Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203686.roa
File: AS203686.roa (raw, json)
Hash identifier: EZjhF4mZtDAm0dt3qI4qTor3GVb6l8mWYZWB2RYGaEM=
Subject key identifier: 2F:3A:AD:1B:B9:7E:B7:1D:2C:9B:E6:A7:56:5C:CD:E7:A4:B8:64:CF
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 79C9EC7228FC3A1AF101A9469779427E14A44CDF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203686.roa
Signing time: Thu 03 Jul 2025 15:52:39 +0000
ROA not before: Thu 03 Jul 2025 15:47:39 +0000
ROA not after: Thu 02 Jul 2026 15:52:39 +0000
asID: 203686
IP address blocks: 2a06:9f44:f120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c9:ec:72:28:fc:3a:1a:f1:01:a9:46:97:79:42:7e:14:a4:4c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:39 2025 GMT
Not After : Jul 2 15:52:39 2026 GMT
Subject: CN=2F3AAD1BB97EB71D2C9BE6A7565CCDE7A4B864CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:1f:b2:ee:80:92:a2:19:1b:3c:3a:f0:79:
8a:4f:c5:fb:52:fb:6e:45:3a:42:ac:f2:ea:02:ff:
35:55:55:d3:c7:dc:61:fb:43:46:29:c7:13:ca:fb:
68:bd:78:3e:b2:ee:67:de:46:e3:bf:86:5a:3d:72:
75:d4:eb:8a:19:ab:0c:a7:8e:de:61:33:6e:2d:da:
9b:e0:62:41:e5:a5:36:25:28:51:bd:79:0c:69:a7:
d7:a5:a6:dc:44:50:8c:64:10:2e:6f:c8:bf:48:97:
2f:0d:64:38:5a:ed:d2:fb:db:10:78:44:7e:87:a5:
5f:49:a5:6e:de:e9:cb:e3:b7:13:59:7a:8f:67:ac:
f7:29:e1:ae:3e:4f:5a:aa:0f:e9:1f:00:b5:0e:69:
9e:5b:bb:ba:05:68:79:92:ba:9b:19:4e:b8:a6:8c:
0b:02:75:de:17:69:e3:a2:9d:6b:64:a8:8f:ad:04:
8d:28:c3:af:c8:aa:a3:34:15:0b:1b:ed:ad:2c:92:
59:58:c0:b9:30:58:31:b2:c4:67:7a:62:d5:1b:47:
75:0c:43:4e:ed:c0:11:d6:de:b1:ef:7d:d2:50:7b:
e4:24:b8:b7:be:0e:5b:19:48:ea:4c:2a:79:eb:be:
f7:2b:36:a5:4a:08:2f:5d:7c:4e:bd:0f:05:d0:c4:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3A:AD:1B:B9:7E:B7:1D:2C:9B:E6:A7:56:5C:CD:E7:A4:B8:64:CF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203686.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44:f120::/44
Signature Algorithm: sha256WithRSAEncryption
10:c9:cb:ec:c3:b4:f8:06:ea:49:0c:d6:10:1b:7c:9d:e3:33:
8f:be:9c:96:06:8e:68:2f:d9:cc:c8:33:1b:57:22:0d:23:65:
6c:2b:84:d0:37:89:62:c0:47:c9:d7:eb:6d:6d:23:a7:d9:4a:
44:f3:ea:5e:07:86:34:c7:ca:cd:18:b4:e7:23:2a:86:2e:bc:
97:fa:e7:7e:98:46:7a:11:5f:b8:a3:b8:76:80:9f:2b:1b:ae:
b0:9b:5f:41:63:68:80:fd:ff:6f:78:2e:b3:12:a9:1b:84:a2:
f9:6c:31:9a:6d:e0:d0:c1:1a:4e:f4:9c:fa:73:b2:1c:d7:6b:
1e:2b:30:18:f2:f4:bf:ff:bd:ad:54:1e:32:db:1e:f0:3b:4a:
15:15:4a:68:5b:62:d3:58:4d:ca:0a:e9:f2:06:d9:cc:60:bd:
84:43:52:2e:77:42:36:4c:ba:2c:fe:8b:5e:72:1d:c4:fc:e9:
ee:01:a9:82:1f:85:c1:b0:03:a9:2a:d6:88:74:3e:ef:27:08:
7e:8c:e5:5f:3d:ef:a9:b0:5a:35:46:7c:92:58:1e:00:be:73:
19:a4:76:a3:69:2c:2e:7f:91:19:5d:bb:fb:ce:de:1e:43:7c:
9c:cd:62:f0:cd:0a:3b:94:a5:7c:3a:24:5b:df:1d:1c:06:ac:
fa:2a:33:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:56 2025 by rpki-client