Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa
File:                     AS7224.roa (raw, json)
Hash identifier:          6uWmiBfZafpxzc7JJUxINzNvifeVEjiDEwGV0Xm0LSw=
Subject key identifier:   19:7A:2A:30:41:C4:31:97:4D:87:19:A5:AA:93:12:97:5E:40:2C:38
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       74DDEAAF44653DE9BC1E950A357A1CBBEBCE719B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa
Signing time:             Thu 03 Jul 2025 09:29:44 +0000
ROA not before:           Thu 03 Jul 2025 09:24:44 +0000
ROA not after:            Thu 02 Jul 2026 09:29:44 +0000
asID:                     7224
IP address blocks:        157.254.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 16:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:dd:ea:af:44:65:3d:e9:bc:1e:95:0a:35:7a:1c:bb:eb:ce:71:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul  3 09:24:44 2025 GMT
            Not After : Jul  2 09:29:44 2026 GMT
        Subject: CN=197A2A3041C431974D8719A5AA9312975E402C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:6b:34:a9:99:13:42:98:b3:93:67:38:83:
                    01:6b:76:04:d6:e3:d3:7e:bb:64:51:62:01:b6:aa:
                    68:0e:ea:05:29:f8:d4:b9:7f:74:77:7c:08:a3:76:
                    63:b4:00:64:fb:97:18:94:df:a0:83:a2:29:4f:ce:
                    cf:92:23:63:f7:6e:0b:61:26:08:11:1e:4f:56:5a:
                    47:bc:c5:de:d0:a6:0d:47:d7:0f:a4:0d:0c:99:6a:
                    ae:a7:be:f6:c8:07:e6:b9:59:93:79:7a:12:31:7d:
                    4e:90:aa:51:05:0d:90:89:f3:9c:f8:1a:5c:37:fd:
                    3f:c5:45:77:7a:7f:04:51:f0:6a:4a:7e:14:d7:ec:
                    73:8c:b9:5a:f6:2c:b6:97:78:34:58:4e:74:73:20:
                    28:31:15:4f:cc:99:9b:86:74:d6:8a:0f:2a:4b:19:
                    72:bb:7c:3d:24:bd:47:e9:5f:ec:44:bc:95:51:91:
                    11:6b:6b:d2:47:4a:2d:ea:80:3a:25:25:fe:bb:43:
                    5d:72:3a:3c:ad:c8:e9:63:ca:a6:bd:ee:18:b9:5e:
                    fd:7f:71:92:a3:9f:8d:ea:95:8e:37:ea:20:d0:d3:
                    40:ea:8d:2d:74:4d:25:bc:3f:94:4b:24:70:8a:ee:
                    f8:01:66:e6:94:92:f7:3d:8b:25:c1:0d:a2:a7:03:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7A:2A:30:41:C4:31:97:4D:87:19:A5:AA:93:12:97:5E:40:2C:38
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ff:95:cb:7e:21:d1:64:c1:42:87:6f:6b:db:97:dd:5c:37:
         18:97:5a:38:eb:d4:c5:b3:61:52:70:b9:f7:83:d7:11:ba:e9:
         a4:b6:5c:04:af:8a:f4:94:0c:31:c1:b7:06:8e:da:ce:3a:33:
         93:e5:2b:24:cd:44:61:51:59:e8:c2:7b:f6:af:32:81:5e:39:
         2a:cb:3f:5b:dc:fe:15:2a:dd:81:98:6f:d0:45:bd:f7:be:9b:
         c8:6d:0b:03:a6:1d:34:67:88:c4:88:d3:15:4e:ca:df:60:3e:
         7e:9c:11:47:b2:56:eb:cd:6d:e0:bd:f5:54:f1:9b:7b:25:7a:
         f5:bc:b8:f0:5a:7a:9f:56:c3:4a:9a:ca:0a:dc:05:dc:42:22:
         92:fc:9a:a5:9c:97:46:2d:4b:15:85:65:c2:6e:de:b6:a0:10:
         a3:c5:7c:fa:30:54:01:d8:ab:30:ba:45:3f:e1:77:31:56:fd:
         da:83:db:82:af:af:91:78:38:5e:b9:cc:c1:f6:61:bd:2b:29:
         5b:ae:71:e7:94:34:19:8b:70:05:d3:5a:05:22:a5:9b:bf:d8:
         41:51:7e:85:b7:94:d2:3a:fe:e9:7e:d4:41:31:e1:54:2b:6b:
         d7:48:0d:ba:56:e1:19:37:35:1a:a2:55:39:0b:0c:4c:89:06:
         dd:63:e5:e2
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUdN3qr0RlPem8HpUKNXocu+vOcZswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNzAzMDkyNDQ0WhcNMjYwNzAyMDkyOTQ0
WjAzMTEwLwYDVQQDEygxOTdBMkEzMDQxQzQzMTk3NEQ4NzE5QTVBQTkzMTI5NzVF
NDAyQzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriVrNKmZE0KY
s5NnOIMBa3YE1uPTfrtkUWIBtqpoDuoFKfjUuX90d3wIo3ZjtABk+5cYlN+gg6Ip
T87PkiNj924LYSYIER5PVlpHvMXe0KYNR9cPpA0MmWqup772yAfmuVmTeXoSMX1O
kKpRBQ2QifOc+BpcN/0/xUV3en8EUfBqSn4U1+xzjLla9iy2l3g0WE50cyAoMRVP
zJmbhnTWig8qSxlyu3w9JL1H6V/sRLyVUZERa2vSR0ot6oA6JSX+u0Ndcjo8rcjp
Y8qmve4YuV79f3GSo5+N6pWON+og0NNA6o0tdE0lvD+USyRwiu74AWbmlJL3PYsl
wQ2ipwPAqwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFBl6KjBBxDGXTYcZpaqTEpde
QCw4MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzcyMjQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/qowDQYJKoZIhvcNAQELBQADggEB
AJX/lct+IdFkwUKHb2vbl91cNxiXWjjr1MWzYVJwufeD1xG66aS2XASvivSUDDHB
twaO2s46M5PlKyTNRGFRWejCe/avMoFeOSrLP1vc/hUq3YGYb9BFvfe+m8htCwOm
HTRniMSI0xVOyt9gPn6cEUeyVuvNbeC99VTxm3slevW8uPBaep9Ww0qaygrcBdxC
IpL8mqWcl0YtSxWFZcJu3ragEKPFfPowVAHYqzC6RT/hdzFW/dqD24Kvr5F4OF65
zMH2Yb0rKVuuceeUNBmLcAXTWgUipZu/2EFRfoW3lNI6/ul+1EEx4VQra9dIDbpW
4Rk3NRqiVTkLDEyJBt1j5eI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 05:41:59 2025 by rpki-client