Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa
File:                     AS55154.roa (raw, json)
Hash identifier:          IreGd/fXN8A5Qti/ozYLrTgZEW1LFLfW+Iz6IkvfNas=
Subject key identifier:   E9:9D:57:6A:4E:DD:87:EC:FE:EB:9E:FF:65:C7:61:8C:18:EF:EB:C0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       48939A644B2FAA2E7F1665B12EFD53A1735EA743
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa
Signing time:             Fri 15 Aug 2025 20:13:40 +0000
ROA not before:           Fri 15 Aug 2025 20:08:40 +0000
ROA not after:            Fri 14 Aug 2026 20:13:40 +0000
asID:                     55154
IP address blocks:        66.63.170.0/24 maxlen: 24
                          67.215.228.0/24 maxlen: 24
                          67.215.248.0/24 maxlen: 24
                          72.11.138.0/24 maxlen: 24
                          96.44.167.0/24 maxlen: 24
                          104.129.51.0/24 maxlen: 24
                          155.94.191.0/24 maxlen: 24
                          204.152.196.0/24 maxlen: 24
                          204.152.221.0/24 maxlen: 24
                          216.144.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:93:9a:64:4b:2f:aa:2e:7f:16:65:b1:2e:fd:53:a1:73:5e:a7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 15 20:08:40 2025 GMT
            Not After : Aug 14 20:13:40 2026 GMT
        Subject: CN=E99D576A4EDD87ECFEEB9EFF65C7618C18EFEBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:75:69:3c:f9:d4:9f:54:a4:b9:09:ff:73:
                    9f:4b:91:64:0d:be:79:b8:da:a6:a5:b1:6a:8d:f4:
                    c1:60:32:c8:9b:42:18:ad:da:12:eb:6f:5f:86:5a:
                    c5:3d:8b:59:2f:97:de:c5:4f:70:4a:fb:52:21:a2:
                    58:4a:2d:4b:45:c3:5b:33:4a:94:8f:17:2d:08:30:
                    76:ff:24:6c:29:95:2e:70:ca:f8:67:d9:fe:a9:b9:
                    a8:87:77:cc:8c:9c:74:9d:e2:5e:72:87:06:79:5e:
                    bf:cd:3f:e3:e0:b7:77:75:0a:0b:2a:d2:76:0b:ee:
                    c4:fd:8d:d8:32:61:b0:74:21:7b:cf:ad:e5:01:67:
                    47:20:71:ce:6d:a5:96:49:9d:40:56:4d:0c:df:1e:
                    45:8d:94:30:ed:20:b4:73:fd:3b:eb:fb:42:b1:b2:
                    ba:c1:b6:a9:9e:d1:b5:ad:4e:a8:e6:11:b9:f2:2e:
                    7b:55:79:34:f3:d9:b3:7a:7e:42:fe:c7:e5:eb:ed:
                    dc:c0:e1:47:35:e4:35:5f:2d:ed:03:e9:6d:9b:9c:
                    aa:2d:ac:d4:88:e2:fe:60:e0:81:21:a2:24:08:38:
                    18:bf:39:18:e2:be:fb:10:e0:aa:eb:e9:8e:1f:17:
                    ae:31:37:48:0a:72:3f:49:37:9d:35:f4:45:e3:0b:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9D:57:6A:4E:DD:87:EC:FE:EB:9E:FF:65:C7:61:8C:18:EF:EB:C0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.170.0/24
                  67.215.228.0/24
                  67.215.248.0/24
                  72.11.138.0/24
                  96.44.167.0/24
                  104.129.51.0/24
                  155.94.191.0/24
                  204.152.196.0/24
                  204.152.221.0/24
                  216.144.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:dc:09:ae:51:32:f3:d4:0e:af:c6:c7:89:97:6d:d0:40:
         90:71:34:cf:a4:70:a3:98:01:2e:51:05:d7:f1:16:10:65:56:
         fc:68:8c:97:d0:ee:49:c6:c0:27:9e:e8:ca:8f:77:14:d0:c7:
         f2:32:86:7a:ae:9f:70:4c:2c:d0:f6:78:b2:cb:24:09:e5:88:
         1a:eb:a6:54:26:19:82:14:93:4b:13:b1:a9:e1:ef:98:2c:60:
         5d:c6:42:07:3d:a8:a2:5b:e4:55:ce:4a:1e:99:34:7f:63:9f:
         46:81:b7:ff:98:b4:bc:a2:f1:69:94:8d:e5:20:cb:d4:8c:a3:
         27:59:7a:51:e3:a8:58:d3:8d:b4:d6:d6:70:75:71:4f:17:ed:
         c2:c4:dd:b5:d2:5d:00:88:6f:01:88:ed:6e:81:da:94:89:41:
         b3:0c:65:36:7d:45:62:23:64:3b:fe:17:3f:91:57:1c:82:f8:
         ba:13:76:ad:db:ef:15:60:e1:93:37:e3:51:90:ac:0f:91:d9:
         00:b2:56:b0:1d:2d:2d:d9:b9:47:60:75:6a:e2:87:78:5a:74:
         9d:9f:4c:46:af:e4:c7:14:86:8b:45:23:84:f4:44:83:bd:2f:
         a8:b6:54:30:15:67:52:6e:a4:20:70:98:0b:89:72:09:01:a1:
         f9:99:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:23 2025 by rpki-client