Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202427.roa
File: AS202427.roa (raw, json)
Hash identifier: InmwunuBuQifWGRLKDe1blniQFBM0Uzos6jTS/reVR8=
Subject key identifier: E3:5D:F0:CF:3C:85:D2:18:34:96:80:0B:DB:FF:9B:7C:3F:92:9A:28
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4835D8E4E073995109BB51224F163C4DCF6D1C8B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202427.roa
Signing time: Thu 03 Jul 2025 15:52:31 +0000
ROA not before: Thu 03 Jul 2025 15:47:31 +0000
ROA not after: Thu 02 Jul 2026 15:52:31 +0000
asID: 202427
IP address blocks: 2a06:a005:28e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:35:d8:e4:e0:73:99:51:09:bb:51:22:4f:16:3c:4d:cf:6d:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:31 2025 GMT
Not After : Jul 2 15:52:31 2026 GMT
Subject: CN=E35DF0CF3C85D2183496800BDBFF9B7C3F929A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:a6:f2:6e:50:ac:e8:25:e8:bb:96:03:90:
dd:94:82:dd:0e:5c:03:26:27:ac:94:f5:bd:04:78:
4d:1c:85:9d:3c:83:f3:8f:37:3b:4f:f6:2f:44:38:
37:64:f5:42:68:e4:6e:cf:6f:26:66:7a:d8:3b:42:
1b:eb:93:18:8e:6e:d4:0a:77:e2:b1:5e:ca:f4:d7:
0e:dc:93:6b:f3:8c:96:55:a9:d8:71:27:a8:27:38:
3c:9f:6f:a7:41:ab:dd:83:d4:10:72:b0:bc:6a:36:
f9:85:c5:c6:12:98:15:b0:a3:c6:81:7e:44:29:e4:
12:42:d8:1c:1b:bb:53:a0:86:a1:1e:6f:48:ac:e3:
63:00:db:3b:ee:59:10:a4:79:46:f8:c8:6c:af:98:
85:3b:84:6f:5e:04:32:35:b8:cd:41:56:9d:46:ff:
f8:ef:b5:87:27:f6:a1:fd:72:b5:92:4f:98:af:da:
56:70:92:31:3c:e4:4b:a5:34:6f:61:33:82:3e:bd:
9f:fe:38:ed:18:6a:07:ee:fd:a4:cc:fb:ea:d5:17:
15:eb:3f:71:a6:6b:50:5e:c9:1c:f8:0e:34:12:80:
56:9b:b7:43:b1:c7:0c:44:8d:a7:27:ef:a3:04:70:
d6:19:b4:fb:08:c1:94:b5:1e:ed:50:bf:a5:6c:56:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5D:F0:CF:3C:85:D2:18:34:96:80:0B:DB:FF:9B:7C:3F:92:9A:28
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:28e0::/44
Signature Algorithm: sha256WithRSAEncryption
79:3b:d1:76:c2:84:06:d1:8f:38:d1:11:29:fa:bd:9a:87:2a:
0a:a5:1c:e1:33:5e:3f:7a:85:e6:49:c5:26:f5:7a:b7:35:40:
e5:c4:46:6a:49:00:5b:3b:45:a8:59:2e:3d:79:9a:85:e0:1f:
fb:e3:7e:dc:d3:a4:d6:9c:e3:9c:78:b8:94:ea:8a:9c:74:83:
6e:a3:56:71:b7:0d:c0:90:ab:2a:8e:82:21:3b:62:e2:40:ff:
3c:2a:04:3d:4d:67:26:d0:75:00:32:6f:de:16:fe:4b:1d:27:
57:c5:0e:5d:b0:99:bc:14:2a:40:53:10:52:24:82:9f:57:2e:
3d:6e:b4:fe:84:74:d4:76:2d:50:bf:31:0c:90:e3:ab:e2:57:
58:d5:43:52:5a:dd:01:8c:e8:c7:2b:e0:f3:20:2a:23:b2:4b:
cd:6b:12:86:16:08:89:48:05:33:21:0a:44:6b:e2:bf:9b:9b:
46:14:1d:ef:37:1d:ac:e3:73:77:5d:d8:85:7d:60:3e:f8:96:
c8:9b:25:c1:43:7e:c0:38:88:7f:f9:0c:3d:47:47:c2:23:45:
a0:ef:1f:99:83:1c:8e:a9:d0:87:c6:94:33:4b:2a:8e:f9:12:
86:6a:ea:01:24:3a:25:2a:07:e3:89:93:eb:bd:64:ea:22:50:
09:af:32:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:57:39 2025 by rpki-client