Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: Mu+VdQVIIe6joQBbAcCL2CCZ6lKCChZ3nexK5/cX1+I=
Subject key identifier: B7:A0:17:EE:71:0C:08:A8:CD:72:E0:0E:75:F9:CF:41:CE:6B:4D:FC
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 06B369315126CFF3204B55743EA45957C3880127
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
Signing time: Tue 23 Jun 2026 18:54:17 +0000
ROA not before: Tue 23 Jun 2026 18:49:17 +0000
ROA not after: Tue 22 Jun 2027 18:54:17 +0000
asID: 58212
IP address blocks: 2a05:dfc7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b3:69:31:51:26:cf:f3:20:4b:55:74:3e:a4:59:57:c3:88:01:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 23 18:49:17 2026 GMT
Not After : Jun 22 18:54:17 2027 GMT
Subject: CN=B7A017EE710C08A8CD72E00E75F9CF41CE6B4DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:9c:76:1e:77:ce:28:66:32:af:dd:11:a8:
84:7b:dd:e2:24:3a:4b:08:26:ee:2d:41:fc:84:89:
a5:40:87:48:f5:f9:74:75:85:36:a8:b3:7e:55:1a:
76:1d:d6:5e:95:1a:d8:d0:05:e2:b0:0c:ff:5b:49:
72:e5:a6:66:39:03:40:09:1f:8a:ad:0c:63:ee:00:
75:48:e5:c6:42:77:13:7b:ea:a3:8c:13:de:41:81:
b6:8b:8a:aa:e8:a2:00:69:ad:17:31:52:d8:9e:0d:
f1:ac:21:0e:b1:3a:15:27:bf:35:1a:3f:8a:0d:bc:
78:9b:55:48:d0:75:06:c6:09:7b:53:3b:b9:9d:ce:
df:7c:03:33:62:e3:65:80:76:60:86:bf:c2:e4:20:
7f:25:ef:06:96:5d:3a:35:d0:6e:b9:7c:79:d1:d0:
f6:53:b9:44:79:14:bc:6e:34:47:b7:95:fb:12:73:
01:a5:73:5e:78:8f:d8:e5:0c:87:b8:c6:55:38:81:
03:34:86:d4:10:ea:4b:b2:91:d4:d1:3c:8c:01:40:
63:e4:81:45:36:61:d2:61:60:f8:0d:ad:2b:c8:3e:
61:91:cd:2d:f4:3b:b4:de:2d:5a:4d:ca:bb:9a:c6:
ab:66:35:d6:3d:44:c5:1d:5f:7a:f3:74:05:d0:76:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:17:EE:71:0C:08:A8:CD:72:E0:0E:75:F9:CF:41:CE:6B:4D:FC
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7::/32
Signature Algorithm: sha256WithRSAEncryption
b4:92:39:0d:2d:43:92:85:75:9e:62:09:97:3a:be:7d:21:51:
13:56:38:a3:0c:cb:3d:72:46:91:3c:e5:0c:bf:5f:5d:92:bb:
78:20:e9:16:be:32:68:4c:09:41:e5:cd:0f:42:a8:f8:14:95:
ac:91:f4:68:92:b0:f7:de:99:b0:86:4c:b8:7b:ca:51:3e:82:
09:0f:30:20:86:ac:d9:26:6f:a6:08:1d:81:97:34:58:44:ae:
48:8f:f8:a7:93:e6:80:6f:29:a8:68:ef:33:7f:1a:46:9a:1d:
ed:80:d9:f4:2d:03:94:30:8f:97:71:be:63:66:9d:b4:97:4c:
fc:68:25:28:cf:ab:d0:e7:cb:6b:eb:e7:53:fe:d7:7c:01:d7:
52:1d:6a:60:7d:b2:dd:66:b2:69:06:86:ca:7b:c6:cb:3c:09:
59:95:7e:92:66:b1:66:85:e4:57:ee:b4:e9:23:22:79:13:71:
9d:b4:60:d8:ea:d1:ec:94:db:57:47:e3:b2:15:44:a9:57:6a:
ec:14:ad:bd:34:58:05:4f:ac:83:30:00:e5:0a:fc:01:8e:4d:
7b:95:09:3f:e1:05:89:d2:b6:cf:b7:cc:8e:5a:3c:dc:b8:da:
24:28:7e:da:9a:70:62:1b:b1:c9:c2:3c:42:ac:f6:69:0f:db:
88:d1:9d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:58:03 2026 by rpki-client