Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151704.roa
File: AS151704.roa (raw, json)
Hash identifier: 7uq3TZYOzZF96XQdeLEXKi82CiF3yXpdzVIWK0/Lv74=
Subject key identifier: 6D:37:B5:2C:55:44:D9:50:0E:9C:4C:E4:DE:97:2D:D4:B8:A7:E1:17
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 164200D3807E82C4BA8E4BBCCBC14BE3CF71729C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151704.roa
Signing time: Wed 13 May 2026 20:49:26 +0000
ROA not before: Wed 13 May 2026 20:44:26 +0000
ROA not after: Wed 12 May 2027 20:49:26 +0000
asID: 151704
IP address blocks: 167.104.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 01:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:42:00:d3:80:7e:82:c4:ba:8e:4b:bc:cb:c1:4b:e3:cf:71:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: May 13 20:44:26 2026 GMT
Not After : May 12 20:49:26 2027 GMT
Subject: CN=6D37B52C5544D9500E9C4CE4DE972DD4B8A7E117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:5c:ce:d0:c0:6e:eb:af:6a:3c:5a:cc:0a:
d3:a7:24:52:dd:49:ae:ab:40:72:17:0d:74:32:ae:
17:15:4a:a9:84:10:b3:6b:30:1b:99:05:a7:d8:5a:
32:36:c9:11:4b:31:27:7e:db:00:b4:24:e5:0a:9d:
2d:92:9d:8d:82:1b:00:95:d9:3d:2b:40:ed:38:e9:
90:89:32:32:69:35:35:f3:96:71:c2:de:04:b3:c2:
0d:eb:e4:6f:ba:fa:b7:cc:21:56:db:3b:d6:c8:2a:
25:27:67:1c:04:82:ba:25:81:be:bf:a4:20:bf:3d:
95:25:a8:8a:87:95:8b:29:48:61:43:2e:49:7a:2b:
73:29:32:6a:ed:f6:2b:9a:97:0a:2c:6f:15:45:cf:
2c:fd:35:0a:f5:33:d8:3e:09:1d:bc:c7:ef:41:c8:
c1:50:9f:b6:29:e1:3c:ce:97:4d:af:39:bb:e4:30:
a0:32:89:d0:c4:87:a9:78:ad:3e:c3:87:8b:d8:d5:
42:c0:4b:18:f8:41:1e:6b:5d:f4:14:3e:43:b7:d9:
43:45:07:bd:bb:19:80:aa:a4:65:37:e1:cc:18:a8:
66:35:97:b2:35:bc:ab:aa:f2:b2:ea:80:e2:5e:db:
7a:3c:02:84:2f:94:16:50:ce:38:27:fc:4d:fb:59:
3b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:B5:2C:55:44:D9:50:0E:9C:4C:E4:DE:97:2D:D4:B8:A7:E1:17
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.222.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4c:30:fe:e8:52:14:18:27:42:47:4c:e8:51:6a:bf:ba:6f:
b8:17:bc:91:36:9d:f1:5f:f6:3d:7c:47:4f:2f:7a:84:61:4c:
8d:a8:65:69:be:36:92:bb:e5:fb:dc:55:34:b7:e1:df:ac:15:
d1:e8:31:01:74:27:20:8c:df:17:e9:f1:92:88:ec:08:73:72:
dd:81:97:1f:89:8f:85:54:ef:a4:9c:8f:68:96:c3:62:11:28:
31:5e:2f:07:91:b1:fc:95:5f:37:54:70:2d:a8:e9:0b:11:68:
9d:fe:5f:f8:bd:e8:2b:a4:61:42:b0:e7:c5:fa:24:47:c9:da:
e6:f9:36:5a:1d:6a:78:c6:f6:4c:c2:5d:82:e2:05:e3:05:cd:
7b:e9:51:8a:8d:d4:78:d4:92:cf:03:a9:af:15:2c:35:6c:0a:
3f:72:46:d4:64:60:d2:d6:b4:fa:39:fe:c9:12:f1:65:0e:ed:
7a:4f:24:7e:a1:9b:ea:f6:db:a5:e7:a9:b3:bd:da:27:88:64:
5d:9f:51:fc:9a:74:08:08:5d:66:bd:f7:d1:38:41:8a:36:ad:
aa:df:31:1f:d9:8d:05:1f:45:72:f9:d3:8e:04:e0:9a:66:4b:
e9:ac:bf:df:b6:ac:d7:69:c3:4e:34:22:9e:be:e4:f4:e0:e6:
43:52:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 14:45:42 2026 by rpki-client