Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          4Q9RL9MQqa99G3cB+VvSzKCKPhf/fQI2IPYQJbG4PpI=
Subject key identifier:   E4:97:05:E7:5A:46:63:E4:C1:A7:FE:E4:BC:E4:DA:19:DA:5E:17:40
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1A05C4BE27F9860E11FAC7DCBFB69FB655E9C3A9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa
Signing time:             Wed 22 Apr 2026 18:41:29 +0000
ROA not before:           Wed 22 Apr 2026 18:36:29 +0000
ROA not after:            Wed 21 Apr 2027 18:41:29 +0000
asID:                     16276
IP address blocks:        157.254.30.0/24 maxlen: 24
                          157.254.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 13:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:05:c4:be:27:f9:86:0e:11:fa:c7:dc:bf:b6:9f:b6:55:e9:c3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 22 18:36:29 2026 GMT
            Not After : Apr 21 18:41:29 2027 GMT
        Subject: CN=E49705E75A4663E4C1A7FEE4BCE4DA19DA5E1740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:89:fc:46:1d:6a:5a:c4:6c:98:70:d8:c4:
                    38:f2:37:46:9f:17:c0:d6:68:23:42:05:70:fd:b9:
                    ea:3d:7d:81:f8:b2:98:c5:60:fa:a7:c9:ab:4c:f4:
                    77:a7:63:98:08:79:4d:7f:b1:63:b4:c4:d9:fa:02:
                    54:d5:41:94:33:16:0e:ff:3a:c4:4d:5e:e3:fd:8a:
                    1d:39:c3:93:d9:9d:f1:0b:ed:dd:d8:15:8b:fe:36:
                    5a:e1:64:0a:24:ba:01:54:26:de:c3:b9:f0:80:e2:
                    99:53:d7:f5:76:4b:b5:fa:47:21:f9:61:66:0d:52:
                    bb:c7:0f:00:39:e4:c3:d2:ec:8b:1c:a6:e3:12:cc:
                    34:72:11:64:ed:84:99:89:7f:80:37:40:25:ef:a2:
                    25:c1:b7:3e:f9:3e:b3:a4:e2:db:a3:96:2d:ce:89:
                    eb:c3:f5:07:29:90:92:c6:b6:96:d5:dc:02:de:fb:
                    28:6f:7e:6f:75:cf:e8:b2:cc:5e:c1:d1:08:f0:03:
                    51:58:77:46:09:1b:ba:be:09:c6:f0:15:aa:e1:25:
                    05:2f:c1:85:75:17:14:50:7d:fe:13:94:fe:67:5f:
                    fb:5a:60:7a:c4:2f:ac:d7:7b:9e:29:2a:c5:07:f6:
                    e6:82:26:8f:1e:fa:3e:f6:7e:f9:2c:51:4c:fe:1a:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:05:E7:5A:46:63:E4:C1:A7:FE:E4:BC:E4:DA:19:DA:5E:17:40
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.30.0/24
                  157.254.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:61:7c:1e:74:09:5a:bb:a7:a1:44:a9:4f:65:3b:75:57:
         15:cd:25:e8:70:e3:b3:14:a3:95:8e:ce:c3:73:3f:6f:d6:c3:
         2a:e8:91:c7:5c:e6:d3:5e:31:0f:5f:33:b7:ae:ba:a8:68:f2:
         be:61:6c:29:9b:d3:fe:3d:9a:ff:19:a9:71:0e:f0:fa:88:02:
         0f:4b:96:1b:41:01:fe:83:9d:99:d5:b4:a9:47:ef:c9:02:ae:
         b1:0f:49:87:c9:f8:f7:94:d8:b3:63:af:0e:f5:d9:b2:82:02:
         df:84:1f:cf:3c:0b:24:3a:95:c6:a9:62:8b:84:3b:0e:28:81:
         59:4b:33:0f:8d:c3:4c:d7:0c:40:7c:ab:68:c3:dc:e3:9e:a5:
         d4:2e:2f:ac:0b:d3:97:15:da:e9:ce:4e:b6:ee:f0:e5:dc:76:
         4f:6b:37:7b:ea:89:38:52:0d:71:e0:0b:f3:47:58:ce:0c:fc:
         25:21:85:ad:5f:eb:49:22:0a:26:d5:3a:71:64:08:8a:b9:ab:
         93:d2:b2:47:f0:ac:51:ec:1e:a5:c3:b7:69:79:77:23:d0:61:
         28:5a:f3:78:4c:c2:d4:da:1d:50:bf:e5:80:ed:06:ab:19:cb:
         9b:40:0a:db:87:31:50:71:40:47:b5:96:71:d6:50:b6:cc:5a:
         c6:6a:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:56:09 2026 by rpki-client