Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201242.roa
File: AS201242.roa (raw, json)
Hash identifier: iiRaAbgjRwzzgZKVVzkI4FhOLNm5R75NOkyz4Xb8rH0=
Subject key identifier: 21:7D:4D:0B:35:A9:9A:1A:EF:36:AF:C2:0E:07:14:BD:23:77:35:78
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1B501CC63C934D3741F8385B18247CB2EFE260CB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201242.roa
Signing time: Thu 03 Jul 2025 15:52:20 +0000
ROA not before: Thu 03 Jul 2025 15:47:20 +0000
ROA not after: Thu 02 Jul 2026 15:52:20 +0000
asID: 201242
IP address blocks: 2a06:a005:ba3::/48 maxlen: 48
2a06:a005:1084::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:50:1c:c6:3c:93:4d:37:41:f8:38:5b:18:24:7c:b2:ef:e2:60:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:20 2025 GMT
Not After : Jul 2 15:52:20 2026 GMT
Subject: CN=217D4D0B35A99A1AEF36AFC20E0714BD23773578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:8c:98:e5:03:dd:8a:f1:cd:7e:bb:f3:61:
0d:57:9c:a2:f1:75:72:c1:27:45:15:c1:43:aa:4c:
cd:8d:4a:96:9b:34:e3:9e:c1:e1:56:55:5a:88:e8:
31:25:0f:08:1e:cf:7e:89:f9:a7:93:59:f4:4b:ea:
70:c0:64:f1:76:92:ed:1b:38:4e:3c:45:98:b6:01:
50:2f:bf:33:ed:03:38:4f:28:45:35:8a:16:7f:3b:
f4:5f:4a:cf:f7:65:d6:2a:5e:47:65:ea:c5:ab:f8:
d9:5c:d1:88:76:a9:c2:cf:fe:7c:6b:e4:5d:c4:cb:
20:89:57:07:98:b0:3d:0a:d3:00:f4:49:34:97:31:
ec:9d:5b:09:05:a5:a5:ed:49:a6:98:97:56:e9:7f:
1e:29:d2:cb:37:9f:93:a0:bc:43:1f:77:f8:08:03:
68:e1:89:3f:48:b6:48:1c:97:76:e0:02:0e:1a:5c:
1e:d7:a9:37:35:fb:8a:fa:49:43:90:70:f0:33:d4:
ef:35:93:d7:6c:a0:37:c9:81:bd:ff:10:f3:0b:e9:
5b:d4:67:62:2b:fe:0d:0a:6e:f0:7a:cc:37:82:ce:
48:0e:fc:0d:51:28:f5:39:2e:06:23:a6:1b:c4:78:
93:23:cc:69:fd:20:82:3b:b9:75:c6:1c:49:7f:09:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:4D:0B:35:A9:9A:1A:EF:36:AF:C2:0E:07:14:BD:23:77:35:78
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba3::/48
2a06:a005:1084::/48
Signature Algorithm: sha256WithRSAEncryption
80:cb:52:8f:7a:d2:21:7f:6b:3c:3b:44:22:42:e9:37:97:10:
29:21:bd:86:34:cf:32:da:ee:d8:09:e4:05:f1:21:c2:15:85:
7b:97:b3:27:54:d3:b8:9a:b7:0a:3a:64:6b:78:62:a5:e3:28:
f8:41:13:1d:d1:b0:97:0a:21:ba:8c:4a:dc:db:8e:76:99:bc:
4c:ae:bc:54:b3:d0:dd:05:3a:81:21:f3:f1:6c:51:88:df:d9:
27:00:c9:a5:a1:94:87:f4:bd:08:7d:f2:1c:d3:76:92:cb:c7:
48:27:74:09:59:48:e8:af:51:d7:47:7a:d4:55:8f:ea:56:8e:
23:07:6e:04:1a:e7:ff:65:c6:94:fb:a7:40:c8:2b:ce:20:2e:
df:9f:5d:07:84:8c:6f:1b:cb:3d:67:34:1a:c6:9f:0f:83:c1:
77:99:ef:78:e0:c0:c8:8a:d8:f6:63:35:4a:d0:2c:e3:4c:52:
2d:53:fd:32:bf:a7:95:56:d7:0b:58:75:68:c5:a6:cb:4d:a3:
96:0f:23:1b:22:6f:f7:98:85:3f:e5:1a:a2:ec:5c:ed:00:e1:
04:fc:1c:b3:a4:ad:9b:c4:62:ce:33:df:26:6f:24:b7:db:a1:
69:8f:8f:a2:f1:c6:87:85:72:cd:30:fc:5a:a1:0c:9d:71:03:
90:f8:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:56 2025 by rpki-client