Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200227.roa
File: AS200227.roa (raw, json)
Hash identifier: dovm1wgmRY7K0MivGUgZuJq//Cro3BvgrtXLmd7zMaY=
Subject key identifier: B5:5C:8B:C3:41:2C:2E:C1:A7:CF:14:53:E9:7A:D3:CF:A0:EE:37:B1
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 12095C1E3C0BB2BB3588B021EF6ADC93BBDD8F30
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200227.roa
Signing time: Thu 03 Jul 2025 15:52:09 +0000
ROA not before: Thu 03 Jul 2025 15:47:09 +0000
ROA not after: Thu 02 Jul 2026 15:52:09 +0000
asID: 200227
IP address blocks: 2a06:a005:5a5::/48 maxlen: 48
2a06:a005:b64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:09:5c:1e:3c:0b:b2:bb:35:88:b0:21:ef:6a:dc:93:bb:dd:8f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:09 2025 GMT
Not After : Jul 2 15:52:09 2026 GMT
Subject: CN=B55C8BC3412C2EC1A7CF1453E97AD3CFA0EE37B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:b7:32:00:42:c7:d0:44:ef:3c:4d:8c:53:
70:4f:f1:14:9c:25:c1:8b:af:7a:1a:38:22:f5:eb:
f4:03:b0:9e:5a:83:c5:d8:09:2b:9b:56:72:d9:57:
f1:f0:bf:a1:10:29:df:db:c7:3d:e1:ff:52:d1:a9:
04:a6:db:c3:36:54:d9:be:00:07:63:2d:bd:83:12:
96:5a:fb:81:4d:2f:2d:d6:07:88:1d:04:08:12:f3:
f4:3b:3e:fe:aa:4e:b5:af:14:75:60:88:95:d2:aa:
79:29:94:e7:ce:6b:29:c7:39:2d:e7:16:40:42:55:
0a:27:a4:f7:ca:22:16:d0:84:a1:01:47:ce:76:91:
ba:01:02:7c:8f:14:06:53:35:c6:f1:9b:e0:57:76:
a1:81:5c:9c:96:dd:34:06:9b:7e:36:4b:09:d3:0b:
91:69:e1:be:b0:a1:03:50:6a:99:72:69:42:4b:80:
ab:5b:3f:32:57:3f:a3:28:42:ad:a4:60:7a:92:eb:
a3:af:86:4c:34:6d:95:e2:8b:f5:df:f6:54:92:5f:
bf:43:ef:e7:c1:97:2f:93:ba:e6:4e:e3:98:ea:10:
ff:49:00:35:87:26:a0:62:7d:d6:8d:e0:57:67:42:
f8:6d:58:96:47:d1:29:bb:5e:bf:fe:ca:7a:18:ba:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:8B:C3:41:2C:2E:C1:A7:CF:14:53:E9:7A:D3:CF:A0:EE:37:B1
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200227.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a5::/48
2a06:a005:b64::/48
Signature Algorithm: sha256WithRSAEncryption
42:89:da:32:f7:52:e7:f3:d6:92:3c:b4:1a:14:09:c4:f4:34:
57:9f:c7:32:ea:a6:1b:80:bf:32:55:b6:5a:29:54:32:af:ea:
03:a4:45:0c:f9:72:ab:dc:8a:f7:be:b8:64:81:3e:11:a5:f1:
ca:85:2c:55:e2:4c:12:d7:88:32:d8:89:20:a5:71:a8:49:8d:
ab:59:64:b4:92:f2:41:4c:b2:c9:45:8b:d8:e9:f1:00:79:d1:
83:19:1b:3b:43:8c:9b:d9:62:87:75:2b:85:cc:ff:33:d9:46:
c1:c9:ca:e5:31:25:59:e2:86:52:82:54:21:98:59:a7:e2:48:
32:cb:4d:08:4c:7d:c6:6a:9c:3d:79:54:1a:7f:bf:8e:90:48:
d7:73:c1:d0:67:c5:19:c6:c3:b9:f3:22:89:23:38:68:41:78:
92:ad:2f:fd:5d:ef:da:63:d0:16:d5:3d:bb:f0:09:99:a8:a3:
33:06:48:0b:83:19:9c:bc:5e:5c:2f:df:d3:30:0f:8f:3a:1a:
a4:13:b9:77:0f:25:24:5a:ad:48:01:ef:5f:60:b4:f1:7f:a2:
72:d6:e9:df:e9:d9:1a:6f:4a:de:b1:a2:90:50:6e:fa:f2:b6:
5b:ce:be:87:84:51:b2:13:a3:d3:f5:a2:32:0b:a4:72:05:7a:
78:5d:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:17 2025 by rpki-client