Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203873.roa
File: AS203873.roa (raw, json)
Hash identifier: ryYWJCWZduxc6wj/AQj0MiKxXhC8N0TfieI0ooZ+VrY=
Subject key identifier: 4A:CB:A9:B1:97:16:9D:98:92:6A:2F:56:64:06:33:0E:44:EE:9C:58
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 21DA94C23FE2C0CA1729DDE2D9EF3FD530A69F3F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203873.roa
Signing time: Thu 03 Jul 2025 15:51:48 +0000
ROA not before: Thu 03 Jul 2025 15:46:48 +0000
ROA not after: Thu 02 Jul 2026 15:51:48 +0000
asID: 203873
IP address blocks: 2a06:a005:1280::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:da:94:c2:3f:e2:c0:ca:17:29:dd:e2:d9:ef:3f:d5:30:a6:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:48 2025 GMT
Not After : Jul 2 15:51:48 2026 GMT
Subject: CN=4ACBA9B197169D98926A2F566406330E44EE9C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:6c:7a:00:f3:53:55:1a:60:e0:4f:d0:a9:
3d:e8:a9:f8:89:da:15:76:d3:a3:e3:c4:12:e4:47:
ec:02:c6:4b:1d:02:9b:44:2c:1e:5b:1d:97:4a:b3:
87:26:af:f0:0c:c9:3b:2e:ed:f0:f6:07:30:57:b3:
17:35:89:27:0a:e9:27:2c:63:b7:ed:25:83:b6:8e:
83:ba:5d:7b:6b:21:24:f8:e7:9e:68:29:ba:af:c0:
3e:9a:2a:95:d1:3b:b6:db:b0:77:a0:43:8c:19:98:
e4:64:20:30:31:70:c9:6e:0e:95:d3:2a:01:15:7c:
ee:9d:1a:df:6c:a1:ff:f6:f9:89:21:6d:75:c2:70:
d7:60:5e:22:b2:9a:96:c1:71:b8:74:ad:02:bf:93:
c6:77:81:0b:a1:a6:2a:2c:f0:46:bd:f1:ab:91:c0:
63:0d:93:f3:39:4f:54:14:a7:62:63:96:f0:42:8c:
bb:cb:d6:00:c9:da:0e:32:e7:a4:7c:58:2b:8a:f0:
3b:39:6e:16:68:57:2e:75:16:be:f0:b4:88:fa:a0:
90:7b:0c:f6:49:f3:7a:5e:f1:af:79:33:4c:11:da:
0b:e7:ed:e6:9d:59:9b:5e:80:a5:9a:7c:5d:88:ef:
fc:4c:fe:8d:84:8e:53:05:1e:c3:79:86:3b:e3:11:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CB:A9:B1:97:16:9D:98:92:6A:2F:56:64:06:33:0E:44:EE:9C:58
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203873.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1280::/44
Signature Algorithm: sha256WithRSAEncryption
a2:cb:fd:1f:0b:c1:6c:69:06:20:23:cf:1f:2c:09:3e:db:78:
12:7d:7a:c9:5d:08:54:94:bf:fb:91:6c:7b:aa:8b:75:e0:5d:
ef:68:0f:f1:4a:12:9e:c0:27:01:8d:87:0a:45:b4:4e:f1:49:
a3:a9:72:9c:c1:74:cd:ce:0a:6f:7e:48:93:fa:1e:54:57:ea:
3d:59:16:d6:37:24:6e:6c:e4:f7:9c:c5:b4:38:bf:6e:88:25:
d7:2e:21:d3:88:6d:ba:fc:07:14:a2:94:42:be:f1:1c:f7:e9:
15:19:38:22:78:d6:15:98:20:7a:a8:4a:b7:28:4e:91:a2:fc:
51:f4:d1:2a:eb:47:64:c1:c4:16:ec:4a:d1:3d:5d:7d:75:21:
b8:15:4c:f0:b9:4c:39:d6:30:b8:d3:33:2d:e4:98:42:0f:bf:
fc:1b:1f:99:f0:13:d1:cc:8c:9c:8e:9f:10:85:e1:c6:40:af:
2f:2b:63:d3:49:4f:cd:5a:29:9f:e4:55:a2:58:7a:ba:22:9b:
cd:4f:1c:72:b8:1c:04:b7:af:bd:5b:b4:9e:69:88:22:13:30:
f6:cd:16:fe:78:8f:62:a9:3c:df:b8:ca:b8:d6:12:aa:fb:9f:
8b:6e:d8:c6:c1:05:81:10:1f:fd:81:9f:30:a2:0b:9f:37:54:
0e:c2:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:55 2025 by rpki-client