Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS22773.roa
File:                     AS22773.roa (raw, json)
Hash identifier:          ZM1z989ueUbnPKxYUZKnYIIZv1Qq/4hU21OjsRbaytU=
Subject key identifier:   F4:CF:D2:43:1F:B6:C0:5A:19:D5:7A:20:AF:48:F3:1F:96:0E:73:5A
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       5A116B97ED4B123544B4BE6BF9ABE76D8A7EB46E
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS22773.roa
Signing time:             Tue 09 Sep 2025 10:09:50 +0000
ROA not before:           Tue 09 Sep 2025 10:04:50 +0000
ROA not after:            Tue 08 Sep 2026 10:09:50 +0000
asID:                     22773
IP address blocks:        66.225.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 00:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:11:6b:97:ed:4b:12:35:44:b4:be:6b:f9:ab:e7:6d:8a:7e:b4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep  9 10:04:50 2025 GMT
            Not After : Sep  8 10:09:50 2026 GMT
        Subject: CN=F4CFD2431FB6C05A19D57A20AF48F31F960E735A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:0c:28:bb:98:de:90:9f:d0:b8:f0:d1:a0:
                    83:dc:39:26:a1:35:69:9a:bb:d3:10:e5:b6:e4:99:
                    9a:ef:d6:1d:f2:b7:24:f4:fb:79:1f:7c:45:73:f9:
                    e1:ff:f2:eb:16:01:e1:e3:d9:d4:c4:2e:e8:22:bf:
                    f7:93:8e:da:89:0e:5a:5f:82:35:45:df:82:9b:2a:
                    bc:5f:c3:15:5b:03:5e:c7:aa:d5:51:bc:50:d2:48:
                    a8:34:cb:68:ea:d9:b8:b3:00:3e:99:c5:7b:5a:38:
                    65:eb:b9:c8:ba:57:dd:96:34:d7:ce:5c:aa:db:e0:
                    af:da:27:b6:06:eb:6b:bb:7d:59:55:ef:bf:dd:f9:
                    53:5a:01:01:9c:fa:8b:8f:1c:a1:ea:29:05:63:20:
                    de:b6:3b:cd:59:1e:fc:0d:05:28:2a:4f:b3:ee:e9:
                    f4:12:af:ff:00:1e:1b:d5:f2:96:8f:a4:9a:00:9b:
                    1d:86:f2:1f:f2:5a:22:c0:6f:c7:4e:c8:a8:7c:0b:
                    7e:34:6e:25:20:51:6c:49:d7:c7:39:76:02:17:56:
                    05:77:60:1e:a8:e0:e0:3a:f0:6b:5b:f7:7d:91:72:
                    75:99:6c:e3:31:c4:b9:fc:75:bd:96:53:76:93:e8:
                    b3:76:de:77:b5:2a:89:ed:20:37:4f:50:39:db:ff:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:D2:43:1F:B6:C0:5A:19:D5:7A:20:AF:48:F3:1F:96:0E:73:5A
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS22773.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:b0:9e:8d:63:55:56:62:36:b3:f0:76:81:95:fa:70:cc:
         f2:7c:3d:4d:61:3c:c4:d1:70:8d:ed:44:7f:14:90:85:cb:6f:
         b9:e9:72:1b:bb:26:15:d2:fa:38:e8:8c:26:de:07:ef:bc:24:
         39:88:3e:be:c3:de:ab:69:e9:0d:dd:30:5f:07:bb:56:7b:5e:
         0a:6a:ea:80:27:21:ec:3a:47:9f:f2:fc:5b:6a:c7:6e:8e:7a:
         ec:49:07:6f:e6:84:4b:4a:86:da:53:cc:c0:c4:b3:f6:94:7d:
         17:be:fa:68:6a:a9:c8:c3:e7:70:70:d6:fd:7b:de:a4:17:56:
         1c:59:ea:a7:27:e1:2a:92:18:01:00:32:70:20:04:54:62:a3:
         c4:04:fa:eb:4c:4c:0a:fb:f9:88:fa:68:f6:27:89:6e:56:51:
         01:50:97:e1:1d:40:e2:e2:43:56:03:9a:3a:56:50:d1:15:c0:
         87:2d:f6:63:26:26:78:82:4e:6d:5a:7e:ac:bb:fb:da:1a:82:
         5c:d4:ff:a4:15:5c:4c:53:9e:eb:8a:76:de:c2:54:9d:6d:5b:
         5b:81:d1:24:39:74:d8:ca:24:ea:02:d6:d5:a3:ca:7c:1f:3d:
         b9:4d:76:0a:c6:ee:e0:a7:d0:12:b3:19:7d:63:b1:e1:6a:37:
         49:ec:27:3d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUWhFrl+1LEjVEtL5r+avnbYp+tG4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwOTA5MTAwNDUwWhcNMjYwOTA4MTAwOTUw
WjAzMTEwLwYDVQQDEyhGNENGRDI0MzFGQjZDMDVBMTlENTdBMjBBRjQ4RjMxRjk2
MEU3MzVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGwMKLuY3pCf
0Ljw0aCD3DkmoTVpmrvTEOW25Jma79Yd8rck9Pt5H3xFc/nh//LrFgHh49nUxC7o
Ir/3k47aiQ5aX4I1Rd+Cmyq8X8MVWwNex6rVUbxQ0kioNMto6tm4swA+mcV7Wjhl
67nIulfdljTXzlyq2+Cv2ie2Butru31ZVe+/3flTWgEBnPqLjxyh6ikFYyDetjvN
WR78DQUoKk+z7un0Eq//AB4b1fKWj6SaAJsdhvIf8loiwG/HTsiofAt+NG4lIFFs
SdfHOXYCF1YFd2AeqODgOvBrW/d9kXJ1mWzjMcS5/HW9llN2k+izdt53tSqJ7SA3
T1A52/+6AQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPTP0kMftsBaGdV6IK9I8x+W
DnNaMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzIyNzczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQuH/MA0GCSqGSIb3DQEBCwUAA4IB
AQB5zbCejWNVVmI2s/B2gZX6cMzyfD1NYTzE0XCN7UR/FJCFy2+56XIbuyYV0vo4
6Iwm3gfvvCQ5iD6+w96raekN3TBfB7tWe14KauqAJyHsOkef8vxbasdujnrsSQdv
5oRLSobaU8zAxLP2lH0XvvpoaqnIw+dwcNb9e96kF1YcWeqnJ+EqkhgBADJwIARU
YqPEBPrrTEwK+/mI+mj2J4luVlEBUJfhHUDi4kNWA5o6VlDRFcCHLfZjJiZ4gk5t
Wn6su/vaGoJc1P+kFVxMU57rinbewlSdbVtbgdEkOXTYyiTqAtbVo8p8Hz25TXYK
xu7gp9ASsxl9Y7HhajdJ7Cc9
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:23:30 2025 by rpki-client