Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS55201.roa
File:                     AS55201.roa (raw, json)
Hash identifier:          +QawZy7IgJ5irCvFA0Y/Kqd63EGqa9aSSh1qgzQ53rU=
Subject key identifier:   BB:01:8D:2D:E7:98:DC:32:45:76:1C:C1:BD:10:61:9D:D8:63:2A:EF
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       7100424F810D0AD5962EF8CA907CF9BC3A361273
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS55201.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     55201
IP address blocks:        207.180.30.0/24 maxlen: 24
                          207.180.56.0/24 maxlen: 24
                          207.180.59.0/24 maxlen: 24
                          207.180.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:00:42:4f:81:0d:0a:d5:96:2e:f8:ca:90:7c:f9:bc:3a:36:12:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=BB018D2DE798DC3245761CC1BD10619DD8632AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:3f:55:87:ff:1d:e4:2f:e7:94:2d:bd:41:
                    90:6b:fe:42:f8:f1:30:69:c1:1c:e5:7c:7b:fe:a1:
                    62:b6:a3:a6:cb:8c:62:20:9e:43:66:d8:d3:9a:45:
                    e7:49:1e:1d:21:e3:5d:88:13:ee:47:08:f1:24:d0:
                    08:d4:0e:ec:ad:6e:75:53:22:e3:ff:90:e0:fc:13:
                    59:9f:ed:44:32:b6:e4:ab:e9:ef:59:75:a4:6d:59:
                    73:2b:26:3b:d2:33:be:34:c0:bc:d7:0b:dc:f6:4c:
                    47:69:cb:19:fe:6e:11:7d:6b:f3:0e:1e:32:93:48:
                    a0:63:4b:7d:72:2c:ef:3d:0a:06:c3:ef:fa:cd:1c:
                    a8:88:4e:03:46:8a:b6:43:40:6f:e4:a0:dc:0d:52:
                    9f:68:ff:68:c2:43:f9:fb:91:10:8d:ac:b0:30:cc:
                    39:d7:fa:66:74:87:a8:28:4d:6c:fe:14:b5:58:6d:
                    38:4e:f8:e6:8d:cf:63:a3:52:2c:c7:3e:58:13:d9:
                    08:86:cb:3a:19:b3:ac:76:21:f9:70:27:90:af:c3:
                    00:6a:c9:e9:2f:4e:a3:5b:cd:a4:50:e1:42:66:25:
                    dd:35:4a:5c:cb:78:4c:23:9a:c0:30:f1:6f:5e:de:
                    03:bf:4a:3a:b1:ce:e0:9b:b3:e0:af:42:54:45:f7:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:01:8D:2D:E7:98:DC:32:45:76:1C:C1:BD:10:61:9D:D8:63:2A:EF
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS55201.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.30.0/24
                  207.180.56.0/24
                  207.180.59.0/24
                  207.180.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:b5:4f:a7:b3:26:c9:ce:59:53:c9:d3:8f:e6:c5:7e:2a:
         ec:b9:95:22:0c:02:d5:5c:da:2b:2a:15:32:9f:11:ad:13:a0:
         f6:58:f5:3f:12:6c:0d:e7:20:72:18:4a:a2:81:ca:0c:5e:70:
         74:d8:32:75:90:df:99:36:34:bd:32:1e:8c:51:3e:07:f9:bf:
         d5:8e:1a:c3:71:82:ed:64:d1:84:cf:5d:07:3e:75:89:5e:fe:
         1f:53:e9:36:a3:6e:77:05:e9:6b:4b:d1:7f:d5:b8:3d:58:af:
         ce:ee:e5:6b:7e:4b:2e:d2:b8:e6:4e:ef:7f:29:c6:a1:4b:f3:
         84:4e:0c:79:1a:6a:ba:e0:bf:14:08:c8:80:5e:09:e5:8f:9e:
         e7:57:5d:0f:08:0c:42:54:ae:e0:b4:2f:2d:60:44:7b:fc:20:
         0f:89:a6:06:90:38:1b:50:db:01:a6:65:51:74:18:29:43:d1:
         da:bf:5d:a1:df:1d:af:05:e5:b6:af:59:d5:73:69:52:b3:00:
         76:07:5b:33:da:c0:a0:7c:bf:56:ee:96:f0:78:d4:63:2f:ae:
         3c:8f:26:96:46:77:e2:7b:4b:92:53:ba:c4:ce:d9:1f:65:84:
         fc:8a:e7:45:56:52:3a:b5:bd:97:ad:13:7d:dd:35:a8:d3:1c:
         fe:83:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:22 2026 by rpki-client