Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55285.roa
File:                     AS55285.roa (raw, json)
Hash identifier:          RZZFJngqwyJcRwqdWj+kOlZhIYOcXSIDfQCbNSdwgDY=
Subject key identifier:   9F:6F:05:42:C7:C5:F5:24:1E:70:0F:4F:7E:20:15:DC:8E:05:C6:85
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       46D37360B85A48F444E4E2ADB80504DBFEBA6747
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55285.roa
Signing time:             Thu 08 May 2025 18:53:26 +0000
ROA not before:           Thu 08 May 2025 18:48:26 +0000
ROA not after:            Thu 07 May 2026 18:53:26 +0000
asID:                     55285
IP address blocks:        104.234.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 05:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d3:73:60:b8:5a:48:f4:44:e4:e2:ad:b8:05:04:db:fe:ba:67:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May  8 18:48:26 2025 GMT
            Not After : May  7 18:53:26 2026 GMT
        Subject: CN=9F6F0542C7C5F5241E700F4F7E2015DC8E05C685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:9e:f6:d9:c3:e8:e6:48:42:b9:95:8d:00:
                    ab:ce:d3:b6:ce:bb:df:dd:12:88:9d:ac:b9:fb:b0:
                    d0:27:fb:b6:1d:a5:46:a9:48:0c:a1:83:f4:aa:fd:
                    a8:ac:e3:74:af:15:de:ed:86:32:dd:86:ef:df:38:
                    97:c7:95:97:b2:5a:79:f8:81:b9:00:51:f1:4d:08:
                    ae:e8:05:fd:9c:de:8a:d5:85:38:60:43:84:1a:b2:
                    82:b3:46:a7:88:4d:bb:b5:5d:b0:dc:cc:41:a9:b8:
                    57:15:fb:3c:8f:de:1e:da:f9:15:c1:23:bb:f2:49:
                    b6:c3:88:0f:0a:37:2b:7b:ca:a4:2c:85:e9:1d:88:
                    5c:3a:b4:56:a7:07:4f:39:47:94:f4:eb:42:bb:71:
                    fd:89:3f:e8:40:4d:35:eb:b4:f9:c6:ce:8a:8c:f0:
                    b6:7d:bc:0a:01:36:66:fe:3a:a1:2c:89:51:3c:df:
                    73:2a:11:ec:0d:11:e7:3b:b5:67:36:0c:7f:67:da:
                    01:80:72:5e:df:87:5f:ef:86:81:ab:77:b7:12:cb:
                    2d:40:07:53:88:fa:ce:0d:b2:70:ea:db:71:7e:9e:
                    30:ea:f0:72:c1:21:ab:a5:c8:34:fe:46:9b:ce:45:
                    08:b5:dd:06:40:b7:3b:db:f6:8c:96:a4:7a:53:ab:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6F:05:42:C7:C5:F5:24:1E:70:0F:4F:7E:20:15:DC:8E:05:C6:85
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55285.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:7d:18:e9:f8:6e:c1:d2:4a:50:7c:aa:a6:5b:46:f7:c0:87:
         14:98:e1:57:60:a0:42:41:3a:18:3b:72:37:cd:1f:4c:48:e4:
         72:78:ee:be:df:b6:14:77:62:fb:28:7b:4d:ee:5a:c2:c4:27:
         71:70:12:59:fc:6b:31:ea:41:07:67:51:a2:95:55:36:47:6f:
         8f:47:51:02:7c:38:f6:b7:b8:ff:05:0b:2e:86:b4:d9:2b:94:
         c1:a4:7d:19:51:68:e7:4b:a2:e6:dc:69:0a:83:e4:dc:31:23:
         95:94:87:45:24:fa:15:4b:2f:c7:15:b5:bf:ae:57:40:a9:3c:
         02:e8:11:df:13:90:e9:3f:b2:43:10:8c:9c:56:4b:c5:e1:22:
         6a:33:45:b9:06:7e:4f:5f:56:94:99:22:6c:a9:06:42:24:de:
         ec:10:2c:b3:ce:fa:10:cb:42:52:c6:9c:98:35:38:ad:21:68:
         c7:a4:bc:ee:a3:ce:aa:83:b5:92:ec:d6:42:6b:fa:8b:49:c1:
         17:a5:71:d7:e6:64:4f:d1:cd:4c:05:af:6c:0c:7d:4b:d0:a2:
         e7:59:10:aa:ad:11:5c:2c:7c:61:33:cc:66:db:dd:50:2e:8c:
         a2:7e:ae:45:a5:21:44:4f:2b:a1:a1:99:cc:20:32:ce:a8:1f:
         df:f2:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:19:22 2025 by rpki-client