Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61102.roa
File:                     AS61102.roa (raw, json)
Hash identifier:          YVBSWDW0MvB4ZoIDVII5RTfWezBgYKJlgoFixFE7J9o=
Subject key identifier:   61:FA:73:95:70:5E:83:AA:BE:66:50:FB:C7:8D:F7:49:9F:B3:F3:DE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       66F70F819E8C0FD9D1A80DBC4A14447524962218
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61102.roa
Signing time:             Wed 22 Oct 2025 19:30:39 +0000
ROA not before:           Wed 22 Oct 2025 19:25:39 +0000
ROA not after:            Wed 21 Oct 2026 19:30:39 +0000
asID:                     61102
IP address blocks:        206.53.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 02:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f7:0f:81:9e:8c:0f:d9:d1:a8:0d:bc:4a:14:44:75:24:96:22:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 22 19:25:39 2025 GMT
            Not After : Oct 21 19:30:39 2026 GMT
        Subject: CN=61FA7395705E83AABE6650FBC78DF7499FB3F3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:b4:12:42:5c:e7:52:e7:80:c9:7d:6b:34:
                    22:bc:b2:51:79:1f:e0:44:3d:43:12:53:1b:7a:99:
                    45:c8:42:0d:76:08:2b:80:a5:e1:81:20:52:46:fc:
                    58:ac:86:b8:2b:08:0c:40:d5:b1:a0:b0:2f:51:75:
                    75:1c:85:8f:51:44:3b:e9:26:55:ad:2d:51:12:3d:
                    7b:83:ab:f0:13:f5:83:40:13:91:41:aa:9a:53:da:
                    e3:ba:ff:f5:0f:ee:20:f4:76:f4:b4:e7:d3:45:24:
                    ad:8d:21:22:0a:2e:db:c5:f0:3d:8d:70:ff:a9:a9:
                    5b:b1:a1:3b:77:6b:0a:8d:52:58:c1:8f:8c:8a:b8:
                    46:8b:09:0c:df:fc:f6:74:fd:a7:ea:cc:38:a1:44:
                    b7:b2:bb:49:6e:88:e4:5f:a6:13:50:fc:ff:5c:c0:
                    26:25:11:58:99:79:27:02:8a:65:2e:a7:65:3b:5d:
                    eb:c4:c2:36:8d:9e:87:90:b2:56:a8:cd:da:6f:af:
                    f2:e2:dc:7e:0b:46:be:e3:fb:65:2e:bc:e4:98:f7:
                    66:4e:8c:3a:1d:91:f3:ba:bf:70:fc:c7:2d:5d:07:
                    07:96:8b:88:f4:39:f2:a5:e2:97:14:83:27:72:47:
                    84:43:4e:48:7c:73:99:1e:5c:98:16:44:d9:09:fe:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FA:73:95:70:5E:83:AA:BE:66:50:FB:C7:8D:F7:49:9F:B3:F3:DE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61102.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:22:b9:36:f3:d9:3c:20:4f:b2:d8:66:77:e7:14:1d:4c:b4:
         54:dc:74:3e:26:3c:53:79:6b:ba:86:96:0c:f4:54:83:38:50:
         f4:fc:f2:e3:a7:be:bd:d5:86:61:44:42:ef:14:da:41:1a:55:
         af:ca:1b:5a:22:b9:61:28:bf:b4:45:4a:42:b4:5b:71:90:98:
         a3:77:23:1d:5c:b8:a2:f9:d9:27:4f:c4:6d:1c:1c:27:2a:fc:
         1e:f4:0d:95:33:50:af:0e:fc:97:01:85:2d:aa:16:fd:e2:10:
         ec:a0:29:86:f7:ee:56:c9:b2:44:3f:a5:09:50:9d:5e:33:1c:
         3b:43:07:b1:14:ec:be:4f:7a:59:51:6d:ec:03:1c:eb:39:d7:
         e0:59:c6:b4:1e:6b:f3:38:b8:45:cc:d4:3e:80:5a:1d:28:a6:
         04:45:6b:29:3e:c9:23:b6:13:2c:05:d5:e4:ac:a2:cb:e0:96:
         bf:8f:f8:30:8f:a6:25:d2:0a:49:48:ba:0d:05:b6:30:8d:94:
         f5:2f:5b:9f:01:a3:03:1a:a9:f7:f5:66:60:1b:3d:11:69:67:
         e1:03:b3:28:08:b4:33:64:e4:7a:ea:52:af:ca:5a:ab:1d:8e:
         df:0f:c2:a7:d0:1b:7a:57:be:db:79:07:82:70:e1:e7:58:31:
         43:ee:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:01:08 2025 by rpki-client