Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203655.roa
File: AS203655.roa (raw, json)
Hash identifier: q83ZIBpDuafR6iejtKGQv3DbZwYOjHwNqj23wzXvzZs=
Subject key identifier: 1C:9B:89:E7:DC:87:6F:A2:69:49:E1:04:78:5D:5E:DC:F5:BC:20:30
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 155B1C51FC8EFA29B4D6F971282856BE035B1F26
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203655.roa
Signing time: Thu 03 Jul 2025 15:51:30 +0000
ROA not before: Thu 03 Jul 2025 15:46:30 +0000
ROA not after: Thu 02 Jul 2026 15:51:30 +0000
asID: 203655
IP address blocks: 2a06:a005:13e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5b:1c:51:fc:8e:fa:29:b4:d6:f9:71:28:28:56:be:03:5b:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:30 2025 GMT
Not After : Jul 2 15:51:30 2026 GMT
Subject: CN=1C9B89E7DC876FA26949E104785D5EDCF5BC2030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:59:53:f8:93:f2:27:ba:3d:af:e3:be:b2:
eb:e3:c6:a3:6d:8c:3b:93:b6:e2:47:96:bd:55:36:
84:8a:41:8e:a3:c8:b7:ba:0d:16:2e:6c:af:6d:4f:
78:fa:68:82:69:88:d7:ee:5b:13:95:d6:7a:3a:da:
14:91:a2:96:5f:1f:4d:89:bc:7c:7d:22:a1:8a:a9:
71:9c:e4:55:45:6e:25:12:ec:2c:a7:55:f1:68:34:
5b:7e:78:69:c7:46:5f:51:d9:8b:6d:3a:ea:1c:ed:
aa:2c:6f:35:34:ea:79:6c:e0:ba:e3:79:7e:f2:dd:
5a:c0:36:22:89:11:0d:33:c7:3f:6a:70:c8:4b:a9:
38:f9:70:bd:8d:9a:73:e1:f1:d8:53:f5:a9:bf:b3:
e0:f5:ce:21:03:49:34:11:97:88:b0:9d:ce:2e:6f:
3f:e8:40:25:23:be:0c:45:43:8b:9b:59:27:b2:88:
05:73:e2:4e:cf:a1:cf:39:ef:b1:d3:73:f9:4b:89:
8b:5c:1d:c1:d7:a1:6b:fc:45:43:0f:2e:b9:4b:99:
f0:bb:e7:5e:0b:60:90:a8:6b:69:07:0b:a0:cd:be:
13:27:38:9b:da:7d:d4:67:42:d6:b9:e0:b6:5b:10:
e2:01:4d:3f:5a:8c:38:1a:83:62:cb:fe:cd:d6:e5:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:89:E7:DC:87:6F:A2:69:49:E1:04:78:5D:5E:DC:F5:BC:20:30
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13e0::/44
Signature Algorithm: sha256WithRSAEncryption
ba:61:24:31:20:3e:31:f7:b3:82:d4:ef:86:97:15:24:7e:b5:
89:0e:0a:2f:29:d6:54:db:58:c6:02:3e:c9:91:72:39:b8:e3:
5b:17:1f:41:82:8a:0c:07:7f:0a:de:c3:54:98:c2:75:1a:b0:
98:95:2b:0c:f1:c5:ee:49:cf:66:49:2b:7d:5a:6f:c4:0b:79:
4a:fd:53:b9:2d:6a:a5:5c:93:5e:73:53:e5:03:76:c7:a7:38:
0a:47:53:20:35:45:a9:f7:c6:b8:2c:de:97:8d:57:98:54:e0:
ad:a3:d0:77:91:7e:a4:08:15:8f:1d:03:cd:a2:a5:d6:a3:f4:
4e:65:6c:53:98:9e:40:fa:6c:49:c1:7a:7b:87:8e:ad:b3:a4:
a2:d8:80:6a:19:d3:20:f6:5b:f9:91:ec:3e:fa:3b:55:c3:b5:
bd:17:a5:46:6e:0d:28:9f:ea:76:68:43:5c:15:69:52:74:9d:
d8:9e:11:65:a8:00:94:da:ca:6a:c5:c3:b9:fa:45:4a:09:28:
55:8e:13:a8:3b:10:b1:11:9f:98:f0:3a:cf:18:80:24:af:2c:
f9:06:b0:7f:a5:5f:d3:9b:0d:b9:3c:ba:a4:6b:39:c7:cb:93:
7a:d3:23:e1:ee:8c:d3:cd:38:9a:a6:2c:48:e0:08:cf:ff:bf:
91:9a:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:18:42 2025 by rpki-client