:
                    ff:3e:af:a4:e5:8e:66:dd:9c:e0:46:34:0e:99:be:
                    68:57:64:06:99:69:5e:cf:ed:09:02:b8:0d:9a:10:
                    ed:ad:a6:88:67:37:f1:0d:9f:34:1d:3a:7a:12:b7:
                    93:7f:dd:15:93:cd:6e:be:25:48:5b:4e:4b:81:ff:
                    52:de:8f:c2:dd:d7:6e:57:36:89:00:1e:d9:66:b8:
                    62:08:b3:6c:f9:3a:46:14:be:7d:76:ab:bd:2c:22:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D5:2E:93:56:C1:2C:A6:29:09:4D:2C:93:E1:30:97:B8:87:D8:D2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.142.0/24
                  192.228.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:67:a0:bb:8f:22:aa:03:b5:4c:c8:5b:fc:de:4b:ab:6c:
         d7:59:e4:18:4f:b3:94:e2:01:15:80:3b:06:16:c1:e5:b7:64:
         ef:a1:2c:d0:17:4f:51:7b:57:9d:30:54:41:08:bd:ad:19:9b:
         c4:c0:d6:b4:c0:e3:17:02:48:ad:61:fd:ae:bb:1d:b5:c0:81:
         00:94:ad:24:ce:ac:08:85:f2:55:be:3c:c1:78:cf:1d:7e:42:
         fc:43:29:a8:50:a3:c2:18:61:ea:f9:d5:c3:6e:40:41:55:47:
         0e:ce:c4:e1:0f:6a:a0:6f:df:0e:85:ad:c3:99:c2:7a:0d:f3:
         1f:ad:9d:2b:d7:df:d9:83:2c:76:f2:44:b4:6d:61:06:b5:b8:
         6a:a7:de:41:13:72:8c:31:3c:14:54:d6:0a:38:f3:34:05:56:
         dc:bf:e5:ec:23:5a:5c:09:c6:e0:94:6b:2b:d0:e1:f5:f4:be:
         61:c0:f7:b0:fd:e4:7c:6e:9b:a7:0b:f7:f5:44:fb:23:ab:42:
         8e:16:c0:2e:92:db:80:2e:21:6c:97:73:2c:fe:7f:b9:86:5b:
         b0:b7:16:d0:9d:37:a6:cc:85:8f:36:d5:8b:f4:a9:6e:3e:5d:
         a4:b2:80:59:08:02:34:0e:82:5c:20:4e:cc:2b:d6:1f:4d:2b:
         e4:d8:81:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUUYXKFyKaPfPoJ+AGnvFAn3IB+ZowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQxMDEwMTkyNzUxWhcNMjUxMDA5MTkzMjUx
WjAzMTEwLwYDVQQDEyhFNkQ1MkU5MzU2QzEyQ0E2MjkwOTREMkM5M0UxMzA5N0I4
ODdEOEQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspX3EvgVvaoj
Jwr/ouym4fETs9vbKJMMhPKDKpaiHTCavat/D17ceixRFKtZk5JfRPhq3yGRIWvW
3/FLATb8VkBcDan3KylrERpde0OVXft0DqeXS0kzz+Gvhb0ecKXL9SwB6k7WRpaN
N0j1MMyWJ80D7QvkeJO03TC1w3c0A4ERu2PmovH37aSweo/+IcauTxCE75Y2uIUf
777b/HQJ62LcKTf/Pq+k5Y5m3ZzgRjQOmb5oV2QGmWlez+0JArgNmhDtraaIZzfx
DZ80HTp6EreTf90Vk81uviVIW05Lgf9S3o/C3dduVzaJAB7ZZrhiCLNs+TpGFL59
dqu9LCKDbwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFObVLpNWwSymKQlNLJPhMJe4
h9jSMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF1+OAwQAwOR0MA0GCSqGSIb3DQEB
CwUAA4IBAQBuL2egu48iqgO1TMhb/N5Lq2zXWeQYT7OU4gEVgDsGFsHlt2TvoSzQ
F09Re1edMFRBCL2tGZvEwNa0wOMXAkitYf2uux21wIEAlK0kzqwIhfJVvjzBeM8d
fkL8QymoUKPCGGHq+dXDbkBBVUcOzsThD2qgb98Oha3DmcJ6DfMfrZ0r19/Zgyx2
8kS0bWEGtbhqp95BE3KMMTwUVNYKOPM0BVbcv+XsI1pcCcbglGsr0OH19L5hwPew
/eR8bpunC/f1RPsjq0KOFsAuktuALiFsl3Ms/n+5hluwtxbQnTemzIWPNtWL9Klu
Pl2ksoBZCAI0DoJcIE7MK9YfTSvk2IHh
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org