Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa
File:                     AS22427.roa (raw, json)
Hash identifier:          /Gu3I0V2/ffmt7dc3C6qg/PC5lPzYfq0T9p9jlMlQ2c=
Subject key identifier:   18:73:D6:57:09:7F:61:85:53:5E:CA:1B:A2:1C:C7:4C:48:29:0A:6A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2D5F5181354AC95F54E65BE63E08D33C6AD29281
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa
Signing time:             Mon 21 Jul 2025 12:40:34 +0000
ROA not before:           Mon 21 Jul 2025 12:35:34 +0000
ROA not after:            Mon 20 Jul 2026 12:40:34 +0000
asID:                     22427
IP address blocks:        172.245.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5f:51:81:35:4a:c9:5f:54:e6:5b:e6:3e:08:d3:3c:6a:d2:92:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 21 12:35:34 2025 GMT
            Not After : Jul 20 12:40:34 2026 GMT
        Subject: CN=1873D657097F6185535ECA1BA21CC74C48290A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:9b:59:f4:1f:92:85:62:ca:62:87:16:f4:
                    89:0a:0e:01:6e:88:59:9f:35:96:95:77:d5:ff:d8:
                    3f:68:fa:ea:5e:16:5b:12:0d:09:cc:b9:48:12:7c:
                    fd:fe:0f:ce:30:42:80:a5:ce:75:65:1b:ec:d7:8e:
                    43:97:5e:29:8f:4c:4b:ab:0f:48:e6:24:89:50:b9:
                    7f:fa:13:96:2f:00:ba:33:76:d3:b9:69:35:66:a9:
                    04:40:7a:dc:2c:12:86:b8:e8:3e:62:bc:9b:1c:6c:
                    cc:4f:dd:03:03:b5:50:60:7c:b8:af:8c:4a:88:bd:
                    0f:b6:b7:3d:8d:a5:e8:10:16:be:64:94:94:95:af:
                    a3:ad:d4:ea:7e:f2:4a:21:d3:ae:ef:12:76:b7:59:
                    6e:9b:7f:62:95:2a:27:c7:f7:66:95:e8:f0:08:52:
                    cd:db:c2:6e:02:40:5f:cf:45:76:c2:da:61:1e:47:
                    4b:db:2b:93:32:68:98:df:09:73:3a:45:87:fb:1e:
                    cb:57:e1:3a:73:72:11:a0:46:a2:af:94:ca:cc:8c:
                    ef:4f:28:48:07:f9:82:21:99:96:df:a3:de:2f:d0:
                    58:18:9e:1c:50:43:8c:9d:09:62:b3:d0:68:ac:4d:
                    00:2b:69:33:b3:33:85:e0:65:72:ab:8e:7d:f4:2f:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:73:D6:57:09:7F:61:85:53:5E:CA:1B:A2:1C:C7:4C:48:29:0A:6A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.245.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:17:ad:41:38:be:e6:50:b9:ef:67:13:2b:ff:38:93:2a:82:
         7d:79:e2:c7:eb:eb:d8:0d:5d:f0:74:3f:bf:dd:9b:df:93:81:
         7b:8f:24:f5:46:cf:83:90:a8:8a:a4:4a:7b:82:26:9e:5d:53:
         24:27:87:8d:16:5a:8b:0f:2c:a2:4f:93:d3:0c:6b:b4:1e:31:
         90:a8:1a:88:04:78:80:a1:84:09:39:db:25:a6:15:1d:9e:76:
         68:35:3a:87:69:84:15:4b:35:03:52:c5:c3:83:b6:e9:51:05:
         f1:9f:63:41:fa:f1:f7:30:12:b2:e1:a3:6c:e2:8a:4d:71:ff:
         dd:e4:e0:f6:44:03:54:35:67:a7:98:f1:7f:99:59:86:06:b9:
         b9:c6:94:9a:f6:4f:38:0e:8b:4c:ad:f6:d1:b8:9a:3d:bc:ee:
         f2:fc:f9:e6:b3:be:f0:a7:75:b9:30:65:d0:a5:d3:5b:79:66:
         07:e8:db:71:9d:5f:6a:c4:c6:5b:b5:86:b7:9d:1d:73:0a:d5:
         5b:be:36:ae:c7:57:29:b4:e4:d8:1b:2b:7c:49:7b:09:75:6c:
         6c:06:54:ee:58:c1:62:29:b6:a8:4f:e5:24:b7:d4:31:57:16:
         d2:49:a2:e3:df:6f:a2:7f:9e:2d:99:77:6b:26:88:67:6a:94:
         e7:54:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:41:09 2025 by rpki-client