Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa
File: AS43641.roa (raw, json)
Hash identifier: avU0HiUJecucMVhBSDehL/OfcmOOJcS2V8ge+/8XZdk=
Subject key identifier: 54:E8:CD:F9:D3:60:2B:26:6F:93:5A:2F:F1:1D:1A:19:42:B4:B3:45
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1365A137F09C7CEF964688C28B8EF5E9642B2CA0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa
Signing time: Mon 12 Oct 2026 01:59:11 +0000
ROA not before: Mon 12 Oct 2026 01:54:11 +0000
ROA not after: Mon 11 Oct 2027 01:59:11 +0000
asID: 43641
IP address blocks: 2a06:9f47::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 00:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:65:a1:37:f0:9c:7c:ef:96:46:88:c2:8b:8e:f5:e9:64:2b:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 12 01:54:11 2026 GMT
Not After : Oct 11 01:59:11 2027 GMT
Subject: CN=54E8CDF9D3602B266F935A2FF11D1A1942B4B345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:9f:39:6d:a2:7d:0e:1a:47:b2:6a:e5:60:
0d:00:14:be:8f:ab:62:7a:40:da:07:e5:88:de:ce:
b1:54:99:a0:ab:b7:36:22:7c:54:e6:f4:f8:9d:0b:
69:e1:76:43:57:1c:d1:8c:51:3e:41:93:d7:9c:e6:
fe:31:83:d6:fb:70:04:31:60:f0:63:b3:d9:30:40:
1b:85:90:a6:3f:9f:81:8b:46:ad:d1:5b:98:00:0a:
17:74:10:a0:c6:8e:ed:9f:2e:7e:1f:8f:28:4c:4d:
dc:0c:3b:1a:3c:11:7d:a3:a4:07:99:4f:7a:9c:19:
7e:a3:dd:85:24:12:39:d3:9b:0d:d9:50:a6:8e:6d:
87:0f:fd:53:8c:b2:1a:62:16:49:c1:a1:dd:b6:24:
72:27:3a:b5:87:08:0f:16:37:e9:84:9e:59:96:2e:
47:fe:96:38:6d:14:94:29:8f:84:dd:e7:61:b9:73:
8e:71:42:54:1f:de:48:82:d3:a2:8f:75:a4:9b:3b:
a3:c2:60:f2:7a:d8:1d:54:ee:5f:85:d2:21:ad:28:
13:0c:c5:4c:d1:56:21:e5:bc:4e:58:81:dd:c5:97:
f7:7c:38:de:1d:7a:d4:a6:d0:75:cc:de:6a:36:0c:
7d:e4:33:a0:e5:0e:b2:79:2f:ca:c2:b2:ea:e8:1d:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E8:CD:F9:D3:60:2B:26:6F:93:5A:2F:F1:1D:1A:19:42:B4:B3:45
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f47::/32
Signature Algorithm: sha256WithRSAEncryption
33:52:32:01:ef:15:02:8e:be:fa:6b:ab:f4:18:f3:a3:9f:85:
3a:69:d0:89:9f:2d:71:c0:a9:4d:8b:47:1d:9f:35:6b:d8:34:
22:98:87:63:97:60:4d:a9:29:2d:9c:47:f4:00:c0:d2:02:ce:
10:9d:22:6d:37:35:41:80:eb:78:ce:a4:59:84:de:61:9b:f1:
2b:38:60:48:20:73:5d:08:11:6b:11:59:f7:df:d8:14:eb:68:
4b:ab:eb:63:6f:0c:82:71:d7:0d:ff:0c:14:11:6a:89:61:db:
a3:4d:30:55:27:68:fe:31:36:6f:af:0d:49:84:9d:c1:fe:c1:
3f:3f:71:7b:1c:b9:2a:c6:65:c8:fb:54:da:40:3c:44:c0:08:
cd:51:3f:56:13:93:80:59:88:7a:03:31:c4:17:a7:35:52:b8:
b8:a8:cc:0a:0c:93:78:be:ec:10:aa:4e:1a:b7:fd:18:a3:b0:
26:9d:d2:c2:5a:2f:27:1d:6a:f5:d4:a5:94:bd:02:72:bb:e1:
ea:6a:2c:26:d9:a1:e8:75:17:4c:a9:4c:16:09:d1:0c:3b:97:
45:16:d2:9a:85:d8:3c:22:c5:cc:8e:ce:96:d9:b4:12:2a:ce:
9c:31:75:93:5f:b5:d0:f4:82:75:bd:5d:49:4b:d4:29:5b:1d:
a1:af:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:44:10 2026 by rpki-client