Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS56655.roa
File:                     AS56655.roa (raw, json)
Hash identifier:          jy/JPEYRKyxivkusrKuH58TyMd6czTTv1OnnzKmWHJk=
Subject key identifier:   D3:1E:4F:A9:B5:11:B3:58:10:91:DA:2E:27:32:7A:62:08:C0:FA:C9
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       0B0D974C8763F650352F9403492DAB3FE22E62AC
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS56655.roa
Signing time:             Thu 04 Jun 2026 15:58:52 +0000
ROA not before:           Thu 04 Jun 2026 15:53:52 +0000
ROA not after:            Thu 03 Jun 2027 15:58:52 +0000
asID:                     56655
IP address blocks:        202.50.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0d:97:4c:87:63:f6:50:35:2f:94:03:49:2d:ab:3f:e2:2e:62:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun  4 15:53:52 2026 GMT
            Not After : Jun  3 15:58:52 2027 GMT
        Subject: CN=D31E4FA9B511B3581091DA2E27327A6208C0FAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2a:a8:a1:80:e0:eb:b8:e6:34:35:98:c4:61:
                    3d:8d:44:39:c9:75:65:20:26:36:dd:15:c5:7c:0e:
                    4b:db:ac:68:64:65:38:5a:52:b7:db:da:56:7c:a2:
                    83:f2:05:b3:d8:28:7c:dc:5f:e6:7c:dd:49:77:fd:
                    96:ed:28:93:67:04:73:25:bf:7f:18:3c:86:1f:cd:
                    e3:f4:cb:d3:39:32:8d:18:60:47:1d:ce:31:fa:83:
                    c3:2c:61:5e:ef:b8:4c:15:ea:86:b6:b4:85:fa:c6:
                    84:e6:68:cf:df:4c:bb:78:ff:b1:61:18:22:25:3a:
                    ec:aa:fd:e4:27:45:b7:05:7a:bc:af:e1:2d:c2:76:
                    b2:ab:3e:fe:70:cb:31:3b:c5:61:67:23:59:01:5e:
                    9a:94:7d:e7:55:06:fc:35:c6:31:79:2f:b9:d6:2f:
                    92:c6:f5:03:3b:c1:7b:8b:0e:f2:53:7c:e3:53:94:
                    c1:25:07:df:ae:07:eb:cf:bd:7b:c4:01:df:ac:56:
                    b2:37:ce:34:07:3b:9b:0b:56:bf:61:f5:27:cb:0d:
                    76:99:db:1d:94:8b:ee:ca:51:51:84:f4:c7:83:c2:
                    5a:09:9f:de:ba:84:6f:53:db:81:3d:df:05:7d:6d:
                    69:7e:98:29:82:13:51:d9:b6:b9:0c:02:05:34:ab:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1E:4F:A9:B5:11:B3:58:10:91:DA:2E:27:32:7A:62:08:C0:FA:C9
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS56655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:8d:f8:3e:3c:ab:6a:2e:f4:4d:82:58:c7:e3:07:8b:2f:c7:
         fb:ad:aa:fb:23:42:be:ce:52:06:d0:71:32:39:d6:08:af:cc:
         d7:24:e7:fc:c6:ad:7f:29:13:b0:15:fa:07:d2:8c:35:7b:22:
         8f:cd:9d:49:27:81:98:8f:f6:00:9e:9e:31:70:33:37:b5:7c:
         20:40:a4:60:f1:2e:3d:6a:c9:c1:24:28:6b:97:27:b4:35:84:
         58:f7:d4:60:a1:2c:30:10:eb:36:1b:1e:77:3c:a2:ae:eb:7f:
         0b:4d:a0:8e:62:3e:1e:e7:5c:34:7e:90:e9:9f:11:dd:09:a9:
         38:38:08:0a:98:a0:8e:fa:dd:d9:50:88:1c:34:aa:4b:57:54:
         40:cb:8e:9a:3d:6c:00:b2:bd:16:bf:7e:47:c2:31:8c:ec:c8:
         de:d7:cc:39:24:4e:73:5b:3c:52:ff:f8:0c:fb:60:15:a8:eb:
         f4:c1:dc:a9:11:7d:ae:82:e7:0d:43:c7:9d:f4:cb:a0:ba:da:
         a7:4a:f5:77:1a:a8:26:4d:ad:21:61:4b:90:e1:8d:60:1f:ab:
         cb:6d:a7:33:4b:32:fa:f2:b2:ba:40:84:3b:76:f5:49:3f:53:
         fd:ab:f6:be:86:a2:fc:51:ea:47:11:63:b1:04:e6:8a:5c:1a:
         83:29:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:22:57 2026 by rpki-client