Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS22348.roa
File:                     AS22348.roa (raw, json)
Hash identifier:          BWvDuI7dxlvLy+Lr1qJbpuwuBjtmcnZ4nR56uXRA9D0=
Subject key identifier:   FC:59:1A:2E:82:FD:CA:6C:AE:1D:E7:EE:05:DE:25:22:B5:DB:F1:69
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       734590514F407E64D3D24E0B4F9F6C9C5F010D9A
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS22348.roa
Signing time:             Thu 21 May 2026 10:36:00 +0000
ROA not before:           Thu 21 May 2026 10:31:00 +0000
ROA not after:            Thu 20 May 2027 10:36:00 +0000
asID:                     22348
IP address blocks:        40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 08:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:45:90:51:4f:40:7e:64:d3:d2:4e:0b:4f:9f:6c:9c:5f:01:0d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May 21 10:31:00 2026 GMT
            Not After : May 20 10:36:00 2027 GMT
        Subject: CN=FC591A2E82FDCA6CAE1DE7EE05DE2522B5DBF169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:48:c7:83:b7:6f:14:09:ce:8e:0b:76:fc:
                    e8:4f:a8:34:58:6a:9a:a8:0a:a4:a2:0e:fb:ac:1c:
                    ae:a4:e9:19:84:45:06:cb:42:39:96:b7:6d:fe:16:
                    b4:43:d2:81:3c:b5:4c:16:66:9c:6c:c3:12:aa:98:
                    85:81:38:3a:4e:e4:4a:4c:ba:25:72:97:6d:4d:09:
                    77:26:83:b5:3e:8c:3e:26:f3:3c:18:90:d4:35:26:
                    1a:d8:08:f9:b0:d4:19:e0:48:46:b6:d7:e9:a7:3b:
                    0f:f2:19:23:dc:31:10:36:d3:66:ed:52:b1:ce:c5:
                    39:82:c2:1a:d8:01:2e:5e:b5:17:12:c9:c6:3e:12:
                    5d:54:8b:d5:1f:02:89:49:b1:20:e6:a4:ef:b7:a3:
                    0f:cb:be:a9:89:6c:aa:7f:77:8e:ad:b7:82:cf:fb:
                    50:92:43:56:7a:4a:fc:8e:cf:85:2d:0d:2a:a7:b8:
                    a5:bd:c4:9d:2e:f5:65:39:0b:36:20:24:62:f6:04:
                    fb:5f:5b:c5:08:61:f1:e6:c9:4f:15:e7:51:02:f6:
                    68:ff:e2:a0:b6:d2:4d:d4:09:74:da:5f:57:58:49:
                    5b:51:7e:6f:71:40:a7:6d:95:89:59:b6:ea:64:98:
                    ae:bd:fa:b9:a2:a1:e6:90:69:88:8f:9e:76:6e:0e:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:59:1A:2E:82:FD:CA:6C:AE:1D:E7:EE:05:DE:25:22:B5:DB:F1:69
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS22348.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:3d:fc:d5:33:ea:91:2c:21:b0:16:08:ff:ac:7f:5c:89:d1:
         af:8c:0a:f0:aa:6e:6c:34:3a:a9:90:0b:42:dc:ac:cf:d5:74:
         2e:ee:d7:42:1c:5f:0a:ff:0b:80:f3:a8:e8:3e:23:74:4b:70:
         ce:82:b8:a2:ae:89:41:3c:16:70:d6:b0:36:ee:97:ad:e1:c2:
         bf:71:ba:f4:44:e7:99:da:d6:e9:b0:bc:ad:23:ae:64:2e:14:
         51:2f:73:ad:e9:c0:96:54:3e:6b:83:14:a4:cf:f8:8e:09:cf:
         4c:30:81:ac:b7:ad:f2:18:20:bd:c8:8f:b9:0c:8d:05:47:bf:
         a4:ad:d3:db:b0:3a:fd:6a:f4:c7:27:2e:cc:44:c5:a6:89:df:
         54:f0:df:a7:16:ca:55:96:77:dd:ee:b5:8f:83:fc:00:bc:d8:
         bf:34:df:5b:1e:18:c7:d1:2d:97:53:5d:68:f9:a0:ba:93:73:
         7a:be:f9:45:9f:85:65:49:74:91:07:e4:dc:44:01:16:3d:d3:
         65:58:a6:2d:74:02:5d:a7:3b:f8:86:d5:0b:32:cd:68:5e:71:
         2f:23:dd:62:f4:e5:87:54:74:3b:e5:47:e8:2c:a4:60:71:24:
         af:c7:3b:d3:15:d2:d7:6f:f3:28:ba:41:51:2c:d6:4b:92:41:
         90:7f:78:5e
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUc0WQUU9AfmTT0k4LT59snF8BDZowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNTIxMTAzMTAwWhcNMjcwNTIwMTAzNjAw
WjAzMTEwLwYDVQQDEyhGQzU5MUEyRTgyRkRDQTZDQUUxREU3RUUwNURFMjUyMkI1
REJGMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NpIx4O3bxQJ
zo4LdvzoT6g0WGqaqAqkog77rByupOkZhEUGy0I5lrdt/ha0Q9KBPLVMFmacbMMS
qpiFgTg6TuRKTLolcpdtTQl3JoO1Pow+JvM8GJDUNSYa2Aj5sNQZ4EhGttfppzsP
8hkj3DEQNtNm7VKxzsU5gsIa2AEuXrUXEsnGPhJdVIvVHwKJSbEg5qTvt6MPy76p
iWyqf3eOrbeCz/tQkkNWekr8js+FLQ0qp7ilvcSdLvVlOQs2ICRi9gT7X1vFCGHx
5slPFedRAvZo/+KgttJN1Al02l9XWElbUX5vcUCnbZWJWbbqZJiuvfq5oqHmkGmI
j552bg4rMwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPxZGi6C/cpsrh3n7gXeJSK1
2/FpMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzIyMzQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKLdQMA0GCSqGSIb3DQEBCwUAA4IB
AQAsPfzVM+qRLCGwFgj/rH9cidGvjArwqm5sNDqpkAtC3KzP1XQu7tdCHF8K/wuA
86joPiN0S3DOgriirolBPBZw1rA27pet4cK/cbr0ROeZ2tbpsLytI65kLhRRL3Ot
6cCWVD5rgxSkz/iOCc9MMIGst63yGCC9yI+5DI0FR7+krdPbsDr9avTHJy7MRMWm
id9U8N+nFspVlnfd7rWPg/wAvNi/NN9bHhjH0S2XU11o+aC6k3N6vvlFn4VlSXSR
B+TcRAEWPdNlWKYtdAJdpzv4htULMs1oXnEvI91i9OWHVHQ75UfoLKRgcSSvxzvT
FdLXb/MoukFRLNZLkkGQf3he
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:02:02 2026 by rpki-client