Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142594.roa
File: AS142594.roa (raw, json)
Hash identifier: erq6f5kIK/zn4q1Lx/+eX36DMmXYnzXxW1Msqc/AFY8=
Subject key identifier: 5B:5F:DC:FB:70:11:85:09:83:8F:56:53:2F:41:F6:CD:B3:E0:21:52
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 73069107ACEAFFFA512BC069E79BEFA6535E89E5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142594.roa
Signing time: Thu 04 Jun 2026 15:58:47 +0000
ROA not before: Thu 04 Jun 2026 15:53:47 +0000
ROA not after: Thu 03 Jun 2027 15:58:47 +0000
asID: 142594
IP address blocks: 2a06:a005:108c::/48 maxlen: 48
2a06:a005:16d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:06:91:07:ac:ea:ff:fa:51:2b:c0:69:e7:9b:ef:a6:53:5e:89:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:47 2026 GMT
Not After : Jun 3 15:58:47 2027 GMT
Subject: CN=5B5FDCFB70118509838F56532F41F6CDB3E02152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:8f:c5:8e:20:25:ae:3e:e5:a7:6e:a6:cc:
5c:ca:a6:06:11:e3:8d:b7:32:31:8b:16:18:63:b7:
83:45:f9:11:b1:d9:c5:4d:09:dd:6e:29:31:27:de:
da:43:3d:65:43:87:3f:f2:20:5a:bd:67:e7:cd:68:
87:5d:19:b1:5c:55:0f:2c:97:b9:02:b4:3a:72:51:
18:ac:34:be:e5:fa:96:70:dc:13:e2:74:c7:4a:1a:
a5:22:1a:38:15:13:f5:99:96:a1:6d:30:f7:02:1a:
c7:f2:cd:55:a2:b9:a0:28:e7:a0:59:84:b9:ed:2a:
73:be:fa:eb:16:38:c0:7f:de:76:a9:49:1d:0d:78:
40:41:c5:c2:e0:e8:d8:58:c5:64:40:f5:b5:7b:ab:
0c:85:90:b8:5c:af:ae:e2:de:82:6e:fd:a8:4b:0a:
7e:63:44:46:22:5b:f3:27:2a:67:36:72:42:10:f9:
90:dd:55:29:ab:7a:2c:9a:c0:d2:e8:dd:41:cf:d8:
c8:d8:82:0b:b9:1c:ba:ad:bf:eb:75:d1:fc:b2:f4:
cc:d2:36:14:c9:8f:f7:e8:07:3d:b7:8f:11:e4:56:
41:72:20:85:c2:4f:fa:82:57:9f:b2:fb:38:eb:2a:
de:97:39:f5:8f:44:91:2f:4f:8a:0b:95:da:0c:bf:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:DC:FB:70:11:85:09:83:8F:56:53:2F:41:F6:CD:B3:E0:21:52
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108c::/48
2a06:a005:16d0::/44
Signature Algorithm: sha256WithRSAEncryption
4b:ce:6c:fa:f4:91:0d:18:f0:ad:68:95:e5:eb:46:5f:d1:88:
33:dd:2e:85:e9:7d:43:68:93:c2:f7:d3:c2:79:f8:b0:cd:71:
08:ef:68:b3:f3:a5:92:c8:3b:61:c9:ee:f4:16:95:4d:89:93:
1d:bf:2f:e1:be:41:a7:c6:bf:b4:30:b7:a9:32:4a:61:12:32:
df:4a:0a:7c:c2:3e:c3:a3:3a:1f:d7:e6:a1:18:fa:c8:83:ef:
68:d8:60:af:fb:62:35:91:a0:88:60:82:c7:c7:07:a8:05:19:
b6:f5:45:fb:e1:13:5e:fc:e6:88:c3:2f:61:cb:7d:87:af:47:
e4:69:cf:29:ae:94:d0:80:f2:b1:fa:7b:de:58:01:7a:f5:db:
e7:ce:f3:24:5f:b6:50:f8:87:3d:56:42:8a:ed:47:48:32:77:
e8:f4:d9:9f:c7:f1:92:ba:07:7f:d6:b4:0b:de:6b:47:f5:af:
dc:60:03:e9:e4:b1:64:8f:92:1e:b8:ff:2c:63:fa:c9:b1:e4:
17:d3:98:0c:86:4c:79:10:57:7e:ed:38:7b:b1:0f:d0:ba:6c:
dd:1c:02:c8:d9:98:ad:3a:67:de:d3:78:df:c4:20:4e:ed:91:
bd:b4:25:b5:55:3e:b7:d5:b4:8c:50:db:ce:81:3c:5b:bc:07:
8f:69:cb:10
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUcwaRB6zq//pRK8Bp55vvplNeieUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNDdaFw0yNzA2MDMxNTU4NDdaMDMxMTAvBgNV
BAMTKDVCNUZEQ0ZCNzAxMTg1MDk4MzhGNTY1MzJGNDFGNkNEQjNFMDIxNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy74/FjiAlrj7lp26mzFzKpgYR
4423MjGLFhhjt4NF+RGx2cVNCd1uKTEn3tpDPWVDhz/yIFq9Z+fNaIddGbFcVQ8s
l7kCtDpyURisNL7l+pZw3BPidMdKGqUiGjgVE/WZlqFtMPcCGsfyzVWiuaAo56BZ
hLntKnO++usWOMB/3napSR0NeEBBxcLg6NhYxWRA9bV7qwyFkLhcr67i3oJu/ahL
Cn5jREYiW/MnKmc2ckIQ+ZDdVSmreiyawNLo3UHP2MjYggu5HLqtv+t10fyy9MzS
NhTJj/foBz23jxHkVkFyIIXCT/qCV5+y+zjrKt6XOfWPRJEvT4oLldoMv+O9AgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUW1/c+3ARhQmDj1ZTL0H2zbPgIVIwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MTQyNTk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcAKgagBRCMAwcEKgagBRbQMA0GCSqGSIb3DQEBCwUA
A4IBAQBLzmz69JENGPCtaJXl60Zf0Ygz3S6F6X1DaJPC99PCefiwzXEI72iz86WS
yDthye70FpVNiZMdvy/hvkGnxr+0MLepMkphEjLfSgp8wj7Dozof1+ahGPrIg+9o
2GCv+2I1kaCIYILHxweoBRm29UX74RNe/OaIwy9hy32Hr0fkac8prpTQgPKx+nve
WAF69dvnzvMkX7ZQ+Ic9VkKK7UdIMnfo9Nmfx/GSugd/1rQL3mtH9a/cYAPp5LFk
j5IeuP8sY/rJseQX05gMhkx5EFd+7Th7sQ/QumzdHALI2ZitOmfe03jfxCBO7ZG9
tCW1VT631bSMUNvOgTxbvAePacsQ
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:42:35 2026 by rpki-client