Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201392.roa
File: AS201392.roa (raw, json)
Hash identifier: T2stmzfwJ7DeRS79ptCSaP9R6WAFIIvv9v6yw+8uv2E=
Subject key identifier: D3:DC:C6:FF:35:4F:14:14:17:3C:E5:D6:38:6A:A7:AE:5B:A8:9A:BF
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 169236CFCD4A142CB715C7C9D789C97E34C0ACFB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201392.roa
Signing time: Wed 30 Sep 2026 10:16:23 +0000
ROA not before: Wed 30 Sep 2026 10:11:23 +0000
ROA not after: Wed 29 Sep 2027 10:16:23 +0000
asID: 201392
IP address blocks: 216.86.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:92:36:cf:cd:4a:14:2c:b7:15:c7:c9:d7:89:c9:7e:34:c0:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 30 10:11:23 2026 GMT
Not After : Sep 29 10:16:23 2027 GMT
Subject: CN=D3DCC6FF354F1414173CE5D6386AA7AE5BA89ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:bf:6a:f4:61:c7:f7:28:bb:3c:4b:e7:2d:
b3:fc:65:10:ba:2e:97:4c:81:26:12:8a:52:ed:96:
40:7f:0c:02:f4:53:bb:51:a6:1b:45:5f:db:22:53:
de:de:ee:05:c4:f5:bd:b0:91:aa:2e:91:06:0c:91:
4d:95:16:36:11:b8:74:fc:2f:f4:68:f0:6a:00:c0:
73:09:4a:25:ac:04:40:13:5a:f0:c1:45:27:f5:1a:
fd:b4:7a:77:82:6b:2f:81:06:a7:bd:a2:62:4f:cc:
a8:68:ae:0e:b5:4f:cf:6d:58:08:8b:89:9c:71:a5:
51:bd:96:73:f9:f5:f8:e4:e6:2f:27:cc:ff:8a:05:
ed:6e:0b:b2:9d:5b:40:75:f2:60:69:c0:85:3e:3d:
1f:5a:2e:81:6d:ff:ca:48:7b:6f:23:a0:ab:ba:43:
38:df:13:66:c0:8b:79:6b:c3:48:bf:35:76:9b:88:
04:f2:d4:24:c6:eb:1d:d7:85:4d:3e:30:6c:37:be:
4f:be:c5:3e:73:ec:d9:88:17:f4:c8:18:3e:18:f1:
3c:02:05:d5:7a:e3:ef:a8:e1:08:f2:9e:91:32:86:
d9:21:f7:6d:a8:a5:af:b8:4d:06:f5:c4:94:8a:bd:
0d:5e:68:65:fa:e3:75:ff:e2:b1:73:47:bf:5f:c4:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DC:C6:FF:35:4F:14:14:17:3C:E5:D6:38:6A:A7:AE:5B:A8:9A:BF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.86.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:12:fe:42:25:82:b3:7a:f0:d4:fa:f3:70:8b:d1:5a:2e:2e:
e4:fa:67:10:0b:e9:8c:4d:69:33:ac:57:fd:78:24:0c:9d:5c:
5e:30:d7:3c:14:f3:36:2b:5c:ec:4e:75:7c:e2:c3:0b:09:cf:
ee:e9:39:b0:a8:28:7e:fd:b2:29:ec:2d:1b:05:51:7e:ae:8c:
c6:56:d2:b8:20:a7:d7:8c:0f:ff:e6:e6:b8:6d:b2:e0:26:f3:
63:f2:66:16:8c:63:5c:a2:de:73:10:22:82:a5:54:4e:91:b1:
46:8f:d5:ac:24:4f:ed:42:80:d9:d0:e6:5a:d2:75:2f:f0:36:
37:fa:56:ca:2b:af:05:61:32:1b:99:41:3f:55:c4:f4:8c:4a:
af:01:5e:2d:9d:60:53:ab:53:89:0a:59:ba:0c:0d:3e:c4:1a:
7f:b3:5c:c7:cb:cd:41:86:9e:b9:4d:7f:1f:78:77:cf:a6:e7:
da:63:ee:4a:6f:53:67:9d:eb:18:ca:49:f7:35:e1:73:06:5e:
f9:9d:33:11:78:b9:94:9a:c1:9c:fc:c8:c4:69:04:21:21:92:
d3:44:18:a8:11:33:e2:92:c0:b3:e3:79:a9:70:b8:52:de:dc:
86:bc:b4:36:5d:23:64:e6:67:95:50:31:3e:4c:f5:1b:b3:62:
a9:6c:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:17:14 2026 by rpki-client