Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22773.roa
File:                     AS22773.roa (raw, json)
Hash identifier:          INuRjh/vhZQD5g8Ux5dxj2MqimhPipAiBDi+uxSZPNA=
Subject key identifier:   1A:ED:84:6B:A8:76:BA:A4:E8:54:F6:7C:F5:D4:9A:34:4B:5C:D5:A4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0CB32AB793FB95789EEB2456D281164402F5C65E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22773.roa
Signing time:             Sun 05 Jan 2025 00:00:08 +0000
ROA not before:           Sat 04 Jan 2025 23:55:08 +0000
ROA not after:            Sun 04 Jan 2026 00:00:08 +0000
asID:                     22773
IP address blocks:        104.234.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b3:2a:b7:93:fb:95:78:9e:eb:24:56:d2:81:16:44:02:f5:c6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan  4 23:55:08 2025 GMT
            Not After : Jan  4 00:00:08 2026 GMT
        Subject: CN=1AED846BA876BAA4E854F67CF5D49A344B5CD5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:23:47:fa:a1:0a:bb:40:c5:fb:e3:e8:fe:
                    0b:a6:7e:37:0f:c9:fe:37:7e:98:b1:b0:fd:26:21:
                    d4:24:49:11:46:f3:6f:65:ef:96:15:60:8e:23:e8:
                    c2:99:4a:70:3a:05:44:e7:c2:35:2a:81:de:de:74:
                    6d:8e:29:66:f0:23:84:3a:db:24:2e:e6:87:1e:6e:
                    ea:29:aa:24:7c:cb:4b:0f:1c:27:f6:b5:b5:1a:c4:
                    be:79:72:86:b5:36:d9:e9:75:0d:6e:96:94:06:3b:
                    74:82:d8:97:f2:f4:ae:dd:be:17:fb:3a:8e:0d:8f:
                    99:cc:08:52:63:e8:c4:05:f3:57:80:52:2c:45:48:
                    ed:10:8e:84:40:fd:7d:50:b9:56:bd:1b:e1:41:5f:
                    8c:d3:32:0d:43:1f:32:85:dc:70:47:0e:33:3c:96:
                    a4:1e:ff:f8:9e:ed:74:e7:de:20:6b:67:75:4e:c4:
                    ea:bf:55:12:f0:a4:f9:cd:28:fb:fd:20:f1:c4:83:
                    fc:1f:8b:37:b6:b2:d3:28:54:93:03:19:9a:53:4b:
                    a3:76:15:03:72:46:79:9c:9e:ff:ab:9e:2a:df:19:
                    1c:da:42:c6:97:37:8a:52:ac:37:d3:b6:37:2e:d9:
                    d5:79:3e:36:3d:2b:da:d3:49:cd:42:dc:0e:19:90:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:ED:84:6B:A8:76:BA:A4:E8:54:F6:7C:F5:D4:9A:34:4B:5C:D5:A4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22773.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:4b:23:83:09:8e:7b:c4:1e:17:4a:a7:97:2c:96:27:7c:86:
         f2:e3:33:f7:fd:6c:aa:ac:ac:5b:da:ec:90:ac:3c:be:76:dc:
         3f:b7:75:4e:0f:4b:8e:e3:d2:ea:05:10:96:5b:74:83:26:cb:
         49:46:dc:d8:d9:35:cb:7b:5d:2b:e1:00:73:af:b7:8f:85:a0:
         be:14:f2:fa:b0:70:48:93:fc:67:ba:f2:b7:a0:59:b9:eb:2e:
         7e:a0:43:6c:33:5b:b1:9b:5f:6b:9a:0d:7d:9b:51:f0:40:2c:
         bd:58:5c:65:ad:2c:54:da:46:b8:8d:be:4e:7a:03:95:8f:69:
         34:30:75:db:26:b4:96:59:0b:ff:cb:ce:8c:24:bc:9d:e5:41:
         35:e9:dd:12:41:0f:9d:ac:ab:da:59:6f:01:ec:8c:a0:7c:b6:
         af:92:6d:c4:ae:97:a2:c9:51:73:96:e1:42:be:bd:d3:16:69:
         90:66:3e:84:70:b0:13:30:e8:ce:cc:b7:43:76:43:27:14:af:
         4e:01:5b:f8:3d:63:d3:bb:0d:ba:fe:e0:bf:7b:18:d0:d7:fb:
         bb:4c:34:28:96:ca:48:ec:69:0c:e9:be:8e:c0:9d:8e:90:f6:
         37:e3:d3:37:dc:c7:82:c5:32:72:db:13:b1:d0:f9:61:79:f8:
         14:3b:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:29 2025 by rpki-client