Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS139311.roa
File: AS139311.roa (raw, json)
Hash identifier: OGXN38rl5Xx9/dZTaMF3q7Q/bmes81gQyVsiIZWjFO8=
Subject key identifier: 6C:2E:29:40:71:2B:92:CE:00:9D:C1:7F:8A:94:D6:1D:12:01:7E:BD
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 677744A272E7150A8020BAFE3B13140A95F97EA7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS139311.roa
Signing time: Thu 03 Jul 2025 15:52:42 +0000
ROA not before: Thu 03 Jul 2025 15:47:42 +0000
ROA not after: Thu 02 Jul 2026 15:52:42 +0000
asID: 139311
IP address blocks: 2a06:a005:10b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:77:44:a2:72:e7:15:0a:80:20:ba:fe:3b:13:14:0a:95:f9:7e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:42 2025 GMT
Not After : Jul 2 15:52:42 2026 GMT
Subject: CN=6C2E2940712B92CE009DC17F8A94D61D12017EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:20:e6:cd:2c:75:33:c0:bb:fe:65:eb:81:
44:af:6e:ab:32:49:31:d2:ec:6c:1f:01:18:50:1d:
26:e9:9a:2a:16:05:76:6b:15:08:81:54:5c:39:8c:
0e:69:1c:69:4b:de:9a:96:d8:fc:90:93:a6:48:19:
99:ec:25:6c:e9:02:56:11:08:1f:f8:9c:99:df:b8:
4b:17:4e:b9:2e:ae:90:bd:3c:6d:7d:24:a6:a4:e0:
96:00:c5:6f:e6:60:0b:b3:43:6c:df:15:8e:a6:06:
f7:03:1b:09:c0:96:78:1e:b9:3e:64:bf:19:90:a1:
de:16:37:26:a7:79:d4:f2:09:cc:d0:0b:d6:c9:76:
9f:cc:c0:58:80:ed:a0:93:ab:0c:cb:6e:2b:2e:b2:
76:e7:59:4c:a4:aa:2e:ee:f5:da:69:8a:b2:fc:32:
e6:ff:2c:12:19:ce:8d:9b:48:4f:16:4b:45:2a:ea:
67:4a:87:06:11:c7:02:90:bb:0f:34:a8:64:24:fa:
9c:02:55:76:98:ba:20:6b:95:0a:ac:29:2a:bd:9a:
86:2c:ae:0e:1b:7b:d1:e3:a4:33:8b:b7:1f:e3:c5:
7b:61:41:14:71:18:03:1a:9c:63:aa:ce:2d:65:64:
85:c3:0f:ef:e6:75:d2:05:5f:94:82:d8:cb:31:55:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:29:40:71:2B:92:CE:00:9D:C1:7F:8A:94:D6:1D:12:01:7E:BD
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS139311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10b0::/44
Signature Algorithm: sha256WithRSAEncryption
96:61:ec:d1:db:27:6b:ce:f8:bd:12:d6:62:ee:fe:0b:80:56:
72:7b:c3:78:a6:5a:cb:b4:a5:d4:97:42:7c:6b:e0:e5:84:2d:
47:e4:17:16:1d:58:12:97:a5:a5:fc:e0:eb:9e:95:ba:4e:01:
c1:ed:a2:0d:d4:b1:84:42:6c:1d:4d:da:cc:70:1e:05:53:36:
9a:ae:cc:8c:3d:01:c2:70:73:8c:12:54:df:04:51:97:53:1a:
12:91:77:e5:5f:13:8c:2e:c0:8f:af:c6:42:62:40:25:d3:5a:
42:f2:ce:a7:dc:7e:aa:2e:dc:b3:d6:3d:d8:c6:23:d4:5c:87:
4b:a1:b5:c6:ff:c2:64:54:59:71:d6:36:29:59:3c:ec:38:0b:
12:62:76:a4:a5:86:3c:31:96:4a:f6:40:32:41:6f:84:81:31:
c0:64:93:d5:05:d1:46:d0:58:83:39:85:44:55:7b:c8:be:01:
9f:4c:23:98:83:f8:30:6d:77:ad:97:f3:50:09:37:5c:c4:b5:
6c:9d:a7:20:44:5e:29:31:0d:81:b1:2b:65:c2:1a:78:28:db:
88:f7:c4:74:e7:04:33:e6:a6:12:4f:2e:c9:40:da:ea:37:45:
8d:b2:ad:3f:5f:98:34:f6:16:c2:92:8c:11:5f:5b:9b:a3:bc:
24:e3:77:74
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUZ3dEonLnFQqAILr+OxMUCpX5fqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ3NDJaFw0yNjA3MDIxNTUyNDJaMDMxMTAvBgNV
BAMTKDZDMkUyOTQwNzEyQjkyQ0UwMDlEQzE3RjhBOTRENjFEMTIwMTdFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPCSDmzSx1M8C7/mXrgUSvbqsy
STHS7GwfARhQHSbpmioWBXZrFQiBVFw5jA5pHGlL3pqW2PyQk6ZIGZnsJWzpAlYR
CB/4nJnfuEsXTrkurpC9PG19JKak4JYAxW/mYAuzQ2zfFY6mBvcDGwnAlngeuT5k
vxmQod4WNyanedTyCczQC9bJdp/MwFiA7aCTqwzLbisusnbnWUykqi7u9dppirL8
Mub/LBIZzo2bSE8WS0Uq6mdKhwYRxwKQuw80qGQk+pwCVXaYuiBrlQqsKSq9moYs
rg4be9HjpDOLtx/jxXthQRRxGAManGOqzi1lZIXDD+/mddIFX5SC2MsxVR53AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUbC4pQHErks4AncF/ipTWHRIBfr0wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MTM5MzExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBRCwMA0GCSqGSIb3DQEBCwUAA4IBAQCWYezR
2ydrzvi9EtZi7v4LgFZye8N4plrLtKXUl0J8a+DlhC1H5BcWHVgSl6Wl/ODrnpW6
TgHB7aIN1LGEQmwdTdrMcB4FUzaarsyMPQHCcHOMElTfBFGXUxoSkXflXxOMLsCP
r8ZCYkAl01pC8s6n3H6qLtyz1j3YxiPUXIdLobXG/8JkVFlx1jYpWTzsOAsSYnak
pYY8MZZK9kAyQW+EgTHAZJPVBdFG0FiDOYVEVXvIvgGfTCOYg/gwbXetl/NQCTdc
xLVsnacgRF4pMQ2BsStlwhp4KNuI98R05wQz5qYSTy7JQNrqN0WNsq0/X5g09hbC
kowRX1ubo7wk43d0
-----END CERTIFICATE-----
Generated at Fri Jul 4 21:58:17 2025 by rpki-client