Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa
File:                     AS55154.roa (raw, json)
Hash identifier:          LrXfAtN1L7p36UWFnHjq/IuUBJWIgkrsHdXnJQ2v0xI=
Subject key identifier:   2C:74:4B:1C:87:B8:20:C2:84:09:FD:C1:55:34:B5:E3:E1:D7:95:59
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       23002DB12ECE64F9FCA99976B836A0FC3E3F4C07
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa
Signing time:             Mon 22 Sep 2025 18:11:32 +0000
ROA not before:           Mon 22 Sep 2025 18:06:32 +0000
ROA not after:            Mon 21 Sep 2026 18:11:32 +0000
asID:                     55154
IP address blocks:        66.63.169.0/24 maxlen: 24
                          66.63.170.0/24 maxlen: 24
                          67.215.228.0/24 maxlen: 24
                          67.215.248.0/24 maxlen: 24
                          72.11.138.0/24 maxlen: 24
                          72.11.156.0/23 maxlen: 24
                          96.44.167.0/24 maxlen: 24
                          104.129.51.0/24 maxlen: 24
                          104.223.80.0/24 maxlen: 24
                          104.223.81.0/24 maxlen: 24
                          155.94.191.0/24 maxlen: 24
                          155.94.209.0/24 maxlen: 24
                          204.152.196.0/24 maxlen: 24
                          204.152.221.0/24 maxlen: 24
                          216.144.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:00:2d:b1:2e:ce:64:f9:fc:a9:99:76:b8:36:a0:fc:3e:3f:4c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 22 18:06:32 2025 GMT
            Not After : Sep 21 18:11:32 2026 GMT
        Subject: CN=2C744B1C87B820C28409FDC15534B5E3E1D79559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:2b:de:76:a8:9f:1b:37:a2:8e:28:e8:df:
                    56:1c:a9:6d:d5:b0:88:19:b2:03:64:0a:6a:39:7b:
                    f7:92:34:e5:e5:ce:06:d9:75:d7:09:77:45:9e:8e:
                    94:0f:b9:f9:ad:5e:e6:81:30:71:6c:20:7e:89:6d:
                    8f:07:ca:2f:89:9c:86:b8:cf:95:86:52:77:5c:51:
                    fb:65:8f:4f:b1:82:66:22:6a:be:ef:57:0f:7d:42:
                    73:42:9a:3c:4f:66:4a:2f:13:ac:19:07:a6:ad:17:
                    15:99:17:c0:78:27:df:5f:c1:2a:6f:fa:79:10:98:
                    bd:be:ca:70:dd:5e:aa:1d:e7:7e:89:14:40:e7:31:
                    f1:82:f6:d7:82:27:93:33:5b:98:19:ce:b5:27:64:
                    2c:88:4d:9e:18:fb:6a:b7:78:43:e5:c9:b8:5f:0e:
                    25:19:b5:53:87:77:44:72:3d:6c:01:da:fd:4b:41:
                    c7:ca:4d:8c:3e:6d:28:a2:fd:c7:d4:31:8f:53:37:
                    13:af:35:de:7c:11:c8:ce:3f:5d:3e:c4:5d:24:3f:
                    76:96:97:2f:d6:4c:89:7d:a7:62:e0:8d:c5:f8:71:
                    46:ce:d3:ad:80:ff:9a:77:37:ba:c0:2a:ad:67:0a:
                    7d:b6:9c:c5:f0:7b:1a:f1:0d:10:00:b9:a6:04:54:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:74:4B:1C:87:B8:20:C2:84:09:FD:C1:55:34:B5:E3:E1:D7:95:59
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.169.0-66.63.170.255
                  67.215.228.0/24
                  67.215.248.0/24
                  72.11.138.0/24
                  72.11.156.0/23
                  96.44.167.0/24
                  104.129.51.0/24
                  104.223.80.0/23
                  155.94.191.0/24
                  155.94.209.0/24
                  204.152.196.0/24
                  204.152.221.0/24
                  216.144.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a1:ab:8f:fe:a0:07:77:47:14:fc:c6:bc:46:f5:8f:cf:a2:
         bc:a0:e9:0a:9b:55:15:fd:0d:ea:e8:26:86:4c:4b:2e:9a:33:
         1a:6d:94:33:49:d6:88:21:cf:93:2f:27:6a:36:47:27:47:08:
         8a:84:9e:4b:37:f6:f9:f4:33:9a:09:6c:30:e6:e3:80:78:73:
         30:36:b8:1a:e6:84:b7:52:57:9a:f7:93:53:0f:b1:03:c7:db:
         ad:a6:94:07:53:d7:fb:36:13:94:71:34:21:87:33:cf:d6:96:
         dc:5c:3c:1f:8b:b9:bc:13:1d:5c:c2:68:cd:25:c8:11:95:6e:
         51:cd:eb:07:18:e6:db:60:f8:cd:5f:6f:71:90:e9:19:68:5a:
         54:7a:62:14:20:31:6b:f8:03:27:5e:26:ed:83:5e:e3:8f:dc:
         81:6b:ad:09:c5:1d:0a:ed:2a:61:ab:f2:86:97:12:58:4d:64:
         91:3b:0c:d6:cd:30:4f:46:16:6b:5b:ea:1f:e2:e4:35:ec:cb:
         ca:ba:09:34:fd:ba:32:4c:24:aa:33:5a:28:cc:67:20:19:ee:
         d8:86:d4:4b:d9:1a:a3:e1:fa:4d:11:de:1f:0f:dd:78:40:1b:
         0e:6b:44:b8:b4:66:cf:cd:c9:5c:e9:bc:a6:14:94:54:89:9f:
         e3:f6:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:04 2025 by rpki-client