Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200236.roa
File: AS200236.roa (raw, json)
Hash identifier: dvm05TUxpzzTF+UwmfLgJ7hMYt7OMTdDX1nGJfHlBHo=
Subject key identifier: 80:97:55:EF:4A:FE:71:A8:21:CB:ED:5C:DB:83:31:4B:2B:43:F5:7B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2696CF45FF67A87A0538C4D501234A1E2085CCD9
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200236.roa
Signing time: Thu 02 Jul 2026 07:15:00 +0000
ROA not before: Thu 02 Jul 2026 07:10:00 +0000
ROA not after: Thu 01 Jul 2027 07:15:00 +0000
asID: 200236
IP address blocks: 143.246.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:96:cf:45:ff:67:a8:7a:05:38:c4:d5:01:23:4a:1e:20:85:cc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 2 07:10:00 2026 GMT
Not After : Jul 1 07:15:00 2027 GMT
Subject: CN=809755EF4AFE71A821CBED5CDB83314B2B43F57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:a8:1f:2a:ca:5a:42:6c:8d:22:e4:64:29:
2d:71:ef:a1:02:42:74:f2:00:d7:2a:c1:5b:bf:44:
ff:d0:83:7d:58:d1:98:cb:5c:bd:0c:1c:f4:6f:82:
83:cd:58:4c:b0:6b:56:52:76:00:fc:e4:0e:01:1a:
86:fd:c6:89:f7:61:22:21:6a:3f:08:4c:a5:c6:55:
8a:14:9f:a1:31:96:5b:6d:37:24:8d:84:0e:12:07:
d5:71:ae:55:08:35:4f:cf:6d:98:82:7f:19:42:36:
49:c3:50:1b:f8:e3:1d:a0:37:35:e1:ac:dd:f0:3f:
9e:4a:77:3b:2a:13:07:b9:db:c1:83:01:75:31:47:
20:df:60:ed:f2:7e:54:29:0d:4b:8f:23:3f:ef:ad:
97:0e:2a:86:6a:d2:39:09:72:cf:cb:82:8c:8f:17:
ca:59:2d:43:1a:ae:a6:53:9b:42:1c:9c:b4:7b:e9:
af:1f:c2:c5:a0:f8:74:97:ed:b5:de:aa:a1:f9:1d:
9c:af:6e:08:84:76:04:13:50:47:0e:49:58:32:89:
43:6d:1d:07:15:c6:5c:5f:e4:3a:7b:51:31:fc:2c:
6f:3f:5d:58:59:df:66:59:88:35:13:15:f2:12:dc:
72:dd:2f:d0:fe:be:bd:6f:64:83:45:89:8a:2e:ac:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:55:EF:4A:FE:71:A8:21:CB:ED:5C:DB:83:31:4B:2B:43:F5:7B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a8:8a:53:54:5a:c3:f2:26:41:de:74:80:cd:cb:16:22:17:
b1:87:3a:66:8d:52:c8:0a:72:42:f3:fd:b8:2c:ae:ec:1c:c0:
eb:23:f3:31:63:12:fe:74:6e:a0:97:57:07:76:28:89:c1:53:
08:73:9c:3b:57:f2:1a:48:bf:e9:c3:94:04:1d:b4:83:92:4f:
0a:35:58:95:de:6a:a2:da:1b:fa:35:18:84:fe:5c:0d:c4:e7:
17:d2:bc:ff:27:11:eb:c9:93:73:44:ab:dc:74:71:24:a9:fc:
2b:05:82:76:aa:c2:cc:75:ec:7b:63:70:ec:be:02:db:9e:13:
9f:da:f7:22:d1:53:0e:87:f6:61:65:3e:1c:8a:68:5c:9d:b7:
14:5d:4a:c0:8b:9d:ed:9b:3e:71:4a:83:c5:74:27:d5:04:be:
26:86:f2:f5:ac:cf:8c:7e:08:e9:16:40:3f:e2:ac:cf:3f:da:
85:e2:7b:83:6d:e3:c0:74:ac:08:7a:63:75:d1:70:6d:c2:91:
24:a5:fb:c9:70:54:fa:a9:d5:bc:05:0c:53:94:4f:9d:33:53:
50:e0:d7:57:54:6e:a7:e3:c6:58:8a:1d:b4:cb:93:83:1d:7c:
12:0d:5e:9b:36:58:45:40:0d:7a:1e:35:2c:17:d1:8d:c3:d0:
51:2a:7a:5e
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUJpbPRf9nqHoFOMTVASNKHiCFzNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA3MDIwNzEwMDBaFw0yNzA3MDEwNzE1MDBaMDMxMTAvBgNV
BAMTKDgwOTc1NUVGNEFGRTcxQTgyMUNCRUQ1Q0RCODMzMTRCMkI0M0Y1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfoKgfKspaQmyNIuRkKS1x76EC
QnTyANcqwVu/RP/Qg31Y0ZjLXL0MHPRvgoPNWEywa1ZSdgD85A4BGob9xon3YSIh
aj8ITKXGVYoUn6ExllttNySNhA4SB9VxrlUINU/PbZiCfxlCNknDUBv44x2gNzXh
rN3wP55KdzsqEwe528GDAXUxRyDfYO3yflQpDUuPIz/vrZcOKoZq0jkJcs/LgoyP
F8pZLUMarqZTm0IcnLR76a8fwsWg+HSX7bXeqqH5HZyvbgiEdgQTUEcOSVgyiUNt
HQcVxlxf5Dp7UTH8LG8/XVhZ32ZZiDUTFfIS3HLdL9D+vr1vZINFiYourNJbAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUgJdV70r+caghy+1c24MxSytD9XswHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjAwMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAj/aJMA0GCSqGSIb3DQEBCwUAA4IBAQCoqIpTVFrD
8iZB3nSAzcsWIhexhzpmjVLICnJC8/24LK7sHMDrI/MxYxL+dG6gl1cHdiiJwVMI
c5w7V/IaSL/pw5QEHbSDkk8KNViV3mqi2hv6NRiE/lwNxOcX0rz/JxHryZNzRKvc
dHEkqfwrBYJ2qsLMdex7Y3DsvgLbnhOf2vci0VMOh/ZhZT4cimhcnbcUXUrAi53t
mz5xSoPFdCfVBL4mhvL1rM+MfgjpFkA/4qzPP9qF4nuDbePAdKwIemN10XBtwpEk
pfvJcFT6qdW8BQxTlE+dM1NQ4NdXVG6n48ZYih20y5ODHXwSDV6bNlhFQA16HjUs
F9GNw9BRKnpe
-----END CERTIFICATE-----
Generated at Fri Jul 10 14:12:10 2026 by rpki-client