Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203069.roa
File: AS203069.roa (raw, json)
Hash identifier: RfaagMdG9nLVUx2xvCn2EMDEf5CQJO/cbMN0qT7r5Jk=
Subject key identifier: 05:AB:8D:DB:16:AA:2C:25:04:05:BB:ED:4B:F5:3D:78:32:7B:B3:FB
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7775AD8D475E694C28FE69519733806C1C339A74
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203069.roa
Signing time: Thu 03 Jul 2025 15:51:48 +0000
ROA not before: Thu 03 Jul 2025 15:46:48 +0000
ROA not after: Thu 02 Jul 2026 15:51:48 +0000
asID: 203069
IP address blocks: 2a06:a005:488::/46 maxlen: 48
2a06:a005:1af0::/44 maxlen: 48
2a06:a005:1b00::/44 maxlen: 48
2a06:a005:1b10::/44 maxlen: 48
2a06:a005:1b20::/44 maxlen: 48
2a06:a005:1b70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:75:ad:8d:47:5e:69:4c:28:fe:69:51:97:33:80:6c:1c:33:9a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:48 2025 GMT
Not After : Jul 2 15:51:48 2026 GMT
Subject: CN=05AB8DDB16AA2C250405BBED4BF53D78327BB3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:60:2f:07:90:84:c1:df:cb:96:a6:bc:7d:
de:62:34:73:be:fd:57:65:25:58:67:38:ce:ae:b4:
d3:39:96:f3:c1:6b:70:93:5f:77:44:27:ac:5b:61:
e6:73:d4:51:cf:5d:51:f8:14:0b:40:21:6b:2b:4a:
bb:67:38:d9:fb:e6:2f:9b:e4:e3:86:27:6d:0d:6c:
72:82:a5:c1:f2:70:d0:c7:ec:44:a6:f5:4e:bc:dd:
94:c0:41:76:ff:05:e2:9b:e7:56:e6:0a:6c:f3:76:
ad:37:00:42:cc:e6:9a:ad:5e:78:d2:53:55:53:3e:
f1:f0:5d:2f:16:86:65:6c:d2:20:e9:6f:59:1b:f5:
6d:b8:a1:f1:99:7a:38:62:67:9a:7e:ef:b9:df:08:
fb:a6:e4:2b:c7:1b:c0:4d:77:d1:d9:53:27:02:31:
14:b3:31:53:11:ed:80:0d:b5:06:42:07:08:28:de:
dc:13:18:1c:19:aa:26:35:d4:c4:28:ee:0e:88:34:
11:2a:d4:7b:0f:f3:c4:ad:04:4c:8f:c7:e5:54:e1:
63:ab:2c:14:2a:2e:02:b7:06:d5:ea:33:08:cd:a2:
e8:05:2d:d5:b4:b1:02:95:0f:fa:5d:18:33:15:b6:
77:74:e2:87:41:88:8e:8b:58:34:cb:64:22:4c:eb:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AB:8D:DB:16:AA:2C:25:04:05:BB:ED:4B:F5:3D:78:32:7B:B3:FB
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:488::/46
2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1b70::/44
Signature Algorithm: sha256WithRSAEncryption
28:8a:c1:3f:44:9f:19:eb:20:8d:a2:36:f5:60:b8:78:d3:3b:
14:f4:b0:e1:f2:f1:9a:71:d5:f5:cf:5a:7d:2e:9f:36:c8:54:
31:7f:84:d7:76:f9:7e:a6:31:91:32:b8:59:8a:1f:47:dc:fb:
b6:22:ce:b2:96:5f:0d:8a:7c:72:37:49:55:b7:37:26:b4:7e:
2b:c5:c1:ce:02:d5:4d:ca:21:d6:7d:db:21:8d:de:30:2f:8d:
00:bd:02:74:82:a9:ef:42:a7:14:59:e8:e9:6a:dd:07:09:da:
14:88:65:34:cd:6c:92:d4:a1:05:2e:47:d1:c8:b3:bc:5d:73:
07:85:92:a7:f1:a2:45:9d:af:22:b0:9d:63:f2:de:49:ea:d4:
6a:63:ce:1f:d2:47:d2:f0:fe:18:4b:1f:c9:34:fb:23:1d:05:
f1:5a:35:f1:7c:7c:01:b0:a1:01:f7:27:19:6f:ba:cc:50:a0:
59:f0:29:2f:88:9a:38:d4:ee:37:28:c2:83:58:e8:8c:07:70:
83:cb:4a:3e:ee:5d:dd:08:2f:30:ca:25:97:65:97:5e:19:01:
09:ad:a4:09:3a:a3:e1:76:b3:7a:cd:0d:11:63:48:8b:31:fb:
d6:26:23:55:25:23:2e:41:34:8b:84:89:d6:aa:dc:31:17:a1:
55:fc:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:19:17 2025 by rpki-client