Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa
File:                     AS22427.roa (raw, json)
Hash identifier:          QXwQuDVK2OwwlHHlLsekt6AI0gCt6mArb0iM8ROSysE=
Subject key identifier:   D5:C0:00:A1:3F:97:72:92:8B:D2:5C:3E:4D:6D:C8:69:F5:B5:E7:36
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       643CF8823182C362E36887B3E46496159D36C471
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa
Signing time:             Tue 18 Mar 2025 09:22:19 +0000
ROA not before:           Tue 18 Mar 2025 09:17:19 +0000
ROA not after:            Tue 17 Mar 2026 09:22:19 +0000
asID:                     22427
IP address blocks:        216.97.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3c:f8:82:31:82:c3:62:e3:68:87:b3:e4:64:96:15:9d:36:c4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 18 09:17:19 2025 GMT
            Not After : Mar 17 09:22:19 2026 GMT
        Subject: CN=D5C000A13F9772928BD25C3E4D6DC869F5B5E736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:2a:d2:5c:a3:8f:7f:1d:0b:25:3e:ce:81:
                    c5:f9:78:8d:ca:dc:8b:c6:32:b5:57:69:17:82:46:
                    30:9e:d9:4a:ee:c6:4d:c7:cb:9f:1b:83:a0:d7:f0:
                    bb:98:46:e8:de:63:e5:61:71:a2:0f:4b:04:04:da:
                    4c:e6:86:15:be:84:37:11:4f:4c:bc:40:16:3b:46:
                    7d:22:f3:cb:52:3f:48:26:5a:cd:23:84:20:d2:7e:
                    52:b0:bc:74:26:62:d8:c4:7d:cd:bd:ff:b1:8e:cf:
                    44:f0:fc:5a:a4:75:12:5f:16:2b:0d:ca:fa:95:89:
                    cd:17:01:03:67:08:c6:82:2d:a9:c6:c8:d0:de:a5:
                    cd:b4:0c:0b:e4:05:a3:b7:ce:f0:a0:80:3a:4a:08:
                    72:6c:76:84:2b:4a:0d:f9:7b:ad:87:8e:7a:d7:41:
                    c5:9a:12:dd:d1:29:00:78:b7:12:1a:64:68:6e:2e:
                    50:b3:93:3a:f8:67:01:85:e8:e3:89:af:65:8f:fe:
                    4f:c5:e9:fb:c1:c6:d9:12:47:d8:64:da:8f:6a:78:
                    e6:97:4c:b3:64:ee:a6:05:91:98:e1:1a:49:f9:21:
                    39:f8:4d:2d:04:79:41:c6:00:a8:96:5e:f7:33:f6:
                    46:1b:27:a2:84:f8:16:3b:8c:75:26:f5:2d:1a:a5:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C0:00:A1:3F:97:72:92:8B:D2:5C:3E:4D:6D:C8:69:F5:B5:E7:36
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:df:22:9c:d4:e2:d6:92:cb:f8:80:eb:b1:72:9b:5a:d4:
         29:56:72:a7:9a:eb:5f:99:3b:8c:26:3d:8a:1b:2c:7d:cd:77:
         f6:ea:46:c1:4e:99:ed:ec:ef:0f:0c:ea:3b:05:74:32:11:6a:
         50:ce:fd:21:09:ba:d6:63:43:ff:b3:5e:1b:54:87:37:2f:64:
         97:a9:84:23:98:b4:50:da:11:b9:37:45:65:da:20:f5:a0:67:
         90:14:b3:11:f4:33:3e:2e:02:9c:9e:1c:82:a4:53:09:9a:ee:
         c4:5a:d8:33:54:39:c4:88:d8:65:a9:a0:28:61:53:b8:8e:64:
         8e:46:80:c3:df:ea:95:76:64:13:52:e7:10:ce:7a:7c:a4:52:
         14:28:19:eb:3a:e6:5c:6c:51:15:1a:c4:ed:94:16:8a:4e:50:
         fb:1b:bf:b3:14:1e:d2:89:ee:c5:47:b7:a7:e4:7b:d2:64:16:
         b5:09:2f:72:44:00:21:1d:2e:81:08:d1:e7:83:7d:2e:23:81:
         0d:1b:30:48:3f:d1:b1:19:35:c8:1d:a1:52:20:dc:e8:d9:39:
         6b:37:f7:92:be:51:cc:36:24:08:90:b6:65:f1:24:e2:73:56:
         d4:93:97:c2:49:1f:31:f8:62:b0:e4:2d:c4:63:c1:3e:8e:a5:
         11:93:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:18 2025 by rpki-client