Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22516.roa
File:                     AS22516.roa (raw, json)
Hash identifier:          khq2fZ8x5EqyTSHdKyhiiQeVEYqU8K/Tyqxm+CywcLo=
Subject key identifier:   74:F8:F4:EA:F9:AA:15:EE:9F:2E:17:61:20:1A:A1:30:33:95:49:50
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       449A29105573BB7A4DD0B52435A81BFCA041787E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22516.roa
Signing time:             Tue 19 May 2026 12:36:00 +0000
ROA not before:           Tue 19 May 2026 12:31:00 +0000
ROA not after:            Tue 18 May 2027 12:36:00 +0000
asID:                     22516
IP address blocks:        23.94.90.0/24 maxlen: 24
                          23.94.106.0/24 maxlen: 24
                          23.94.109.0/24 maxlen: 24
                          23.94.135.0/24 maxlen: 24
                          198.23.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9a:29:10:55:73:bb:7a:4d:d0:b5:24:35:a8:1b:fc:a0:41:78:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 19 12:31:00 2026 GMT
            Not After : May 18 12:36:00 2027 GMT
        Subject: CN=74F8F4EAF9AA15EE9F2E1761201AA13033954950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:85:eb:76:48:77:19:16:bd:86:54:1f:27:
                    1f:ad:b7:2e:29:48:1a:d3:6d:b7:1d:b3:bb:69:2b:
                    a6:d8:3d:af:fa:a0:1f:54:22:40:c0:85:40:59:64:
                    75:c8:47:6d:5c:85:2c:d4:b1:38:5c:50:c8:20:f1:
                    b6:41:27:c5:eb:36:d1:4a:6d:ee:29:36:b0:cb:26:
                    03:58:05:71:cd:c2:70:f0:ce:21:83:3a:67:e9:86:
                    3a:c0:46:be:70:62:dc:de:0c:4b:32:e5:9a:25:b6:
                    16:2d:39:60:df:e5:4a:5a:5c:91:f4:de:ad:08:ec:
                    22:e4:ad:91:3c:35:9e:f3:0d:31:45:a4:36:98:b0:
                    b5:f9:31:b3:a0:4b:45:2e:73:9e:d2:36:b3:a8:95:
                    4d:ba:7c:8f:9b:39:7d:62:7a:26:40:e4:1f:78:62:
                    eb:94:bc:f2:1c:81:f7:49:9e:d2:e2:08:f1:04:5e:
                    3e:19:f3:61:6d:44:71:4f:99:1e:7e:23:87:26:85:
                    2d:b1:79:a3:89:67:28:ae:5f:22:64:f6:71:aa:35:
                    37:7d:12:e1:05:95:f1:d7:b0:c5:7b:14:51:ff:ee:
                    b5:98:13:c5:21:e5:55:b1:26:bb:20:ae:9b:e6:98:
                    26:2b:bf:8a:31:2a:8e:cf:34:ec:8f:85:76:fe:25:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F8:F4:EA:F9:AA:15:EE:9F:2E:17:61:20:1A:A1:30:33:95:49:50
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22516.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.90.0/24
                  23.94.106.0/24
                  23.94.109.0/24
                  23.94.135.0/24
                  198.23.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:41:63:b2:eb:b8:15:5c:4d:b2:1a:0f:cd:48:c5:2b:a5:80:
         c7:cf:18:05:e0:0c:74:14:3a:d0:a0:47:97:22:f0:9e:09:5b:
         ae:5e:fc:e0:a3:cc:07:47:3b:95:62:91:6c:cb:a9:40:af:fb:
         fe:10:51:40:92:30:cc:08:3e:76:ae:dd:9a:0c:22:3d:57:f6:
         a7:0d:d7:13:77:3c:04:ea:a4:7b:c2:1e:3f:83:3e:b9:bf:ce:
         21:3a:2c:50:12:fd:08:d2:c2:42:e0:00:26:6c:e9:c0:e5:ce:
         02:aa:19:f9:a3:da:f8:83:b4:e4:d8:2b:22:0f:dc:a0:94:f8:
         93:c9:ff:92:c1:60:0d:b8:65:2f:1e:7e:3c:46:51:9d:61:fb:
         5a:dd:bf:4d:9f:9d:14:82:fd:82:0d:56:24:83:45:af:d5:44:
         05:8b:37:d4:eb:36:38:ed:b7:6b:90:66:16:40:4f:fa:a8:e2:
         c5:ae:88:f5:a1:66:40:b6:8f:23:e1:ad:d6:44:6f:22:19:7f:
         1c:96:e5:65:e7:24:42:bd:ec:a1:e9:16:19:31:a1:5d:8f:1b:
         97:3a:29:0e:fc:2b:ed:86:0f:e9:cb:2c:8b:ad:a8:3f:5d:5a:
         da:be:02:cf:09:f5:e0:89:bd:32:fd:da:76:74:16:16:9c:ad:
         db:75:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 19:44:30 2026 by rpki-client