Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142594.roa
File: AS142594.roa (raw, json)
Hash identifier: xP4tVHjTAQs1qjlqpEdVJQ9UHwzoPWlteVorREae8Ek=
Subject key identifier: F9:D2:42:8B:2E:7B:B7:40:D5:E9:2A:BA:A8:EB:F0:43:07:9A:A2:BC
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0E9B197CCEC7C5FA8C93C9EDCCED54DEA81A6E38
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142594.roa
Signing time: Thu 03 Jul 2025 15:52:05 +0000
ROA not before: Thu 03 Jul 2025 15:47:05 +0000
ROA not after: Thu 02 Jul 2026 15:52:05 +0000
asID: 142594
IP address blocks: 2a06:a005:108c::/48 maxlen: 48
2a06:a005:16d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9b:19:7c:ce:c7:c5:fa:8c:93:c9:ed:cc:ed:54:de:a8:1a:6e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:05 2025 GMT
Not After : Jul 2 15:52:05 2026 GMT
Subject: CN=F9D2428B2E7BB740D5E92ABAA8EBF043079AA2BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:fb:77:d6:56:74:1f:e1:6b:ec:ad:fe:37:
cf:f6:7f:93:35:79:84:b4:e1:f3:79:bc:e9:99:b6:
b3:98:de:87:be:9f:2e:27:71:12:97:3c:fe:48:b0:
11:da:83:ed:9c:df:3e:64:d9:b5:67:eb:c5:3a:57:
9d:37:54:e4:ad:e8:1d:86:6a:0e:35:e1:29:cd:c5:
1b:62:2b:2b:93:fd:98:61:47:b5:1a:9a:b0:d2:19:
da:36:4e:f0:6d:0f:68:25:53:09:09:0f:6a:ab:31:
b9:5a:a1:1f:c3:ee:b7:ea:fb:7a:f3:82:1c:35:ba:
ca:07:05:c6:0f:9e:ad:cf:0b:d5:d1:d7:37:0c:ef:
24:20:44:c5:32:33:3b:0c:59:18:9a:74:ed:c9:34:
37:90:98:e9:03:43:85:eb:14:b8:8a:29:56:d4:b0:
ef:a1:0d:7b:a0:90:96:44:39:32:13:1f:94:d7:84:
7b:9f:6e:7d:df:97:8c:1f:77:39:8c:4b:a0:06:57:
1d:d8:66:24:52:00:e1:dd:88:82:c7:54:0f:79:1a:
d2:0f:d4:95:b6:3e:ea:1b:1e:b3:df:a5:c3:58:c0:
63:e5:50:b0:b3:9f:80:83:e9:da:5c:1f:c5:03:51:
94:ba:0c:ee:e3:9d:05:67:02:a2:f5:04:3f:0a:c9:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D2:42:8B:2E:7B:B7:40:D5:E9:2A:BA:A8:EB:F0:43:07:9A:A2:BC
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS142594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108c::/48
2a06:a005:16d0::/44
Signature Algorithm: sha256WithRSAEncryption
6e:59:39:97:3a:0d:36:88:5a:37:00:b7:6f:0b:75:0d:92:2e:
3d:76:70:43:a6:da:c2:19:38:9d:21:74:b9:30:e4:09:03:76:
12:50:6a:53:12:30:ad:39:c4:cc:ea:b1:dc:d8:fb:62:f5:df:
87:ff:1a:52:03:b7:e1:b0:28:3d:9d:90:b8:2c:ae:8d:b2:4d:
b4:c8:9c:a9:82:9b:ad:eb:a3:8d:2b:7a:68:1e:1a:78:e2:7c:
be:67:ce:83:e9:40:6d:1b:fc:04:08:97:fe:97:39:36:94:6c:
06:46:e3:2e:dc:c0:73:d6:35:b3:6a:ee:d1:d9:d3:22:26:c2:
72:93:a1:22:be:10:ed:a1:00:02:91:47:6e:3b:c1:14:af:04:
b1:1b:44:ab:b4:a4:60:5b:66:bc:d4:66:37:40:4e:7e:85:1e:
74:35:00:e3:e4:d2:a0:8d:5f:6e:50:91:67:ee:1a:65:fc:8f:
08:24:ec:5f:37:f8:e5:55:00:1e:58:9d:eb:cb:b5:fd:a1:ab:
02:6e:39:0d:fa:f7:b4:85:2c:31:c6:41:b7:62:29:15:48:ea:
65:fe:23:4c:3d:ed:f6:fe:a6:75:78:aa:6b:a9:0d:1a:0a:f8:
16:78:c3:99:f5:55:a0:31:bb:07:20:31:53:6f:8c:e5:0f:55:
f2:a2:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:24:17 2025 by rpki-client