Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS22427.roa
File:                     AS22427.roa (raw, json)
Hash identifier:          5iqtQmQSQ9KhCWdFeBbrtpfv4jPF3mECXM6BLHsue04=
Subject key identifier:   C5:C2:EA:4D:EE:C1:54:9C:18:3E:49:6E:40:D3:72:D7:5B:D7:40:A0
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5FA88DB3100AFCFC8C7C456929F38D2FBB54C798
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS22427.roa
Signing time:             Thu 17 Jul 2025 10:29:44 +0000
ROA not before:           Thu 17 Jul 2025 10:24:44 +0000
ROA not after:            Thu 16 Jul 2026 10:29:44 +0000
asID:                     22427
IP address blocks:        157.254.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a8:8d:b3:10:0a:fc:fc:8c:7c:45:69:29:f3:8d:2f:bb:54:c7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 17 10:24:44 2025 GMT
            Not After : Jul 16 10:29:44 2026 GMT
        Subject: CN=C5C2EA4DEEC1549C183E496E40D372D75BD740A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:cc:b3:88:16:8c:f6:a3:18:eb:34:30:b5:
                    fb:cb:e6:c6:4a:9b:d8:6a:ec:61:2b:e4:d9:75:c9:
                    2b:4e:0a:77:dd:e4:c1:46:0a:d7:0b:6d:cf:68:66:
                    76:0d:68:bd:ca:8d:87:5b:d5:d3:9d:e6:73:f2:07:
                    e9:34:da:18:ff:07:db:d7:49:23:52:c5:cf:19:74:
                    5b:d0:a0:21:fe:f7:98:1b:de:52:4a:30:1d:6b:ef:
                    85:2d:0d:d5:c9:f8:44:20:95:d9:e1:07:4b:2d:2a:
                    13:fa:22:02:b7:31:87:ec:d1:15:ee:c6:b6:98:07:
                    35:d4:2d:2a:b0:ae:b1:22:f9:b8:58:50:81:f5:d9:
                    7c:97:03:10:cd:c0:bc:42:6a:1d:02:8c:b9:48:7d:
                    2b:5e:a1:6f:5a:f7:8c:60:14:85:6f:9f:5c:da:3b:
                    d3:ec:be:e7:c5:ed:50:e8:95:39:4c:41:76:bf:e0:
                    23:a3:d6:1b:16:1f:0b:97:71:03:2f:fb:aa:8f:7f:
                    99:20:d1:22:6a:56:0c:63:04:cd:29:13:35:d6:21:
                    18:54:3a:2d:36:18:a3:bd:0e:a4:50:9b:03:af:95:
                    1d:9c:66:24:22:cb:cc:fe:3b:5a:c3:e0:41:46:a4:
                    e8:30:c5:14:11:e3:7b:a0:d3:43:8d:d6:bf:04:a7:
                    90:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C2:EA:4D:EE:C1:54:9C:18:3E:49:6E:40:D3:72:D7:5B:D7:40:A0
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS22427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:0a:6d:87:8b:31:88:f5:40:39:01:6f:ee:00:ff:86:ff:1d:
         43:7a:e6:43:86:12:7a:e8:ae:5e:79:83:4b:f6:a3:87:05:9a:
         6c:64:9a:f9:fb:31:a7:d2:cd:eb:cd:e1:96:5f:1c:27:3d:4f:
         9c:9d:b9:23:5d:26:90:6f:71:38:7b:b4:3d:20:85:44:e3:9a:
         20:2d:1d:0f:96:9d:4d:60:62:06:a3:cd:41:63:be:f8:d5:f5:
         2a:47:2d:90:a6:77:36:e5:56:33:b3:3d:9b:c2:ce:ee:c0:3f:
         a3:eb:c9:07:a8:ba:53:0b:29:b4:d1:6b:3a:a6:53:54:d3:3f:
         ae:fc:45:69:7e:58:8e:1b:75:15:2c:4c:7a:4a:0a:71:bc:e4:
         d8:55:f6:41:9b:a4:ef:d4:fb:e3:93:a2:5d:bc:fe:b0:5d:e7:
         12:72:82:32:f2:a3:44:92:87:eb:fb:c7:1b:58:2e:92:8f:a7:
         8c:39:d5:21:66:9b:ca:bf:a1:54:ec:ec:b8:ee:7b:b4:a9:48:
         54:da:a8:6f:9a:3d:9e:48:e1:4d:ad:5f:e3:9e:22:06:23:df:
         99:e1:5c:47:25:c1:18:56:db:8a:3d:7e:15:ce:bf:38:e6:31:
         43:7c:a4:73:dc:5a:50:97:f6:6d:9e:b5:fe:14:97:ec:1e:59:
         75:9b:42:60
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUX6iNsxAK/PyMfEVpKfONL7tUx5gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNzE3MTAyNDQ0WhcNMjYwNzE2MTAyOTQ0
WjAzMTEwLwYDVQQDEyhDNUMyRUE0REVFQzE1NDlDMTgzRTQ5NkU0MEQzNzJENzVC
RDc0MEEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGzMs4gWjPaj
GOs0MLX7y+bGSpvYauxhK+TZdckrTgp33eTBRgrXC23PaGZ2DWi9yo2HW9XTneZz
8gfpNNoY/wfb10kjUsXPGXRb0KAh/veYG95SSjAda++FLQ3VyfhEIJXZ4QdLLSoT
+iICtzGH7NEV7sa2mAc11C0qsK6xIvm4WFCB9dl8lwMQzcC8QmodAoy5SH0rXqFv
WveMYBSFb59c2jvT7L7nxe1Q6JU5TEF2v+Ajo9YbFh8Ll3EDL/uqj3+ZINEialYM
YwTNKRM11iEYVDotNhijvQ6kUJsDr5UdnGYkIsvM/jtaw+BBRqToMMUUEeN7oNND
jda/BKeQJQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFMXC6k3uwVScGD5JbkDTctdb
10CgMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzIyNDI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf4QMA0GCSqGSIb3DQEBCwUAA4IB
AQCDCm2HizGI9UA5AW/uAP+G/x1DeuZDhhJ66K5eeYNL9qOHBZpsZJr5+zGn0s3r
zeGWXxwnPU+cnbkjXSaQb3E4e7Q9IIVE45ogLR0Plp1NYGIGo81BY7741fUqRy2Q
pnc25VYzsz2bws7uwD+j68kHqLpTCym00Ws6plNU0z+u/EVpfliOG3UVLEx6Sgpx
vOTYVfZBm6Tv1Pvjk6JdvP6wXecScoIy8qNEkofr+8cbWC6Sj6eMOdUhZpvKv6FU
7Oy47nu0qUhU2qhvmj2eSOFNrV/jniIGI9+Z4VxHJcEYVtuKPX4Vzr845jFDfKRz
3FpQl/ZtnrX+FJfsHll1m0Jg
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:21 2025 by rpki-client