Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS55201.roa
File:                     AS55201.roa (raw, json)
Hash identifier:          wVbpv7Z4MaSqyXUE16QwZZfaCKcO6S8H0X3gDQzTflM=
Subject key identifier:   72:69:37:D3:14:E2:3E:41:A8:40:6B:C5:DE:10:00:FA:9A:62:4A:51
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       1228F89B2CA9C5194B062AFE184C68184CFDD021
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS55201.roa
Signing time:             Thu 29 Oct 2026 17:12:33 +0000
ROA not before:           Thu 29 Oct 2026 17:07:33 +0000
ROA not after:            Thu 28 Oct 2027 17:12:33 +0000
asID:                     55201
IP address blocks:        199.235.253.0/24 maxlen: 24
                          199.235.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 09:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:28:f8:9b:2c:a9:c5:19:4b:06:2a:fe:18:4c:68:18:4c:fd:d0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Oct 29 17:07:33 2026 GMT
            Not After : Oct 28 17:12:33 2027 GMT
        Subject: CN=726937D314E23E41A8406BC5DE1000FA9A624A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:ba:1f:cf:ea:b0:aa:14:d7:6d:13:ff:6f:
                    db:45:b6:83:fa:75:71:a3:8e:e8:90:3f:52:e3:ef:
                    c0:d2:4f:1e:75:ac:cf:f9:f2:a6:50:37:bf:e0:73:
                    47:16:1a:e9:73:2d:75:ce:73:52:e7:81:c4:ab:aa:
                    37:fd:4a:f0:c3:41:bb:3e:58:f1:7e:a0:0c:58:c0:
                    d0:71:73:d2:e1:71:fe:e0:62:74:e9:bd:cc:20:41:
                    52:3c:47:81:3c:a6:21:57:6f:19:2b:6c:2b:67:f0:
                    77:f0:38:04:6a:06:11:eb:ff:bf:53:7b:60:38:cf:
                    c5:f4:6e:7f:a1:84:de:a0:f9:6f:45:42:22:0e:7e:
                    d1:c9:ec:4f:b8:d8:c8:42:85:eb:d6:19:19:43:e2:
                    d6:26:08:b9:25:7c:04:6b:c5:c1:fd:80:e6:20:a9:
                    05:ea:0e:b8:1c:09:f0:65:d5:c0:56:25:72:86:06:
                    25:9f:f1:b7:a2:1e:12:4f:0b:40:29:fb:7e:af:1a:
                    68:59:f3:d3:47:c8:f9:e2:fb:ac:3c:17:b0:95:9a:
                    b4:31:a1:04:04:20:b8:2b:60:3c:55:ad:e6:e4:03:
                    ec:2e:45:0d:ec:45:b9:10:3a:44:ae:70:98:d6:e2:
                    8b:95:99:4a:6b:5e:5e:af:d9:9b:86:23:c2:5e:60:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:69:37:D3:14:E2:3E:41:A8:40:6B:C5:DE:10:00:FA:9A:62:4A:51
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS55201.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.253.0-199.235.254.255

    Signature Algorithm: sha256WithRSAEncryption
         32:62:aa:2c:a8:ca:4e:88:f5:70:be:77:29:03:09:16:61:e0:
         c4:16:23:d6:48:a2:6c:36:17:fa:04:c3:6e:ed:00:fc:07:7c:
         c3:e2:dc:b6:f0:88:bf:f4:d5:fc:62:c7:f4:33:b8:6c:6c:5b:
         31:7c:fa:fc:3d:d4:07:45:46:aa:78:c3:ff:dc:80:e7:d6:00:
         55:51:7d:ee:fb:0a:04:fe:b9:7e:6f:37:31:18:41:db:39:aa:
         b9:15:d7:0c:88:1a:d0:6c:42:61:46:b1:69:79:7d:c4:01:47:
         33:7d:1a:99:70:8a:e6:98:a0:e2:c6:6c:65:57:6a:80:23:0a:
         70:66:c2:0c:fa:8a:5c:19:9d:2e:ff:fd:54:37:a2:b4:9a:db:
         51:75:25:0d:19:f9:e7:20:41:ee:62:c5:cd:29:4c:a7:50:fe:
         0f:c5:1a:39:ac:59:b3:32:86:40:6e:d9:b2:28:b9:00:92:5a:
         72:a5:13:fc:73:4c:84:7f:a3:c9:4d:ad:ac:d8:28:9b:43:75:
         fe:81:05:9f:90:a3:e8:f0:8f:34:7c:71:6c:a6:e8:ba:01:da:
         0f:63:b8:9f:00:ab:fa:f6:a9:2e:a7:1f:9d:fc:ba:b3:a5:bb:
         d5:43:8a:c0:94:7a:f5:bc:a5:3a:64:44:99:fb:dc:e3:87:52:
         38:e1:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:06:48 2026 by rpki-client