Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200306.roa
File: AS200306.roa (raw, json)
Hash identifier: WqIow27Sshcp0kuIdEtNiRGTE2f2nnrQeDsN2m0HonQ=
Subject key identifier: B7:08:18:C6:84:FC:CA:BD:81:0E:6A:A2:61:24:86:BE:A3:E2:FC:40
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2C947AD4FD0ED2CE990224EB59AF8FD8DEE3AF13
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200306.roa
Signing time: Thu 03 Jul 2025 15:52:37 +0000
ROA not before: Thu 03 Jul 2025 15:47:37 +0000
ROA not after: Thu 02 Jul 2026 15:52:37 +0000
asID: 200306
IP address blocks: 2a06:a005:af0::/44 maxlen: 48
2a06:a005:b00::/44 maxlen: 48
2a06:a005:c00::/44 maxlen: 48
2a06:a005:c10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:94:7a:d4:fd:0e:d2:ce:99:02:24:eb:59:af:8f:d8:de:e3:af:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:37 2025 GMT
Not After : Jul 2 15:52:37 2026 GMT
Subject: CN=B70818C684FCCABD810E6AA2612486BEA3E2FC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:f8:92:b3:fc:67:95:f4:c7:78:bf:a8:a8:
80:7a:5d:63:ed:b9:14:7b:2f:9d:55:10:95:5a:c3:
aa:0c:df:52:15:19:39:d0:60:85:6a:1e:e0:d7:3e:
d7:3d:63:55:02:c6:e0:2c:5b:20:cf:d1:0c:05:71:
b1:86:df:55:3f:f4:9b:41:98:6d:f2:c5:fc:d8:c1:
0d:b4:63:05:5e:58:fe:70:46:76:2f:79:de:2e:77:
f3:01:bb:44:2b:43:0b:fd:54:a1:4c:ed:48:1e:00:
51:b7:38:6f:33:7b:77:ef:d5:5b:4d:ab:07:12:c3:
f5:76:10:3a:ca:ef:2e:f3:64:5f:6a:61:0d:67:c6:
01:bb:83:06:12:23:3f:93:0f:49:ae:b3:24:24:60:
5d:c9:e0:18:92:19:7e:18:a6:42:9b:39:ab:1e:4f:
10:98:98:74:07:69:5e:1c:80:8c:82:ea:b2:ef:bc:
7f:47:c5:5b:61:a2:c8:af:9f:f4:30:8e:51:f3:21:
7b:70:5b:2f:6c:bb:76:87:83:55:52:09:0a:fd:12:
b7:46:de:e9:99:70:f0:12:f7:14:fc:a5:b4:36:e7:
17:db:17:a5:ab:34:1d:42:3c:45:d8:f0:9b:30:27:
9b:52:d0:eb:57:c9:31:8c:0a:06:9c:44:94:7c:8f:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:08:18:C6:84:FC:CA:BD:81:0E:6A:A2:61:24:86:BE:A3:E2:FC:40
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:af0::-2a06:a005:b0f:ffff:ffff:ffff:ffff:ffff
2a06:a005:c00::/43
Signature Algorithm: sha256WithRSAEncryption
bc:f7:d5:12:3f:c8:8d:46:a1:5d:91:1c:82:6a:b1:33:a1:30:
fd:57:0c:a4:d2:78:b6:40:1a:9a:fb:6f:63:57:99:66:c9:a7:
97:68:06:d4:4d:8a:d8:cc:45:de:7d:88:8d:fd:0b:c7:12:71:
0d:a0:a5:4a:71:0a:d0:ef:7b:0b:22:80:84:44:f6:61:d4:6d:
e0:3f:ea:25:5e:72:00:db:d9:0f:91:af:b8:72:fb:58:48:91:
40:cc:45:34:a3:32:fe:b3:41:64:96:3c:6a:8e:ce:90:71:2f:
45:47:18:a4:f1:66:46:09:51:d1:0c:5b:e8:c7:7e:48:73:f7:
2c:11:4c:9b:07:c4:c6:8b:7a:87:dd:0d:4b:11:e6:2a:7d:1a:
2b:4e:59:2e:b5:55:4a:0d:4c:0c:21:be:83:b3:79:72:66:60:
f5:71:b5:20:5e:9f:33:12:85:b0:95:33:3f:af:b1:d3:9a:f5:
4f:fa:cf:56:80:56:51:32:e1:90:d4:61:56:99:07:95:1e:03:
86:81:67:5e:3a:ca:93:d6:26:14:ec:e4:7d:ca:c2:5e:66:96:
71:3e:21:1b:08:c9:fa:ca:a1:86:a1:b1:9b:7f:38:78:47:8b:
c0:ae:f0:4d:66:6f:16:db:7c:5a:5d:3d:72:97:45:73:16:d8:
4d:b5:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:09 2025 by rpki-client