Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS55201.roa
File: AS55201.roa (raw, json)
Hash identifier: NI1vKA7gT1HnYDse6b8/HxpX68HilBVYV0ZXqgnR9Vg=
Subject key identifier: E4:62:E5:20:C1:A5:9E:BD:04:30:BD:73:9A:14:2F:55:2D:9E:C1:3C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6A26C7BB4F8369FE487D95C33E4F9D68696E189C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS55201.roa
Signing time: Sun 14 Sep 2025 11:58:24 +0000
ROA not before: Sun 14 Sep 2025 11:53:24 +0000
ROA not after: Sun 13 Sep 2026 11:58:24 +0000
asID: 55201
IP address blocks: 2a06:9f40::/32 maxlen: 48
2a09:54c2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:26:c7:bb:4f:83:69:fe:48:7d:95:c3:3e:4f:9d:68:69:6e:18:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 14 11:53:24 2025 GMT
Not After : Sep 13 11:58:24 2026 GMT
Subject: CN=E462E520C1A59EBD0430BD739A142F552D9EC13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:3c:1d:43:93:4b:c8:9e:6e:d4:40:49:e7:
fc:7f:8a:d8:bb:5f:bc:7b:a3:68:f8:c0:14:32:30:
9d:7a:cc:c0:85:00:b7:09:8d:c5:6b:b7:0c:45:a2:
08:f9:e1:8b:06:6e:cb:a2:75:e4:9f:83:37:90:1c:
dd:36:d8:dd:8c:eb:8f:b6:66:76:5f:b1:a9:f6:6c:
c5:ba:9d:8b:a3:4c:55:67:67:24:32:e0:5d:c1:f8:
1a:f5:ef:74:83:06:8e:42:67:d3:78:e8:0f:cb:22:
2f:18:70:b7:29:35:10:58:3d:53:b3:13:86:82:14:
b3:d4:7f:42:fe:88:c9:1b:30:b2:07:6b:05:4c:52:
7f:d7:00:56:55:35:d4:82:fa:55:16:1d:81:4f:3b:
39:b5:99:8f:20:98:47:b3:f0:c3:f2:e8:17:08:a0:
00:85:af:5d:be:d2:37:2e:92:27:dc:2c:69:81:65:
fc:b9:78:83:65:ee:3d:51:62:e9:cf:3b:54:8a:7a:
e1:f9:7e:3e:2c:e3:7c:4a:38:64:fe:4e:42:ea:f8:
68:5d:45:16:d8:b5:e2:d3:2e:cf:5d:00:2f:62:54:
f6:4b:e0:08:53:f7:66:cd:b2:cb:d1:21:f6:78:c5:
5f:82:ae:ea:df:54:44:9d:61:18:22:23:5e:fb:96:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:62:E5:20:C1:A5:9E:BD:04:30:BD:73:9A:14:2F:55:2D:9E:C1:3C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS55201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f40::/32
2a09:54c2::/32
Signature Algorithm: sha256WithRSAEncryption
0e:b7:89:2a:3c:ea:2f:77:9d:fc:a8:75:b4:61:47:63:88:53:
2f:0d:21:a8:67:3f:e1:a5:65:fb:1b:db:38:20:28:23:7e:02:
d2:8d:6c:dc:72:81:5c:9b:bd:1b:1a:a2:86:93:b9:2b:32:48:
73:81:b0:90:d9:db:4b:1b:4a:21:d2:a6:ec:d9:2b:ee:60:1b:
20:b1:ef:bc:28:a1:9e:12:5f:77:27:c9:ef:c2:82:4c:57:ce:
6a:7c:25:a7:5d:fb:98:3b:91:8b:26:8e:fe:2c:41:d5:6f:49:
d3:c9:9c:56:94:7b:f0:b5:8a:bd:97:09:00:b2:1f:71:3b:20:
ae:78:61:44:0a:dd:da:98:b3:e9:cc:a0:22:11:d3:0e:6a:c9:
d8:56:aa:2e:11:b8:70:b1:0b:e5:6e:0c:25:a3:b6:89:88:1d:
ba:26:24:7b:a8:ad:12:1b:d2:76:a2:98:05:bc:06:3c:99:4c:
ed:0c:1b:d3:4f:b1:9f:dc:7c:69:d7:99:ce:c3:93:38:fd:9f:
a4:66:bc:af:f4:37:e2:30:34:b2:aa:0c:91:0d:f2:a3:66:2e:
08:71:86:10:71:11:31:e7:9f:82:9d:bd:c4:e1:c1:e4:45:51:
5c:71:47:0b:00:fc:2a:dc:c9:e0:34:02:04:55:8b:12:ea:78:
69:90:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:44 2025 by rpki-client