
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa
File: AS203199.roa (raw, json)
Hash identifier: 0GTq7lgIC+PWrpbq/UURiNaH3vsugOQw+UjKqZSXe8U=
Subject key identifier: 7D:78:08:88:99:1F:27:BC:AC:5D:B4:69:71:37:02:22:60:4C:FD:2E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 75A2520195179C44693F7972EBC7EA9A24140C91
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa
Signing time: Thu 03 Jul 2025 15:52:35 +0000
ROA not before: Thu 03 Jul 2025 15:47:35 +0000
ROA not after: Thu 02 Jul 2026 15:52:35 +0000
asID: 203199
IP address blocks: 2a06:a005:19d0::/44 maxlen: 48
2a06:a005:2d90::/44 maxlen: 48
2a06:a005:2da0::/44 maxlen: 48
2a06:a005:2db0::/44 maxlen: 48
2a06:a005:2dc0::/44 maxlen: 48
2a06:a005:2dd0::/44 maxlen: 48
2a06:a005:2de0::/44 maxlen: 48
2a06:a005:2df0::/44 maxlen: 48
2a06:a005:2e00::/44 maxlen: 48
2a06:a005:2e10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a2:52:01:95:17:9c:44:69:3f:79:72:eb:c7:ea:9a:24:14:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:35 2025 GMT
Not After : Jul 2 15:52:35 2026 GMT
Subject: CN=7D780888991F27BCAC5DB46971370222604CFD2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:5f:90:92:1a:19:91:6e:3c:65:0a:99:5d:
dc:83:a1:cb:83:8b:1d:5c:1a:02:2d:5b:59:3c:db:
c1:5f:9a:5f:8d:99:be:a7:c6:bb:cb:45:39:71:d8:
fa:5d:72:b0:6a:2d:55:ff:ce:f2:f3:34:8f:26:61:
30:7c:55:d1:d9:7a:19:fc:40:47:fe:f7:95:c1:f8:
11:8d:6f:43:86:59:0d:1e:97:7f:91:7d:46:c8:09:
a7:55:10:6a:7b:99:05:d2:1a:e9:f9:51:8e:a7:e5:
ec:c5:58:97:6a:6c:c6:2d:7b:e5:3b:2a:8a:cb:5d:
45:22:40:bb:a7:e2:f7:34:83:c4:ef:ca:36:24:88:
ef:8c:ca:14:4f:19:69:52:e0:5d:0a:2e:1b:85:98:
4f:11:22:8c:44:34:73:49:a0:74:1b:bb:b2:62:dd:
1a:ab:95:b6:0b:7c:60:41:39:ac:7b:d1:13:b5:20:
6e:42:10:a8:51:20:60:ab:1a:84:17:7d:7f:5b:65:
06:b7:32:90:bd:b8:8a:2b:bc:fc:ec:a9:a4:7d:4a:
f1:f8:08:88:3e:e3:d3:79:aa:28:56:fb:89:28:6a:
06:20:06:83:ac:ce:45:4c:3b:cf:d1:51:3e:0c:c3:
a2:12:46:47:2d:54:0a:f0:18:ba:49:fd:07:c9:a8:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:08:88:99:1F:27:BC:AC:5D:B4:69:71:37:02:22:60:4C:FD:2E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19d0::/44
2a06:a005:2d90::-2a06:a005:2e1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c4:67:f5:25:44:be:49:f6:d1:ad:3e:d8:ca:8e:f2:7e:43:51:
c3:9e:99:d9:d4:29:41:b6:4b:12:3d:f6:2a:96:e7:49:35:1a:
fc:6b:87:e4:d0:2e:44:f8:9c:a6:5e:55:a3:46:cb:84:40:96:
6f:e6:90:86:44:1c:f0:20:6e:44:60:50:f5:1d:b3:e8:38:ff:
b4:98:5a:0a:64:27:84:ae:65:e1:4f:41:86:21:92:c6:47:63:
31:32:68:fb:df:af:76:7b:57:d6:95:6f:e7:67:9a:aa:9e:b1:
97:7b:80:2f:5a:90:ca:35:d8:5b:1a:ad:a5:0c:d2:50:3e:e6:
15:60:4b:cd:df:4a:e4:c0:56:a1:91:a3:67:31:eb:c5:c7:6d:
0e:be:4c:97:3c:f0:3a:d5:85:55:f8:c8:0a:5c:ae:e1:4b:83:
37:bf:46:8e:b5:a7:bc:ce:47:94:cb:c4:92:d1:7b:72:e3:27:
4a:1a:2c:22:af:1d:99:39:31:86:26:58:54:5b:43:42:9d:4a:
07:f5:d9:f1:f6:a9:d0:4d:5d:22:65:c5:0d:ce:5d:82:b8:a5:
e2:a7:c6:b5:b7:77:f8:9e:31:c3:34:e9:d7:84:0a:20:45:b6:
73:43:f5:b3:1b:4a:7d:63:a5:87:fb:1f:a9:10:47:c0:c0:76:
2b:b9:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:59 2025 by rpki-client