Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS149835.roa
File: AS149835.roa (raw, json)
Hash identifier: 5xUVr0WL1MGuaeJIQdC9rv7jGffeuth8mEqyk0lHPs4=
Subject key identifier: A9:AD:D6:E4:3B:9B:DD:68:87:13:F9:DD:9B:30:34:80:AB:25:B8:DF
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 39524B9D84345F9AA59670A5E59FBFC8467B700A
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS149835.roa
Signing time: Thu 03 Jul 2025 15:51:47 +0000
ROA not before: Thu 03 Jul 2025 15:46:47 +0000
ROA not after: Thu 02 Jul 2026 15:51:47 +0000
asID: 149835
IP address blocks: 2a06:a005:10a0::/44 maxlen: 48
2a06:a005:2870::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:52:4b:9d:84:34:5f:9a:a5:96:70:a5:e5:9f:bf:c8:46:7b:70:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:47 2025 GMT
Not After : Jul 2 15:51:47 2026 GMT
Subject: CN=A9ADD6E43B9BDD688713F9DD9B303480AB25B8DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:9b:65:c3:da:04:a5:b3:5e:1f:6c:1f:25:
9a:a2:06:ba:8e:d5:c0:2f:b2:a3:04:88:f2:88:63:
56:fe:4a:89:de:31:7b:7b:d6:88:2d:8b:11:f9:ac:
b1:7d:12:87:8a:89:0d:d5:eb:ce:ae:b8:21:79:4e:
49:97:38:50:d8:06:c5:fe:50:da:e3:4c:91:fa:f2:
da:22:ab:d3:0f:8b:ab:99:ab:b8:02:57:d8:9b:e3:
49:ec:13:5c:78:7b:60:7b:82:95:6d:fd:fd:26:e4:
51:c4:4f:ae:8b:ee:31:04:5b:ec:5b:67:63:f9:18:
ea:5e:1b:7f:ce:3b:f2:a8:89:1a:0f:c4:49:65:eb:
34:de:da:34:b9:a1:23:10:e8:56:6c:4e:80:e6:52:
2c:c3:96:b6:ce:9b:68:8e:f4:92:b0:96:9e:d9:85:
42:d2:72:5c:66:39:c7:71:7a:2f:50:a8:48:ad:97:
7a:e0:ef:91:c8:6a:05:c8:9c:a8:de:fa:aa:40:ef:
ce:d8:c7:60:0b:94:01:f4:59:e0:2c:7a:6b:1c:cb:
1e:b3:54:92:ce:c3:d3:ae:27:d3:07:a7:78:c9:31:
1c:3e:13:f9:9b:86:6e:a1:27:c7:d5:2c:e0:b4:df:
7d:68:17:5e:33:04:ae:85:57:05:38:66:b5:96:ae:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AD:D6:E4:3B:9B:DD:68:87:13:F9:DD:9B:30:34:80:AB:25:B8:DF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS149835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10a0::/44
2a06:a005:2870::/44
Signature Algorithm: sha256WithRSAEncryption
7d:63:5f:d6:79:58:79:5a:d1:53:9f:4f:22:d0:fb:86:3b:e1:
6e:12:e0:07:26:48:fc:13:8d:0f:4b:71:3f:04:62:07:82:84:
18:f6:46:a5:f2:37:9b:9e:b4:01:8f:35:ea:6e:50:53:9a:69:
83:b9:a2:00:aa:b2:1a:d8:9f:98:47:c5:c8:9e:9c:32:6b:8d:
f5:45:51:c4:35:5b:f7:dd:58:1d:c0:f8:71:29:f7:95:c1:d9:
c0:8d:8c:06:79:8a:0b:74:ff:01:d2:ea:dc:53:2a:c9:b0:23:
f7:fe:5f:1c:98:7c:82:0c:c1:28:9d:19:09:e4:dd:1d:89:0f:
2e:7b:ed:ce:6c:92:9d:d7:38:43:54:cd:f5:04:7e:7c:7a:84:
d5:8e:18:a7:46:50:b0:01:be:a1:c1:6e:7e:48:6c:f4:7b:25:
50:c1:fd:ae:f1:b3:08:b2:70:9f:52:60:a8:98:6c:66:23:fe:
d2:44:36:44:30:1c:0e:66:b4:40:0b:ea:87:bd:08:cc:fa:cf:
15:f4:46:23:b9:d4:e2:e5:27:eb:22:b1:02:a6:3d:f7:b9:53:
13:2c:b4:b6:4d:51:33:c6:a5:10:a4:2a:1e:f0:7d:6d:40:ac:
20:51:7f:a7:66:f1:c0:9d:95:be:50:19:77:27:5a:70:6f:5e:
ca:2b:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:18:07 2025 by rpki-client