Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200950.roa
File: AS200950.roa (raw, json)
Hash identifier: YtzUNZuzIYA2z+buGCPPkV4Ji8bVzXX8EAF7NAWVQKQ=
Subject key identifier: A2:B0:D7:A6:F7:3D:41:84:4C:8F:C9:22:2A:79:7B:9C:BD:C6:B7:3B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 44560BB87104838A9968FF3564CE9FD2F29633F7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200950.roa
Signing time: Sun 02 Aug 2026 20:54:59 +0000
ROA not before: Sun 02 Aug 2026 20:49:59 +0000
ROA not after: Sun 01 Aug 2027 20:54:59 +0000
asID: 200950
IP address blocks: 2a0d:d906::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:56:0b:b8:71:04:83:8a:99:68:ff:35:64:ce:9f:d2:f2:96:33:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 2 20:49:59 2026 GMT
Not After : Aug 1 20:54:59 2027 GMT
Subject: CN=A2B0D7A6F73D41844C8FC9222A797B9CBDC6B73B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:8c:13:67:2a:22:99:6a:4c:b4:1d:44:f0:
b7:79:9e:12:10:03:b9:dd:60:a7:27:08:61:c0:14:
14:03:66:60:04:8b:90:eb:84:44:99:ed:58:18:04:
5a:2d:04:dc:2c:6b:f8:c5:8d:8f:93:de:0a:68:f9:
e6:e1:2a:c9:8e:50:93:59:e4:29:1d:c0:2a:98:d8:
ed:f4:a0:98:66:89:63:ac:2a:be:38:83:1e:cd:79:
e5:d3:94:c6:8c:28:da:b0:c3:43:a9:53:96:6b:a2:
95:e2:a0:54:2c:30:c5:a7:30:6c:ba:2f:3f:51:8c:
01:77:bf:a8:b1:47:ef:f2:de:7f:13:4b:f3:74:43:
52:8e:37:fc:1b:48:02:42:80:ee:60:4f:5b:02:44:
a5:8a:9f:ea:14:79:be:ea:b4:68:3c:b9:36:72:ca:
65:a9:75:d5:b7:22:0c:a8:9f:df:6f:13:26:f6:7a:
69:f6:be:9f:26:1a:da:54:79:21:cd:91:26:59:d8:
56:5d:da:60:7b:21:e6:64:de:a3:f2:a2:6f:00:e2:
ae:49:c5:83:eb:5c:2d:b7:fd:8e:61:d9:2f:16:66:
3b:69:0e:ac:8d:90:a5:b6:17:49:83:aa:7f:c6:df:
f8:cb:15:2b:0a:fa:63:c4:e5:bb:56:00:56:97:b6:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:D7:A6:F7:3D:41:84:4C:8F:C9:22:2A:79:7B:9C:BD:C6:B7:3B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200950.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d906::/32
Signature Algorithm: sha256WithRSAEncryption
08:4a:6d:fe:47:a8:17:49:49:cb:49:14:d0:40:0c:27:5f:f7:
b2:5f:6d:35:71:a9:b5:46:28:eb:ea:96:cf:87:34:e9:cc:95:
9b:11:de:1b:c8:25:9f:80:64:bd:28:01:f7:08:23:a5:42:03:
2f:8e:e9:c2:3d:7c:4f:3d:3c:a9:85:5d:6a:c8:4d:21:53:d7:
76:15:8d:f2:07:f8:85:6d:47:76:55:f6:c5:a5:8d:f8:e5:c5:
ab:5a:52:84:30:02:08:f3:a8:ca:e6:62:c1:5c:04:95:6a:7a:
7d:7e:d1:60:d2:0b:84:35:ad:28:f9:8d:e5:bb:d4:10:8a:34:
29:d5:09:e0:f1:97:3b:ca:89:34:d0:32:33:47:dc:e7:47:d5:
7d:d0:ae:ce:06:0b:07:31:9d:06:ec:0f:5a:23:26:8f:c4:ad:
56:d6:8e:a1:a4:28:27:90:b9:e9:1a:2b:40:58:da:79:49:14:
61:91:d7:9a:8c:06:b2:52:87:4f:be:f8:31:09:9b:b4:26:d6:
f9:58:16:40:b0:ce:6e:98:c0:17:fb:d7:b1:c9:0e:12:2b:ce:
c4:de:3f:ab:b8:c1:47:1e:46:f7:cf:24:0b:ae:f9:fd:3e:08:
ff:ce:d8:ed:ca:09:e9:8f:a2:94:d0:62:2e:ca:21:4a:32:bc:
31:14:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:22:58 2026 by rpki-client