Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136510.roa
File: AS136510.roa (raw, json)
Hash identifier: 1wr9tkAbvhKgTyThU9aJccaFLE198ylS7toOcMwmxus=
Subject key identifier: 2B:88:0D:4E:E4:73:F6:7E:77:3B:F8:2C:4F:A2:03:67:3C:23:64:ED
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 24C4C576777084F2E254E084E783DFF2A7E4EF2B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136510.roa
Signing time: Fri 05 Sep 2025 22:15:33 +0000
ROA not before: Fri 05 Sep 2025 22:10:33 +0000
ROA not after: Fri 04 Sep 2026 22:15:33 +0000
asID: 136510
IP address blocks: 83.142.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c4:c5:76:77:70:84:f2:e2:54:e0:84:e7:83:df:f2:a7:e4:ef:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 5 22:10:33 2025 GMT
Not After : Sep 4 22:15:33 2026 GMT
Subject: CN=2B880D4EE473F67E773BF82C4FA203673C2364ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:39:7a:cb:8f:e7:78:48:5e:fb:70:ee:e3:
2f:b9:2f:2f:b9:b7:41:7f:ff:37:01:56:27:f0:75:
84:7e:88:c9:bf:ac:48:9a:a0:0c:11:a0:3c:07:0e:
51:a6:e8:eb:b6:8c:6a:06:4d:ea:5a:fb:de:79:d3:
03:0f:1a:38:5d:66:8f:6d:e9:16:4d:2d:f1:5b:1c:
75:8d:f7:f8:b8:f4:11:20:73:1c:dc:cd:c7:86:4d:
f9:b4:4e:bb:ec:c5:e1:2b:81:e1:9b:7c:bc:6a:47:
75:c1:61:fd:6f:9d:4f:41:3a:ee:c0:3d:a2:c9:38:
81:e9:df:fa:cd:0b:00:17:45:12:e9:13:ba:3f:bb:
89:df:59:40:cd:18:a7:43:ed:82:79:a5:04:80:c3:
c5:46:f3:0f:51:32:20:14:8c:27:aa:af:74:7e:61:
6f:0b:9d:03:a2:ab:b1:15:db:38:03:18:95:01:fd:
76:35:bd:a2:2e:e8:d6:7c:f5:f1:3f:0e:61:5a:eb:
4d:d2:71:89:b5:72:3d:21:eb:b2:11:75:ff:f9:a4:
28:5b:9e:ca:47:90:8e:83:77:fd:ba:45:e5:f7:a8:
d6:36:88:63:0b:fe:ea:87:ae:73:3c:1d:31:2d:ae:
2d:4b:c2:fd:8e:88:a7:6a:ab:7c:fd:db:6c:da:c4:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:88:0D:4E:E4:73:F6:7E:77:3B:F8:2C:4F:A2:03:67:3C:23:64:ED
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.30.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ef:8c:88:4a:16:2c:78:ed:49:64:40:0e:2f:3c:65:af:1a:
fb:a9:0f:ff:be:93:34:39:c8:48:70:49:52:22:bd:c3:cd:88:
c2:1c:dc:f5:b6:74:87:1e:64:45:fb:7a:ab:bc:60:8f:e7:0c:
5c:d0:e0:27:39:7f:f9:83:29:50:27:68:ae:3c:f7:15:30:6e:
63:c4:eb:24:00:67:90:56:ab:eb:ea:7d:62:74:e1:3b:34:cf:
d0:5c:40:7a:6b:72:6d:58:c8:f8:e4:7f:c1:53:4b:63:7c:0d:
e2:2a:16:8b:fe:14:d2:56:42:53:92:5b:c5:b0:bf:c8:c9:ae:
b0:e6:c7:bb:7f:cc:e8:07:1f:3b:f8:e4:6a:2b:28:26:00:99:
7f:fd:ae:dd:f5:b0:07:72:11:d3:be:4f:d9:cc:c2:f9:44:4d:
e0:c2:74:89:da:4c:8b:c4:41:29:f5:b6:7d:e0:05:5b:05:bf:
34:1c:ce:db:43:5a:19:d2:99:84:59:ba:cd:15:ff:71:77:87:
12:81:4a:41:47:a6:8e:c8:bd:03:0b:91:01:91:d7:29:0e:0b:
be:15:12:e9:70:b8:29:e7:3f:07:d5:73:96:18:b1:d4:ce:d0:
4e:d6:48:1a:e8:7b:14:dd:f7:f1:c4:6c:50:b6:b3:c0:db:76:
f7:98:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:25:17 2025 by rpki-client