Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa
File: AS212793.roa (raw, json)
Hash identifier: MMiR6LsfEvC8dUh3Hw/n0nBbi6I3wnG0BTzAtGaHObk=
Subject key identifier: A3:E2:CF:9E:DE:85:42:1E:BB:70:20:88:65:08:96:DE:64:9A:BB:47
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7A9CF99371721C6140C203BC327082EA2E95BBD7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa
Signing time: Wed 26 Mar 2025 22:14:22 +0000
ROA not before: Wed 26 Mar 2025 22:09:22 +0000
ROA not after: Wed 25 Mar 2026 22:14:22 +0000
asID: 212793
IP address blocks: 2a06:a005:b69::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9c:f9:93:71:72:1c:61:40:c2:03:bc:32:70:82:ea:2e:95:bb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 26 22:09:22 2025 GMT
Not After : Mar 25 22:14:22 2026 GMT
Subject: CN=A3E2CF9EDE85421EBB702088650896DE649ABB47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:76:af:f3:56:63:f3:72:b5:6c:43:76:9d:
dc:ce:9f:33:ea:2c:9e:da:de:dd:90:d1:bb:f1:60:
d6:1c:e1:34:59:56:d2:a2:c9:72:b2:cf:84:90:6e:
6c:ba:dc:a9:1a:be:dc:bd:31:de:96:6c:1a:3c:97:
03:ef:62:52:4b:fe:c4:fc:ba:02:f4:97:78:84:4f:
0c:3f:90:06:d9:0c:fc:c3:e2:35:45:c8:3d:a5:5f:
36:b0:09:c6:be:1d:d1:00:00:89:4d:be:78:b9:08:
d3:57:6d:85:73:31:4d:b8:6b:db:d5:f7:22:91:aa:
ec:87:bf:8a:2b:7f:4b:31:20:68:dd:25:c3:80:74:
8d:99:b2:10:44:3b:35:7e:b7:32:ff:44:b2:7f:b3:
c9:d2:95:62:3c:4f:00:0b:5f:24:58:9e:09:e8:f3:
cf:13:dd:e6:9d:28:4b:4b:25:66:9a:d2:41:21:66:
7d:f8:09:54:1e:e3:d2:7c:47:41:cf:23:10:41:fb:
f5:07:a7:86:b7:34:a1:e2:f1:e0:63:1a:16:cc:2a:
d5:e1:04:c1:5d:08:4a:50:7b:d5:c7:99:f8:42:60:
92:50:fe:d8:63:df:64:69:45:bf:18:db:d5:9a:53:
7c:90:b5:ff:b9:0b:c9:42:40:25:1d:d1:40:c0:27:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E2:CF:9E:DE:85:42:1E:BB:70:20:88:65:08:96:DE:64:9A:BB:47
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b69::/48
Signature Algorithm: sha256WithRSAEncryption
d0:76:91:c3:5b:36:11:2c:48:b9:cc:50:a0:fe:e0:a8:26:50:
b7:9e:66:3c:d8:83:f7:db:e8:2d:fc:34:09:16:97:6f:1d:97:
f7:c3:1f:70:b9:04:a5:fc:4f:22:cb:c2:32:57:f7:b4:5b:3a:
f7:7d:9f:ac:87:7e:8b:ff:e9:62:fa:7d:3b:8a:71:54:9c:06:
26:b1:37:74:53:c8:cc:d2:bd:2e:fe:bd:d2:d3:ff:91:92:36:
ec:60:d5:95:5d:00:16:a1:69:ed:15:fb:8d:9d:8a:c5:0e:3f:
24:10:3b:05:a8:20:45:04:56:b9:e0:b8:ab:ab:dc:d6:99:8a:
93:83:9f:83:49:d7:bc:01:50:7e:2d:fb:05:d6:3d:1e:34:7b:
87:d9:26:c5:fe:4a:85:c3:9b:f7:1f:6c:36:17:7b:4c:42:dc:
32:fe:52:7c:8c:6e:71:ad:9e:02:35:7a:72:45:2c:32:06:77:
57:fa:60:de:bd:70:01:02:8a:da:cf:42:fb:51:ea:14:60:72:
6d:6a:00:57:3d:43:9b:1f:24:16:4c:b1:68:95:c1:c7:65:00:
59:9c:0d:1d:5d:00:8a:2a:1c:94:eb:ef:88:ba:96:63:8f:85:
ee:ef:ff:c4:8c:d3:b4:23:a8:8b:90:d5:78:3a:63:0d:3e:38:
0f:ce:c9:a6
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUepz5k3FyHGFAwgO8MnCC6i6Vu9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTAzMjYyMjA5MjJaFw0yNjAzMjUyMjE0MjJaMDMxMTAvBgNV
BAMTKEEzRTJDRjlFREU4NTQyMUVCQjcwMjA4ODY1MDg5NkRFNjQ5QUJCNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3eXav81Zj83K1bEN2ndzOnzPq
LJ7a3t2Q0bvxYNYc4TRZVtKiyXKyz4SQbmy63Kkavty9Md6WbBo8lwPvYlJL/sT8
ugL0l3iETww/kAbZDPzD4jVFyD2lXzawCca+HdEAAIlNvni5CNNXbYVzMU24a9vV
9yKRquyHv4orf0sxIGjdJcOAdI2ZshBEOzV+tzL/RLJ/s8nSlWI8TwALXyRYngno
888T3eadKEtLJWaa0kEhZn34CVQe49J8R0HPIxBB+/UHp4a3NKHi8eBjGhbMKtXh
BMFdCEpQe9XHmfhCYJJQ/thj32RpRb8Y29WaU3yQtf+5C8lCQCUd0UDAJ9RnAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUo+LPnt6FQh67cCCIZQiW3mSau0cwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEyNzkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQtpMA0GCSqGSIb3DQEBCwUAA4IBAQDQdpHD
WzYRLEi5zFCg/uCoJlC3nmY82IP32+gt/DQJFpdvHZf3wx9wuQSl/E8iy8IyV/e0
Wzr3fZ+sh36L/+li+n07inFUnAYmsTd0U8jM0r0u/r3S0/+RkjbsYNWVXQAWoWnt
FfuNnYrFDj8kEDsFqCBFBFa54Lirq9zWmYqTg5+DSde8AVB+LfsF1j0eNHuH2SbF
/kqFw5v3H2w2F3tMQtwy/lJ8jG5xrZ4CNXpyRSwyBndX+mDevXABAoraz0L7UeoU
YHJtagBXPUObHyQWTLFolcHHZQBZnA0dXQCKKhyU6++IupZjj4Xu7//EjNO0I6iL
kNV4OmMNPjgPzsmm
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:25 2025 by rpki-client