Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55201.roa
File:                     AS55201.roa (raw, json)
Hash identifier:          ZvOuUlRe6VvoQUQtTYfWOoKmjCsMy0NKhpb1HK+GC9U=
Subject key identifier:   63:B7:08:7A:03:D7:74:27:E1:64:A2:D4:50:0F:6D:FE:81:01:E1:15
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6AC6EC603C470062EBFEB2C0F45509B0F691C0D5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55201.roa
Signing time:             Tue 09 Jun 2026 07:01:14 +0000
ROA not before:           Tue 09 Jun 2026 06:56:14 +0000
ROA not after:            Tue 08 Jun 2027 07:01:14 +0000
asID:                     55201
IP address blocks:        104.234.14.0/24 maxlen: 24
                          104.234.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c6:ec:60:3c:47:00:62:eb:fe:b2:c0:f4:55:09:b0:f6:91:c0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  9 06:56:14 2026 GMT
            Not After : Jun  8 07:01:14 2027 GMT
        Subject: CN=63B7087A03D77427E164A2D4500F6DFE8101E115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:d3:6b:d6:4c:e1:cb:a5:6d:c7:68:92:fe:
                    bf:30:88:3f:62:2b:2c:b9:72:45:10:8e:e6:3d:8f:
                    c4:0a:14:39:1d:75:44:95:17:d8:b8:65:32:9c:2e:
                    c9:82:08:51:32:96:e6:72:c7:d8:dc:4f:fb:56:06:
                    4c:d2:2f:2e:bc:e2:9b:8d:58:46:c2:c4:7b:e0:7b:
                    d3:b6:a9:4c:e8:72:45:18:bd:ed:4a:41:19:7a:80:
                    9b:6e:1c:35:2f:69:ee:70:17:a2:21:a1:5a:0f:1c:
                    c0:bb:3b:96:1c:4a:90:fd:d1:91:6e:a9:22:5d:f4:
                    27:74:41:96:1a:9f:70:26:d6:03:27:4a:24:80:75:
                    49:06:fe:d1:61:87:06:67:d7:93:74:e4:ed:83:7d:
                    4f:6f:e9:54:65:6e:8f:c5:e3:f2:45:e8:25:57:71:
                    17:f3:d8:66:85:ab:9f:c6:57:32:6a:04:cb:9a:b1:
                    c1:b6:95:e5:80:7e:ce:67:44:c3:62:f6:cc:3d:63:
                    3d:e2:e5:a2:bd:ac:2c:b3:50:9a:05:15:a2:71:09:
                    d4:a2:1e:e1:ec:81:21:06:c5:85:e1:5e:04:29:15:
                    4c:e7:c3:bf:a9:bf:b1:a5:1e:c0:6a:1c:0b:c0:f9:
                    f6:fc:a1:56:d8:83:2c:e3:14:6d:b4:a5:8e:4c:46:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B7:08:7A:03:D7:74:27:E1:64:A2:D4:50:0F:6D:FE:81:01:E1:15
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55201.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.14.0/24
                  104.234.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:5e:3e:d7:e8:fc:46:d8:b3:1e:c3:b9:5b:3f:e2:1a:d3:
         73:10:4f:9b:83:f6:0a:6d:cc:5d:df:74:93:4b:1e:d5:51:f2:
         ed:dd:bd:bb:bf:ac:36:4d:ba:eb:fd:46:e3:44:56:14:40:b9:
         cc:12:a7:91:34:9b:22:35:1d:70:f0:0a:50:64:5f:81:0c:1c:
         80:bf:69:8e:52:18:fd:b4:f4:e0:fb:53:6f:58:5a:0e:a4:5a:
         b4:b6:60:9b:c2:66:33:a5:9e:96:e4:8b:24:9c:c8:c5:8c:79:
         cf:64:b0:1d:8d:c6:aa:7b:61:e6:25:1e:1e:ed:c2:4d:38:57:
         3e:20:d8:75:70:25:3c:bd:d3:6b:a5:d5:e2:e1:66:0b:af:54:
         b0:1c:ae:f1:5a:01:74:e8:d7:54:70:7c:21:08:bc:9a:f9:26:
         75:8c:37:8d:1c:a3:e6:e3:ab:13:16:7a:3b:51:c8:8e:af:04:
         ec:b9:1b:49:1a:7c:4f:a1:f4:60:9e:40:ed:92:7c:3e:7d:a5:
         e2:0b:89:65:71:9e:54:15:77:93:7f:7c:4c:22:a6:b2:60:7c:
         81:6f:57:2a:53:f1:2b:43:c3:81:5e:2f:14:7d:0e:26:cf:18:
         27:9d:73:75:ef:46:fa:c8:1e:87:ec:b5:60:ca:87:09:9c:55:
         23:a5:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:23:08 2026 by rpki-client