Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: aCLz/PCxQU4/oo2aaMoVxwFqdIpgK65s5HBBbWzfm5E=
Subject key identifier: F9:9E:FC:87:86:8D:1C:CB:02:57:87:5E:3B:67:3F:E2:F2:65:4C:70
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 070D1B6AF02595B9171190BA6E735D449B26BA91
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
Signing time: Tue 04 Aug 2026 07:39:08 +0000
ROA not before: Tue 04 Aug 2026 07:34:08 +0000
ROA not after: Tue 03 Aug 2027 07:39:08 +0000
asID: 0
IP address blocks: 2a09:54c4::/32 maxlen: 32
2a0d:d904::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:1b:6a:f0:25:95:b9:17:11:90:ba:6e:73:5d:44:9b:26:ba:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 4 07:34:08 2026 GMT
Not After : Aug 3 07:39:08 2027 GMT
Subject: CN=F99EFC87868D1CCB0257875E3B673FE2F2654C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:62:53:fd:f6:af:de:73:46:f4:1e:47:cc:
dc:bf:f5:4a:4b:e9:6b:5d:98:50:2b:06:41:b8:d2:
a6:00:1e:5b:73:1f:1a:a7:e3:97:4a:b3:a8:9b:88:
ec:56:95:5a:d1:c0:c0:0f:5a:84:56:61:14:ce:27:
e9:81:e2:65:d4:c2:46:0a:58:1f:57:7e:ba:7e:38:
1a:f6:99:e0:a0:29:37:04:0b:83:b5:7d:f0:b0:1b:
c9:23:01:4b:d2:fa:e4:11:f8:68:14:72:41:d1:b1:
f0:ae:f4:00:7d:a5:b2:8b:4a:ac:b0:c5:db:51:c2:
c8:dc:f2:63:8a:ee:64:20:e3:e2:4f:53:22:5c:7d:
f8:99:07:08:1b:ed:ed:5a:2e:22:80:02:33:bf:32:
f5:44:84:01:35:3a:68:5c:fa:ca:ad:cb:d0:1e:14:
a0:e6:34:f1:af:62:79:68:0d:99:16:48:c8:b1:a7:
e4:11:51:04:2a:d4:3d:2a:b5:f3:41:ae:32:4c:cf:
67:4e:87:fd:4b:51:40:a6:f6:11:d8:78:78:b9:3b:
e3:84:cf:68:6e:60:cc:13:6c:4f:91:f5:94:63:9b:
07:bd:dc:02:c0:96:6b:7f:e4:04:5a:2a:9a:82:e0:
1d:94:8a:ae:32:4c:d9:df:58:1a:d2:98:20:78:ac:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:FC:87:86:8D:1C:CB:02:57:87:5E:3B:67:3F:E2:F2:65:4C:70
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c4::/32
2a0d:d904::/32
Signature Algorithm: sha256WithRSAEncryption
b1:9d:e0:5b:3c:ec:8f:d8:a1:91:69:7b:61:b4:bd:1e:96:21:
4c:3f:17:81:e9:cd:51:0a:71:4c:06:28:e5:bd:43:68:aa:99:
85:18:2a:03:fb:cb:9b:e7:c7:c2:c4:c6:e5:f5:56:d5:ac:ff:
89:be:a5:eb:81:f1:9c:64:27:ab:c6:11:4d:bc:b4:39:3f:1d:
ea:de:c0:d5:39:0b:cf:30:69:92:fe:2e:85:9f:77:06:a2:f9:
40:2a:ec:91:0e:20:d4:16:66:d1:5a:75:8e:f9:07:e4:ed:b6:
5b:7c:f7:b4:fa:d7:29:f5:5b:9b:88:2d:da:4e:fe:db:bc:f8:
7d:60:db:e9:f1:cb:1e:7a:f5:fa:f5:24:82:30:ef:f7:7b:c3:
ae:46:c5:45:96:1e:cb:9a:33:98:03:09:e5:f6:bb:a1:f5:ea:
38:80:12:68:73:89:71:b2:67:bd:3b:17:70:40:ac:c6:d5:f5:
a0:8e:a3:15:b0:d4:e5:bb:f1:46:13:17:ea:67:38:43:f8:42:
ec:84:af:46:a3:c4:ff:55:c2:b2:5e:7d:bc:b7:0f:18:a1:23:
a0:7f:46:d0:39:13:5b:89:5b:37:9a:16:0a:fc:99:e2:59:df:
f7:1d:6b:2d:bf:f7:1e:74:eb:6d:1a:ef:34:89:02:49:9a:4d:
a5:8a:68:87
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUBw0bavAllbkXEZC6bnNdRJsmupEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA4MDQwNzM0MDhaFw0yNzA4MDMwNzM5MDhaMDMxMTAvBgNV
BAMTKEY5OUVGQzg3ODY4RDFDQ0IwMjU3ODc1RTNCNjczRkUyRjI2NTRDNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQCWJT/fav3nNG9B5HzNy/9UpL
6WtdmFArBkG40qYAHltzHxqn45dKs6ibiOxWlVrRwMAPWoRWYRTOJ+mB4mXUwkYK
WB9Xfrp+OBr2meCgKTcEC4O1ffCwG8kjAUvS+uQR+GgUckHRsfCu9AB9pbKLSqyw
xdtRwsjc8mOK7mQg4+JPUyJcffiZBwgb7e1aLiKAAjO/MvVEhAE1Omhc+sqty9Ae
FKDmNPGvYnloDZkWSMixp+QRUQQq1D0qtfNBrjJMz2dOh/1LUUCm9hHYeHi5O+OE
z2huYMwTbE+R9ZRjmwe93ALAlmt/5ARaKpqC4B2Uiq4yTNnfWBrSmCB4rJFVAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU+Z78h4aNHMsCV4deO2c/4vJlTHAwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBrBggrBgEF
BQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAIwDgMFACoJVMQDBQAqDdkEMA0GCSqGSIb3DQEBCwUAA4IBAQCxneBb
POyP2KGRaXthtL0eliFMPxeB6c1RCnFMBijlvUNoqpmFGCoD+8ub58fCxMbl9VbV
rP+JvqXrgfGcZCerxhFNvLQ5Px3q3sDVOQvPMGmS/i6Fn3cGovlAKuyRDiDUFmbR
WnWO+Qfk7bZbfPe0+tcp9VubiC3aTv7bvPh9YNvp8cseevX69SSCMO/3e8OuRsVF
lh7LmjOYAwnl9ruh9eo4gBJoc4lxsme9OxdwQKzG1fWgjqMVsNTlu/FGExfqZzhD
+ELshK9Go8T/VcKyXn28tw8YoSOgf0bQORNbiVs3mhYK/JniWd/3HWstv/cedOtt
Gu80iQJJmk2limiH
-----END CERTIFICATE-----
Generated at Tue Aug 25 08:44:07 2026 by rpki-client