Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22516.roa
File:                     AS22516.roa (raw, json)
Hash identifier:          4unfQTpsN8/nQumexXDLt5vQFljGaHVQ2B/DkM7MxrI=
Subject key identifier:   6A:6E:99:51:57:09:81:AE:88:4C:BA:09:8E:13:50:08:B9:9F:F6:8C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3B1C9127A0AC9236F107CCBC58EBCF93C70BEF89
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22516.roa
Signing time:             Tue 19 May 2026 12:36:00 +0000
ROA not before:           Tue 19 May 2026 12:31:00 +0000
ROA not after:            Tue 18 May 2027 12:36:00 +0000
asID:                     22516
IP address blocks:        104.234.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 15:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1c:91:27:a0:ac:92:36:f1:07:cc:bc:58:eb:cf:93:c7:0b:ef:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 19 12:31:00 2026 GMT
            Not After : May 18 12:36:00 2027 GMT
        Subject: CN=6A6E9951570981AE884CBA098E135008B99FF68C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:67:36:17:b2:9f:ff:51:cd:74:ce:68:0b:
                    58:d2:91:c7:e0:c9:f8:1d:91:c3:e6:33:9f:48:fe:
                    d3:46:ae:6c:66:d3:ed:7c:27:a3:c7:6b:60:65:8a:
                    48:a9:e1:a3:91:86:17:24:90:d6:7c:07:cf:6b:52:
                    c4:f1:e3:ab:e9:21:44:bb:ed:29:c6:3e:d4:11:3c:
                    ea:4d:39:27:2a:d1:39:35:c0:31:f0:c0:72:fd:a8:
                    85:17:f7:52:79:62:bd:8e:7d:45:27:9e:8b:35:c1:
                    38:63:d9:a1:d6:33:32:46:1d:29:5b:0d:a8:4d:03:
                    ad:3c:d2:03:35:e1:eb:d2:71:5a:94:aa:6e:94:7d:
                    05:6e:2d:e0:28:7a:b1:33:dd:49:2b:88:ff:cc:3f:
                    87:75:3f:f4:6f:10:83:fd:31:36:65:36:32:4f:1b:
                    3f:97:5e:f6:4d:be:fd:35:aa:26:2c:f4:45:dd:24:
                    47:44:86:44:01:83:3e:ef:b2:70:5a:fb:6f:09:a3:
                    31:8d:f6:e7:36:8f:b0:82:fb:4d:f8:fc:cb:03:39:
                    38:da:d8:e2:0e:43:03:1a:32:64:01:08:50:27:98:
                    8b:20:50:6c:86:be:3e:b5:4b:3d:80:2e:8b:f8:a1:
                    37:8e:fc:af:62:75:39:0a:82:47:0f:0f:52:b3:06:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6E:99:51:57:09:81:AE:88:4C:BA:09:8E:13:50:08:B9:9F:F6:8C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22516.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:c7:8f:8e:3d:4f:8f:b3:8d:79:da:dd:fa:3c:05:df:7b:
         9a:e3:70:fa:14:2e:f5:86:80:0a:f5:5a:4c:b8:a8:db:6b:58:
         36:ee:08:de:e1:ad:e6:03:40:a0:0b:be:79:c0:1f:dc:8f:18:
         35:72:72:02:9d:cf:30:ee:ec:ad:0a:d7:5e:e8:16:e5:3b:8e:
         5c:81:5a:db:98:0f:2b:5a:60:e4:6b:a2:7e:4c:43:b5:b7:32:
         30:2b:2d:8f:3b:b3:cb:f8:c5:b0:65:e5:7e:c9:24:51:a5:59:
         e9:b4:3a:b5:d6:da:78:0d:38:c6:6b:96:3e:0d:62:19:53:9c:
         12:12:f7:78:63:bf:d5:82:d1:48:74:fd:ae:95:cf:17:59:3b:
         6b:6a:98:99:26:22:15:84:b6:4d:cf:6c:30:2e:af:65:d6:3b:
         a0:39:c3:86:3b:55:b7:33:03:58:cd:f4:b4:cd:95:6c:65:97:
         dc:1e:c4:c5:04:cf:69:d3:cb:22:ac:28:ef:ab:08:43:ec:26:
         40:07:68:cc:e6:8f:f1:97:6a:aa:9c:1e:a1:05:c3:11:aa:cc:
         c9:06:5e:5b:90:8e:57:54:04:a8:ac:df:bc:25:0e:2b:b2:f4:
         53:bc:14:fd:54:dd:07:16:0f:e9:08:49:da:a2:ec:e8:f5:40:
         1a:e4:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:28 2026 by rpki-client