Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS22348.roa
File:                     AS22348.roa (raw, json)
Hash identifier:          ZDJLk3/YXEf7nhgintVVkyzz4h87e6vMwd/FShG3wm0=
Subject key identifier:   95:BA:4A:B9:20:91:83:4B:C4:0A:13:60:CD:9A:18:86:4C:50:3F:7C
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       7728E1A3FFCF313C739FFEDFA3114741F86B11FB
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS22348.roa
Signing time:             Thu 19 Jun 2025 09:39:36 +0000
ROA not before:           Thu 19 Jun 2025 09:34:36 +0000
ROA not after:            Thu 18 Jun 2026 09:39:36 +0000
asID:                     22348
IP address blocks:        40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:28:e1:a3:ff:cf:31:3c:73:9f:fe:df:a3:11:47:41:f8:6b:11:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 19 09:34:36 2025 GMT
            Not After : Jun 18 09:39:36 2026 GMT
        Subject: CN=95BA4AB92091834BC40A1360CD9A18864C503F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:59:e4:63:b1:f2:89:03:a0:9c:37:4c:35:
                    43:43:ee:86:71:6a:af:f2:5c:60:ac:07:9f:0e:c5:
                    0b:52:56:2f:ec:22:e1:66:c7:d5:af:cd:e9:4e:ea:
                    04:ca:92:c3:52:cc:5e:89:d9:86:cd:c4:f6:0a:b3:
                    fe:1e:2e:42:82:64:cf:bc:ca:b8:ee:52:49:34:5d:
                    9f:26:50:41:85:ff:79:e8:b8:ab:53:28:b9:ec:66:
                    91:fe:58:49:63:3d:5d:a5:39:81:b1:02:5e:69:f0:
                    9b:b8:55:32:47:e3:b2:fd:f8:b8:0c:13:ba:fd:6c:
                    bc:7c:8c:dc:11:ab:20:f0:15:64:bd:71:dc:51:d7:
                    97:83:8b:f5:63:6a:8f:e5:4d:79:a1:73:d4:7b:76:
                    b2:43:76:14:2e:fb:12:11:20:34:e4:48:da:77:52:
                    ac:9c:6a:46:8f:14:61:00:d9:8d:dd:0a:24:b0:2a:
                    b2:e5:74:04:28:bc:d3:46:87:bf:4f:8d:03:ea:02:
                    90:c8:7b:fa:14:8f:8e:4e:6a:65:45:71:05:55:a0:
                    9e:25:3d:eb:6f:73:b2:b8:89:16:06:c9:a6:49:75:
                    39:e0:42:78:48:08:83:15:27:0e:17:e3:07:5d:f2:
                    c6:01:1d:f0:0c:71:a5:f5:4e:97:bb:83:da:d8:cd:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BA:4A:B9:20:91:83:4B:C4:0A:13:60:CD:9A:18:86:4C:50:3F:7C
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS22348.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:ff:1a:27:06:d9:a7:59:c2:e4:a8:fa:b7:7f:d9:2e:31:
         30:46:e1:3e:55:8a:ca:e2:0d:ca:1a:f9:01:32:24:1c:68:b6:
         17:a5:ad:bb:bb:61:97:d0:f5:4a:9b:5e:55:b8:27:4c:80:29:
         58:4e:28:e2:a5:6b:d3:88:24:3f:28:90:2a:88:cb:b8:e1:18:
         ea:c0:f6:a0:f8:ad:ba:f6:3c:fa:8d:3e:80:c1:f2:40:5c:f0:
         ee:fd:34:da:40:03:44:24:f2:07:1b:8d:98:41:76:89:3f:1d:
         b9:8e:0e:ea:71:59:08:cd:aa:26:7f:3b:6b:73:bb:05:2f:de:
         1d:b9:1a:69:e0:8f:fa:3f:36:2d:2c:6e:70:07:c5:1b:b8:e8:
         1c:23:c4:97:78:05:58:4e:17:97:29:d6:80:b9:35:82:62:7c:
         83:2e:2a:9c:b4:e1:91:74:03:a4:bb:6e:32:87:60:fd:b6:72:
         58:c5:c7:0a:60:2e:84:1d:9f:4b:d9:2e:0c:fe:be:72:00:fa:
         a7:9b:81:a9:f5:85:05:4a:4c:f9:09:c6:23:59:cc:86:65:96:
         2a:c0:4c:27:43:c7:3b:5f:30:d2:95:d1:7d:5e:6c:69:f4:03:
         40:23:30:53:88:d0:e1:c0:b0:a9:00:f8:b0:a9:66:f1:f7:04:
         12:05:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:11:36 2025 by rpki-client