Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199682.roa
File: AS199682.roa (raw, json)
Hash identifier: Am4K0UI2COqZMORE0j/vmKm7y36j7T/bjsk3kAC2GrM=
Subject key identifier: 13:12:05:C9:C0:65:0C:CB:80:32:15:B7:13:33:5D:51:5C:3F:BB:07
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 014F2491C7844A3AC980A402A9A0F8C26D512AD7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199682.roa
Signing time: Thu 03 Jul 2025 15:51:57 +0000
ROA not before: Thu 03 Jul 2025 15:46:57 +0000
ROA not after: Thu 02 Jul 2026 15:51:57 +0000
asID: 199682
IP address blocks: 2a06:a005:180c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4f:24:91:c7:84:4a:3a:c9:80:a4:02:a9:a0:f8:c2:6d:51:2a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:57 2025 GMT
Not After : Jul 2 15:51:57 2026 GMT
Subject: CN=131205C9C0650CCB803215B713335D515C3FBB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:04:a8:89:4b:56:7b:bb:1c:58:06:ca:5e:
74:56:12:97:b6:8d:14:77:29:87:60:4f:8f:b4:e3:
25:2c:27:5e:28:bb:08:a1:66:1e:c1:84:01:26:3c:
89:fe:0d:91:ef:15:b9:40:dc:4d:b3:b4:68:01:1a:
28:23:58:70:d8:c6:ab:7f:ce:ec:78:29:29:19:09:
f1:c8:27:a2:ba:65:44:af:8a:f8:24:d8:9b:1f:fc:
c4:dd:2a:19:52:e7:fd:43:54:16:52:5e:3a:a1:10:
54:6a:f6:53:99:53:01:f1:18:00:01:44:21:60:f8:
50:9e:23:2b:29:9f:8f:58:7b:af:e8:2a:af:7b:d9:
f0:a5:ef:7a:cb:56:69:48:80:01:03:da:ee:af:55:
ad:d9:63:27:f6:f3:74:3f:95:66:6b:ca:f4:9e:86:
b7:42:a6:22:e1:78:c3:5a:d2:6f:c8:cc:c9:e3:c7:
dd:91:b2:31:9e:75:78:14:ca:78:f4:bf:26:bc:06:
4a:83:3d:3e:8f:69:1a:97:ec:72:f2:f9:00:ad:b7:
14:53:ea:4f:f1:ed:10:43:ea:e0:2e:ad:7d:f0:81:
5f:73:a0:21:50:c5:f4:9b:ce:f5:fa:88:07:fe:2b:
1f:e2:2b:d9:5b:d7:ae:61:8b:eb:67:44:e1:1b:48:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:05:C9:C0:65:0C:CB:80:32:15:B7:13:33:5D:51:5C:3F:BB:07
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180c::/48
Signature Algorithm: sha256WithRSAEncryption
1f:7a:2c:79:73:0b:d9:0e:02:85:ee:6d:df:07:db:d3:d9:ae:
a8:4f:9f:c9:4e:de:c5:6f:2c:a0:57:df:86:ad:36:01:09:07:
ab:66:78:00:05:8c:84:bd:a6:68:7b:46:2a:8f:84:bb:c5:6f:
89:bd:2d:5c:90:6e:6f:38:c6:3c:cc:8c:f7:46:95:b8:e9:24:
2d:d0:e4:fc:65:29:26:52:e4:57:30:3d:5b:5a:d2:d2:2b:56:
74:db:8a:97:d8:81:c4:2d:56:58:35:dd:1c:ab:89:05:fc:22:
4e:32:df:4a:ef:2a:b9:4e:82:6f:c8:1c:f8:e2:50:99:ce:eb:
f7:ea:b0:37:a9:bf:94:19:d9:77:68:ab:48:fe:86:e5:d4:d7:
ac:0e:11:98:a5:1c:9b:26:01:f5:e9:d8:ec:d9:cf:39:75:58:
6a:16:c5:38:8c:7b:e9:f3:68:02:08:a1:dc:f4:68:57:80:a9:
53:c1:85:ed:e6:e7:b4:dc:89:56:c3:35:93:d7:43:e0:fa:aa:
0e:9b:a2:ca:f7:94:33:cb:ef:3d:f3:fa:1d:33:44:de:55:ea:
08:a0:b5:96:da:1a:96:0c:c3:d8:4d:a8:75:d4:c4:c3:10:40:
3d:3a:a4:8a:cf:b7:16:ff:a4:d4:0c:e9:38:02:f3:9b:83:31:
5c:0d:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:57:39 2025 by rpki-client