Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202224.roa
File: AS202224.roa (raw, json)
Hash identifier: 4Fpa0g0ilAFbIUj0XVaUNSoUGsShyEVI7kkiUYVPieE=
Subject key identifier: 44:8D:32:DC:88:27:5C:19:C3:96:91:40:71:D2:8C:B4:40:21:87:D7
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2AE2A1864E9B811A5601DA6DA147C1006F78F6DF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202224.roa
Signing time: Thu 03 Jul 2025 15:51:55 +0000
ROA not before: Thu 03 Jul 2025 15:46:55 +0000
ROA not after: Thu 02 Jul 2026 15:51:55 +0000
asID: 202224
IP address blocks: 2a06:a005:b65::/48 maxlen: 48
2a06:a005:108d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e2:a1:86:4e:9b:81:1a:56:01:da:6d:a1:47:c1:00:6f:78:f6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:55 2025 GMT
Not After : Jul 2 15:51:55 2026 GMT
Subject: CN=448D32DC88275C19C396914071D28CB4402187D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:2e:9f:93:78:06:e5:52:d3:56:ba:89:1d:
f6:b5:98:a9:eb:01:9b:a2:bd:53:b3:b5:b8:de:42:
90:a5:ec:83:5f:e9:83:a8:0b:a4:4e:51:66:24:83:
f8:f6:23:46:9e:ad:4f:f8:4e:a2:7d:cc:03:47:2d:
f8:ea:c8:ee:48:48:23:31:25:70:c0:e3:67:af:1b:
38:9a:f7:68:c3:40:85:75:3a:1b:c4:9e:69:bc:76:
08:a5:11:92:ce:a4:28:74:91:38:8e:c4:f7:e9:91:
60:48:0d:af:44:04:6c:44:e8:f8:06:52:b8:21:9e:
af:f8:76:30:7e:07:5a:f5:f4:fe:4b:94:3a:8c:69:
2d:54:bc:6c:71:34:09:1d:59:27:89:d1:f7:65:58:
fb:a3:98:ea:fa:2e:ed:b3:34:95:18:af:a4:a1:2d:
d7:6b:26:c4:fa:91:ed:30:c6:6a:85:6e:07:fc:44:
50:3d:66:51:e8:4c:88:85:48:f4:5f:ec:8d:53:77:
55:e9:ce:61:d9:a3:6d:f2:ca:3c:3f:39:bd:63:f6:
fc:0e:92:fc:3e:29:90:e9:86:46:72:95:e2:49:9e:
5e:71:64:e1:8d:0c:71:37:6d:00:d2:a8:f7:47:ea:
8c:e6:4e:d3:25:57:5b:0e:9e:72:79:87:50:a9:d6:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:32:DC:88:27:5C:19:C3:96:91:40:71:D2:8C:B4:40:21:87:D7
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b65::/48
2a06:a005:108d::/48
Signature Algorithm: sha256WithRSAEncryption
7e:8b:62:0a:c7:b5:64:ef:41:64:d1:8c:0d:e8:1d:51:52:d3:
2c:a0:6f:42:e3:24:14:98:f9:c5:ce:1f:61:cd:52:c1:5b:bd:
aa:bc:1e:8e:4a:42:52:65:0e:97:90:79:b6:19:2f:71:4b:92:
04:e1:dc:ff:70:ae:ed:97:d0:ab:bf:38:ac:e6:8f:f7:a8:79:
70:6c:90:4e:49:b9:d2:a6:6a:09:07:db:17:51:11:87:1f:a4:
5f:00:52:9f:9a:36:5b:65:77:56:2f:e7:aa:51:e6:b6:78:ad:
de:98:8f:05:27:9d:93:15:f5:e7:8c:a9:dd:33:4a:dc:0d:da:
af:13:41:34:38:f9:b5:6a:c1:88:11:cb:9f:f2:f9:3f:d3:36:
01:82:45:43:2b:82:0d:1f:38:28:dd:73:d7:41:5e:6e:38:9d:
2d:77:04:b3:c7:91:8a:51:e1:a6:30:9e:45:7a:e9:a3:7e:fc:
ca:0c:47:b6:23:48:1a:82:8f:f0:fc:10:a1:25:d0:79:27:ae:
8f:b9:8d:aa:02:52:59:8c:24:b0:de:e7:26:c4:d3:11:80:64:
a8:fd:8b:a8:65:13:5d:07:2b:4e:9b:02:4f:00:19:62:6a:f5:
43:41:6e:6a:aa:50:47:ce:2b:66:11:da:63:de:aa:d9:b6:ec:
66:e2:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:56:58 2025 by rpki-client