Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa
File:                     AS22427.roa (raw, json)
Hash identifier:          UflacFH8Oasr98r00rLSMqPQlkULVmb+OwgyoAGoS3o=
Subject key identifier:   A6:9D:5F:7A:F4:51:D2:EC:0C:E8:BA:88:23:1C:F1:ED:80:78:50:A0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4E4E85200AB14767837E2589F7FC874C7854444E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa
Signing time:             Thu 21 Aug 2025 00:00:36 +0000
ROA not before:           Wed 20 Aug 2025 23:55:36 +0000
ROA not after:            Thu 20 Aug 2026 00:00:36 +0000
asID:                     22427
IP address blocks:        216.227.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4e:85:20:0a:b1:47:67:83:7e:25:89:f7:fc:87:4c:78:54:44:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 20 23:55:36 2025 GMT
            Not After : Aug 20 00:00:36 2026 GMT
        Subject: CN=A69D5F7AF451D2EC0CE8BA88231CF1ED807850A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:72:c9:f8:33:cd:45:fc:ad:c9:76:78:60:17:
                    4d:74:89:a8:47:b9:ba:a7:12:51:60:91:76:71:46:
                    7a:3b:9c:c0:f3:66:9b:f6:60:72:4b:60:41:85:4e:
                    95:10:72:07:73:ec:a5:65:f8:fe:63:19:80:5b:57:
                    c6:8b:17:0c:c2:6f:7f:b2:02:65:63:4c:36:47:db:
                    1c:bc:c3:ca:fe:07:d9:ba:c1:17:d1:02:7d:a1:5b:
                    19:05:db:f0:c7:48:81:41:23:f0:66:6e:c4:5c:d0:
                    35:1b:73:eb:8b:48:55:a4:e4:cb:ef:be:0c:2b:d5:
                    50:d1:65:1b:cb:46:60:10:49:75:cc:b2:7d:10:05:
                    a2:9f:ef:5b:1c:cb:9b:b0:ff:76:be:aa:2d:6f:de:
                    e9:b7:37:44:79:a5:bd:2d:c3:77:35:4f:3a:6f:c3:
                    4c:af:b8:09:5e:da:79:d0:0f:38:ce:84:5a:07:26:
                    c5:c6:1b:59:e1:c5:44:c9:39:de:d6:fb:62:b0:5e:
                    cf:98:b2:10:2d:e5:a5:f6:be:78:1c:c6:05:5f:17:
                    dc:08:9f:96:aa:78:97:cf:22:12:61:1c:49:f7:80:
                    d8:ab:0b:92:f8:4f:06:8c:ea:52:70:db:96:15:89:
                    7b:81:02:fa:e3:33:37:0c:14:e3:bf:f1:70:e5:19:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9D:5F:7A:F4:51:D2:EC:0C:E8:BA:88:23:1C:F1:ED:80:78:50:A0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS22427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:46:fd:a1:78:f6:88:e0:55:09:60:60:46:eb:17:92:93:c9:
         02:15:78:7e:6a:f5:07:94:7e:24:2c:a6:1a:6b:e6:fa:52:0e:
         44:0f:08:fc:39:55:fc:f9:29:98:b9:50:56:38:22:05:cb:12:
         59:4f:8d:7e:02:f4:41:25:79:f1:3d:3f:7a:b5:63:02:7b:b8:
         2b:ab:7b:82:80:ec:72:be:39:ad:03:4d:bd:de:12:69:f9:68:
         10:7f:e4:0c:6a:69:1c:c6:f8:39:67:d2:a9:89:42:73:b4:75:
         2c:fd:ab:a0:6b:68:c3:6f:1a:ef:0b:f8:28:34:cf:e7:4b:23:
         78:32:75:70:68:6d:de:b8:71:7f:87:a5:43:a8:35:55:29:0b:
         f6:51:42:23:30:92:6a:c0:03:44:3c:1f:11:00:88:9d:ad:30:
         d8:c2:f4:13:66:51:10:3b:4a:8e:21:8f:09:cc:63:ee:7d:d4:
         e8:f5:b2:e2:8a:5b:55:56:5e:a8:c8:4c:52:9b:14:52:02:91:
         0e:aa:80:d1:c2:52:aa:dc:fd:84:23:6e:6f:cb:a0:fe:e3:be:
         f1:07:95:d2:c2:a8:d5:0f:bc:70:56:11:1e:18:22:f4:67:46:
         1a:df:89:60:16:ea:28:d3:5f:b7:f8:3e:8e:e9:f0:76:7c:9f:
         83:52:c4:34
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUTk6FIAqxR2eDfiWJ9/yHTHhURE4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODIwMjM1NTM2WhcNMjYwODIwMDAwMDM2
WjAzMTEwLwYDVQQDEyhBNjlENUY3QUY0NTFEMkVDMENFOEJBODgyMzFDRjFFRDgw
Nzg1MEEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HLJ+DPNRfyt
yXZ4YBdNdImoR7m6pxJRYJF2cUZ6O5zA82ab9mByS2BBhU6VEHIHc+ylZfj+YxmA
W1fGixcMwm9/sgJlY0w2R9scvMPK/gfZusEX0QJ9oVsZBdvwx0iBQSPwZm7EXNA1
G3Pri0hVpOTL774MK9VQ0WUby0ZgEEl1zLJ9EAWin+9bHMubsP92vqotb97ptzdE
eaW9LcN3NU86b8NMr7gJXtp50A84zoRaBybFxhtZ4cVEyTne1vtisF7PmLIQLeWl
9r54HMYFXxfcCJ+WqniXzyISYRxJ94DYqwuS+E8GjOpScNuWFYl7gQL64zM3DBTj
v/Fw5RnipwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKadX3r0UdLsDOi6iCMc8e2A
eFCgMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIyNDI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OPYMA0GCSqGSIb3DQEBCwUAA4IB
AQBWRv2hePaI4FUJYGBG6xeSk8kCFXh+avUHlH4kLKYaa+b6Ug5EDwj8OVX8+SmY
uVBWOCIFyxJZT41+AvRBJXnxPT96tWMCe7grq3uCgOxyvjmtA0293hJp+WgQf+QM
amkcxvg5Z9KpiUJztHUs/auga2jDbxrvC/goNM/nSyN4MnVwaG3euHF/h6VDqDVV
KQv2UUIjMJJqwANEPB8RAIidrTDYwvQTZlEQO0qOIY8JzGPufdTo9bLiiltVVl6o
yExSmxRSApEOqoDRwlKq3P2EI25vy6D+477xB5XSwqjVD7xwVhEeGCL0Z0Ya34lg
Fuoo01+3+D6O6fB2fJ+DUsQ0
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:57 2025 by rpki-client