Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136557.roa
File: AS136557.roa (raw, json)
Hash identifier: /etMO/07i7atlziQIO3XMLd/qQHlsxUGRFqLEVONs4c=
Subject key identifier: 9F:3B:85:2F:28:1B:47:ED:0C:1F:F1:3A:89:01:FD:63:26:6A:BE:52
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 28B23C48DD97BDF779B9ABF95583A56D62C87F64
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136557.roa
Signing time: Thu 04 Jun 2026 15:58:48 +0000
ROA not before: Thu 04 Jun 2026 15:53:48 +0000
ROA not after: Thu 03 Jun 2027 15:58:48 +0000
asID: 136557
IP address blocks: 103.68.109.0/24 maxlen: 24
206.245.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b2:3c:48:dd:97:bd:f7:79:b9:ab:f9:55:83:a5:6d:62:c8:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:48 2026 GMT
Not After : Jun 3 15:58:48 2027 GMT
Subject: CN=9F3B852F281B47ED0C1FF13A8901FD63266ABE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:00:66:14:69:09:60:e8:44:da:49:0d:62:
b7:be:fe:12:c7:ec:35:80:5d:28:77:63:8b:29:8a:
5c:35:92:c2:45:d9:7f:f0:07:0a:d5:aa:01:89:35:
e2:02:48:ee:91:2d:b0:44:ed:1d:a0:54:9d:b3:5b:
84:e6:ef:11:07:cd:d8:9b:00:ec:27:8b:95:95:bd:
96:1a:ac:fc:48:b0:f0:1c:0d:bb:e3:bb:cb:6d:bf:
f0:59:4a:92:d0:3e:d6:f0:3c:fc:f3:07:c7:0d:4f:
f7:04:aa:fe:35:ae:65:c1:c5:1e:e8:3c:8e:69:e0:
82:d9:ff:3b:19:ed:07:01:98:5e:bf:2d:cb:76:63:
cf:65:50:0a:f2:ac:ef:7f:c7:09:a4:a4:05:4c:50:
7b:17:52:0b:34:15:55:ae:21:d1:f3:3f:a2:34:75:
06:8b:6d:71:f9:dc:78:0e:da:69:16:59:11:b4:c5:
48:43:0e:f1:d5:40:75:d8:14:00:b6:18:e6:a2:9d:
86:cd:68:c1:8c:53:a5:2d:f3:ce:b0:ba:3e:bd:67:
fe:35:a7:c2:f1:ef:09:a8:0e:03:1e:5a:6f:06:90:
9c:bf:e6:4f:4c:98:b9:14:75:45:9e:ae:34:1d:83:
fd:77:8c:4f:18:ef:d1:fa:31:84:a6:6b:04:52:c1:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:85:2F:28:1B:47:ED:0C:1F:F1:3A:89:01:FD:63:26:6A:BE:52
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS136557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.109.0/24
206.245.167.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ab:f1:d2:85:d8:ae:1c:55:ad:e5:1b:d0:78:ac:65:43:86:
5b:09:ea:e2:b2:46:b5:ef:a5:e2:ff:ba:1f:3b:de:c4:b7:e8:
db:c1:62:fd:0f:7a:74:73:06:ff:80:a2:09:8b:a2:e9:63:2e:
6d:ad:94:29:56:47:92:01:88:9e:bf:a0:d5:d0:57:24:e7:c1:
af:bc:f5:8f:c3:b0:c4:e9:a1:61:b3:80:e1:4c:a8:79:25:05:
b1:2e:26:2d:9e:fc:d1:51:33:84:e5:40:4f:6a:5e:a7:53:c8:
aa:aa:c8:92:8f:1c:01:67:fd:7c:9b:1c:59:44:96:ba:63:65:
1a:22:61:ae:f8:11:d2:78:04:e2:2b:b6:96:7e:a6:d5:15:90:
39:8f:e9:f6:0d:9c:a7:e8:d9:f3:ce:3f:45:ff:85:1d:d0:c4:
af:a0:53:cd:9a:60:bc:a4:89:50:4f:66:80:a5:1e:a8:d5:24:
c1:43:b6:cf:e1:8b:46:9b:f6:7b:c4:e6:85:b3:a1:b9:db:4b:
8b:1c:77:e7:30:af:74:0e:79:5b:c6:af:e6:13:f3:e0:fe:46:
b6:63:f3:23:b6:fb:e3:cc:63:59:14:7a:c5:9e:b2:f0:09:af:
da:a4:12:e5:c5:28:31:9e:6c:6e:9b:5b:9f:9d:3b:80:b6:31:
37:4d:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:28 2026 by rpki-client