Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22516.roa
File:                     AS22516.roa (raw, json)
Hash identifier:          bJL99rTAtjt7aPVYZrYqWbfJqcOOXDmxKRbSwepUplA=
Subject key identifier:   D5:43:50:92:12:D3:24:A0:31:CE:60:1A:68:E8:0E:AD:00:8D:FD:8A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       60D66F1DB06AA2DA33146CFFE10275E323B73A7D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22516.roa
Signing time:             Tue 17 Jun 2025 12:32:39 +0000
ROA not before:           Tue 17 Jun 2025 12:27:39 +0000
ROA not after:            Tue 16 Jun 2026 12:32:39 +0000
asID:                     22516
IP address blocks:        23.94.90.0/24 maxlen: 24
                          23.94.106.0/24 maxlen: 24
                          23.94.109.0/24 maxlen: 24
                          23.94.135.0/24 maxlen: 24
                          198.23.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d6:6f:1d:b0:6a:a2:da:33:14:6c:ff:e1:02:75:e3:23:b7:3a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 17 12:27:39 2025 GMT
            Not After : Jun 16 12:32:39 2026 GMT
        Subject: CN=D543509212D324A031CE601A68E80EAD008DFD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0d:50:7c:32:ad:68:c1:da:6f:e9:e0:c8:cd:
                    ab:77:21:ec:36:92:82:b5:94:98:8f:d4:42:d1:a2:
                    5d:52:50:e9:6c:bf:05:ca:be:2c:ad:3a:59:1a:d6:
                    f9:76:7d:8c:15:6b:9b:8e:fb:c2:de:75:a6:53:c7:
                    ad:64:87:f5:20:c0:0d:ab:df:b4:0a:00:94:4e:4c:
                    7b:49:be:bc:5a:12:c4:38:dd:a9:ec:94:20:64:4d:
                    38:41:42:99:c8:82:50:2a:37:82:3c:1b:c5:33:d1:
                    0d:c9:cf:32:c2:4f:fa:ae:7f:81:af:04:9d:31:0c:
                    74:58:37:e9:8a:36:ff:15:fe:92:c6:23:7b:e4:cd:
                    37:f9:0b:10:11:c2:ef:78:75:02:69:39:8e:37:02:
                    81:ce:b8:36:e0:fc:de:97:86:70:da:3f:cb:23:3f:
                    6e:94:2c:9b:fa:38:a2:8e:17:c4:10:40:22:d9:bc:
                    d8:9e:4c:12:c9:70:56:51:bf:80:27:f0:ce:a7:cd:
                    d1:d1:ae:fd:4c:f8:46:71:6c:9b:ed:e1:78:65:4f:
                    e9:94:54:5e:04:fe:da:b4:f6:eb:6d:01:fa:c0:3f:
                    7d:ab:c1:b4:38:a8:b4:05:3a:8e:51:bc:31:36:47:
                    3e:e6:22:ad:b7:9b:0e:99:35:e3:53:7a:06:18:8f:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:50:92:12:D3:24:A0:31:CE:60:1A:68:E8:0E:AD:00:8D:FD:8A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22516.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.90.0/24
                  23.94.106.0/24
                  23.94.109.0/24
                  23.94.135.0/24
                  198.23.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:60:4b:31:5d:ed:a1:06:e6:a5:59:81:a5:0e:b4:c0:f7:8b:
         70:87:12:a4:b9:19:d4:cb:ea:75:57:ec:6a:96:54:18:b3:de:
         c1:e9:34:8f:dd:ec:6a:65:be:72:4d:27:7e:dd:54:a0:a7:0a:
         37:69:4e:f7:7b:e7:7d:54:ad:40:c0:8f:3a:e9:17:e0:54:03:
         49:69:f3:bd:81:b4:93:aa:71:fa:5f:4e:4f:dd:56:4f:4e:c2:
         96:bb:66:75:0d:c7:b7:5c:bf:02:29:c4:97:c7:8d:70:17:b7:
         32:26:c4:b9:7a:11:e5:92:1c:6e:cd:72:a1:2b:40:88:39:d2:
         64:60:5e:91:3f:50:6f:60:be:f2:76:e4:5b:5f:60:50:30:3e:
         41:73:26:02:a0:6c:d0:9f:6d:48:a6:dc:72:32:01:5b:99:2c:
         9a:6a:a1:20:ca:20:73:ab:8a:9d:3e:cc:bb:c1:be:a2:c7:34:
         58:d9:6a:1c:cb:15:fc:bc:24:1c:c0:59:92:8b:33:fe:f2:30:
         d2:11:c6:73:a3:89:1b:53:92:0b:f2:4e:6d:60:0e:62:d0:2d:
         ae:05:e4:01:ee:73:0c:01:62:0c:49:46:5a:ec:bc:1b:5f:5b:
         8f:3d:f7:4c:73:ad:55:26:12:d5:a8:3a:09:a6:69:0d:9d:5c:
         75:39:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:51:12 2025 by rpki-client