Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142164.roa
File: AS142164.roa (raw, json)
Hash identifier: AOtn/e54nehywhw3hhmS7O1DK+zemJTMHOfnJfOpExo=
Subject key identifier: 63:83:A0:8C:6F:48:B7:95:5E:91:09:84:03:B1:23:0E:85:84:AB:F6
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4C30190D9E7AF6322103E70B9C4E5A326DEC3CD7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142164.roa
Signing time: Thu 03 Jul 2025 15:52:43 +0000
ROA not before: Thu 03 Jul 2025 15:47:43 +0000
ROA not after: Thu 02 Jul 2026 15:52:43 +0000
asID: 142164
IP address blocks: 2a06:a005:e80::/44 maxlen: 48
2a06:a005:e90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:30:19:0d:9e:7a:f6:32:21:03:e7:0b:9c:4e:5a:32:6d:ec:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:43 2025 GMT
Not After : Jul 2 15:52:43 2026 GMT
Subject: CN=6383A08C6F48B7955E91098403B1230E8584ABF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:87:73:10:63:a9:91:de:e6:3e:21:28:dc:
67:e3:44:f0:c6:f5:38:09:5d:28:e4:69:1c:99:23:
8b:2f:a7:2f:42:a6:13:c2:7e:d1:08:24:b1:b5:b9:
dc:4d:3d:9d:6e:d9:7a:19:2e:d1:de:48:77:85:36:
e2:84:77:d1:01:87:9f:c3:44:d1:89:7d:93:da:31:
80:a2:68:a1:f0:a2:08:3d:e3:9c:5b:ca:38:cf:9a:
74:52:62:48:fb:3f:24:af:7f:c1:0b:ba:55:f6:2a:
40:d9:77:e7:50:16:de:87:3d:0e:c3:60:03:f8:06:
77:ba:2e:cd:1d:0b:db:bf:02:5f:7e:f4:59:a5:0f:
1d:22:f2:3c:ad:5d:58:94:f2:4d:3d:07:89:8c:4c:
22:ba:63:7c:e3:07:d3:2c:c2:b4:02:03:3e:19:91:
86:fc:49:94:99:04:bb:67:91:b2:0c:f8:23:b4:39:
46:16:17:17:c8:00:f6:86:cc:c1:f2:d6:3b:cf:63:
85:a4:f7:6d:53:48:d7:79:03:8c:18:07:fe:68:16:
82:84:ce:31:86:be:a3:b2:20:25:5a:7a:97:54:96:
eb:2a:94:6b:50:3e:d3:b5:62:33:33:96:cd:7d:06:
b2:8e:b7:84:6c:d9:d4:b9:41:16:d0:98:bb:f0:09:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:A0:8C:6F:48:B7:95:5E:91:09:84:03:B1:23:0E:85:84:AB:F6
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e80::/43
Signature Algorithm: sha256WithRSAEncryption
4c:b1:b0:96:27:ba:88:eb:69:a5:0b:16:1f:1f:f6:01:b3:87:
5f:50:3a:6b:2f:a0:e9:77:39:07:de:85:8a:bf:c6:fb:50:44:
92:85:fe:9d:a8:de:7e:f6:c2:2f:20:83:b3:ea:e0:86:70:18:
3a:26:a5:59:f6:c9:d9:df:4d:26:b1:ef:1e:c6:39:c3:63:3f:
a9:1b:d4:15:dc:fc:87:90:3e:b5:5d:3d:88:b4:71:2e:74:a9:
9b:6b:54:55:09:fb:b5:ef:a4:60:dd:7c:f0:4f:4d:6e:f2:6e:
d8:ae:fd:2a:2f:41:2d:c6:31:63:6b:f1:b7:95:a1:95:9b:ad:
f5:85:53:b7:f9:e7:76:30:59:dd:a0:00:1f:5d:3f:37:36:85:
0d:13:70:e0:ee:e5:50:b1:0d:0c:28:60:7f:eb:ef:d6:3b:62:
42:b1:fc:1e:bd:1d:b9:ef:f0:b5:27:04:1e:6f:d5:c6:eb:f2:
7e:66:48:55:0d:24:d7:52:f9:a4:2f:00:f3:7a:75:d2:47:1e:
83:95:28:c5:0f:fd:e0:33:a5:ba:3b:62:23:57:ff:64:04:c3:
b5:75:c2:b1:62:54:0e:1c:76:70:e8:35:7d:05:87:90:02:a7:
b7:b9:f2:7c:73:81:fa:29:0b:0a:d3:aa:ca:5c:ce:b7:ea:22:
06:4d:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:18:41 2025 by rpki-client