Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55470.roa
File:                     AS55470.roa (raw, json)
Hash identifier:          OIChQfaHGZGmqdMKRhUAZhtmy3xCracqmcrT1KTXzsw=
Subject key identifier:   C7:E6:53:6B:32:56:C3:6D:C8:96:0B:45:95:A2:C1:61:3C:E7:1F:0F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0470A11FD78A7861433243637638300B4C64BB54
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55470.roa
Signing time:             Fri 09 May 2025 07:24:44 +0000
ROA not before:           Fri 09 May 2025 07:19:44 +0000
ROA not after:            Fri 08 May 2026 07:24:44 +0000
asID:                     55470
IP address blocks:        104.234.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:70:a1:1f:d7:8a:78:61:43:32:43:63:76:38:30:0b:4c:64:bb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May  9 07:19:44 2025 GMT
            Not After : May  8 07:24:44 2026 GMT
        Subject: CN=C7E6536B3256C36DC8960B4595A2C1613CE71F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:89:76:8a:14:1d:78:1f:9c:f7:58:36:e2:
                    84:59:24:ba:13:d0:aa:15:98:b2:24:51:73:f4:c9:
                    a7:0e:81:31:ac:e2:7b:a8:8d:7b:07:42:8b:3d:b7:
                    ca:e3:98:59:93:54:e5:41:db:2e:e6:38:d5:a6:2f:
                    d1:52:d7:59:96:d6:33:b3:09:15:75:63:7d:e2:bb:
                    1c:a3:7b:5b:7e:20:b0:8a:5c:b6:52:68:64:9d:50:
                    e1:03:00:03:aa:3f:db:79:8b:55:34:08:64:12:e8:
                    c7:00:a6:29:a6:0d:72:59:2b:db:d1:8f:10:ab:d6:
                    da:d4:04:28:96:10:ad:0d:41:59:2f:50:d6:23:42:
                    98:c2:84:1c:13:c7:95:7e:be:96:4c:cd:f8:96:38:
                    fe:3e:bd:97:03:be:fb:79:33:6d:57:3d:2b:6d:dc:
                    b8:09:9c:3a:9f:7b:4c:95:83:17:07:f7:c3:65:87:
                    da:96:17:8f:ed:ac:4e:e0:94:bc:68:42:53:e6:03:
                    e6:12:12:07:aa:ff:28:cc:12:bd:7c:fc:a6:03:8b:
                    bd:5e:a9:37:b2:2f:4a:68:18:09:17:c1:aa:90:d5:
                    c2:1c:50:ee:ea:84:78:6a:26:19:12:c5:27:53:dc:
                    51:b6:73:5f:7f:96:6f:4e:16:f7:d8:2a:5d:16:d4:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E6:53:6B:32:56:C3:6D:C8:96:0B:45:95:A2:C1:61:3C:E7:1F:0F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:fe:40:99:49:dc:d7:8b:90:a8:15:06:de:a6:93:7c:0e:
         43:c4:42:99:ee:42:ce:21:95:fc:97:48:4b:6a:2e:dd:92:7f:
         4b:2e:10:cc:6e:44:00:15:4e:51:58:e4:bc:c1:df:00:b4:aa:
         da:54:4d:6f:27:20:17:8e:52:fc:76:d6:db:c0:04:38:ee:ed:
         15:a7:8e:01:e1:60:72:9f:e8:9a:0a:22:9b:1c:c8:67:41:6d:
         b1:38:d1:9e:72:8b:d0:72:cd:e4:86:43:9a:ca:31:64:7c:30:
         5d:e6:a7:9b:60:07:8e:52:59:ce:d2:f2:7e:7d:41:f1:9f:b7:
         98:0b:27:39:61:42:89:92:f2:39:ee:3d:0e:dd:bd:fa:4a:56:
         fe:0b:0f:78:f1:e8:53:43:f2:eb:20:5f:66:91:97:f7:ca:ae:
         8b:c8:7e:d3:10:06:0a:5a:dc:80:f2:e4:9e:bd:99:b3:74:f6:
         81:e8:72:51:80:8b:7c:2d:19:12:77:a1:26:4d:92:5f:72:5b:
         c8:8f:48:7a:e9:e4:44:5a:76:52:2d:b8:43:b0:9c:f5:29:51:
         c2:f5:7a:fc:ca:90:2a:e9:0b:40:83:49:5d:14:bc:ba:03:38:
         ae:66:64:84:f1:77:86:e2:be:f9:73:57:8a:f1:cc:2d:9d:09:
         5b:9e:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:53 2025 by rpki-client