Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204374.roa
File: AS204374.roa (raw, json)
Hash identifier: EkB2xcCXdgDUHOFfdBYe/WFfUtgnULEqw2hboocODPo=
Subject key identifier: 2C:49:07:AD:3C:6C:2A:2C:1F:0F:50:C2:1D:02:BF:0C:01:C0:35:AA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 50633B8C393A4B7E3A5531BD1A4C9F94EE1D3EB1
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204374.roa
Signing time: Thu 03 Jul 2025 15:52:05 +0000
ROA not before: Thu 03 Jul 2025 15:47:05 +0000
ROA not after: Thu 02 Jul 2026 15:52:05 +0000
asID: 204374
IP address blocks: 2a06:a005:85f::/48 maxlen: 48
2a06:a005:1090::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:63:3b:8c:39:3a:4b:7e:3a:55:31:bd:1a:4c:9f:94:ee:1d:3e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:05 2025 GMT
Not After : Jul 2 15:52:05 2026 GMT
Subject: CN=2C4907AD3C6C2A2C1F0F50C21D02BF0C01C035AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d1:05:21:f1:6a:6e:ab:ab:6f:ef:90:75:b8:
20:8f:9b:39:11:0b:0e:82:48:ad:8d:62:f8:9d:7c:
2a:33:0e:36:af:05:a3:4e:d3:dd:5e:76:a2:ec:c1:
ae:b6:9d:5d:a9:40:7a:e6:3b:7c:9f:42:35:09:0c:
7a:37:f8:3c:f3:ef:5c:2c:8b:c9:f8:fd:40:08:14:
58:88:80:08:96:1a:3e:dd:c6:e2:22:08:4d:a8:78:
ac:cf:4b:56:6e:2e:c4:9b:34:64:bd:f9:75:0f:65:
89:3a:73:c7:4c:2d:b9:81:6e:9a:f7:86:90:83:a9:
52:4c:d1:d0:eb:ba:0f:0a:92:7c:1f:05:41:f7:1f:
3d:a2:d9:c4:3f:24:7f:85:2b:70:92:0c:d3:1e:07:
8d:d5:b7:00:51:fe:e4:d4:5c:de:d1:30:7a:e3:bf:
24:7b:82:32:de:e9:b3:3e:73:d2:54:4c:4b:85:05:
82:82:5d:8b:76:4b:94:44:a0:41:ec:f3:52:44:77:
50:c1:c2:d9:f1:c4:69:9f:a0:f7:94:04:41:b5:b9:
68:10:5d:27:2b:d2:ca:8e:59:98:ba:ff:c4:5e:af:
aa:2d:1c:9b:96:7a:c2:9b:6e:fb:fc:af:ef:de:f3:
a2:08:d9:6c:94:cd:20:bd:73:a5:c9:17:3b:c4:df:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:07:AD:3C:6C:2A:2C:1F:0F:50:C2:1D:02:BF:0C:01:C0:35:AA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:85f::/48
2a06:a005:1090::/44
Signature Algorithm: sha256WithRSAEncryption
37:0d:e6:17:82:22:f1:eb:ca:c6:39:f3:2e:33:5c:52:96:7f:
a4:5d:4f:24:96:7d:3a:94:40:60:da:2f:a9:3e:c2:26:89:9b:
91:36:46:d4:a3:0d:3e:5c:83:85:58:ee:55:b1:9c:46:37:c5:
f5:10:3c:72:44:4d:94:4b:f8:3d:c8:13:a8:17:c6:06:a9:54:
65:30:ea:89:f4:67:33:c7:c9:0d:e8:e4:35:a2:f0:36:33:0e:
73:f5:f7:c6:9e:63:3c:3d:8f:b6:95:03:91:b0:00:26:ec:3c:
2f:f2:e7:46:0c:82:65:ab:cb:5b:f6:a9:da:6a:4f:42:08:77:
ae:bc:81:43:5b:36:3d:95:a3:6c:a2:58:53:46:ea:d1:43:7f:
15:6b:54:ec:8b:e6:6a:e0:9c:df:b0:41:47:aa:5e:f3:7e:8d:
68:99:b9:3e:5b:07:a6:13:8c:1f:22:cd:2c:db:3c:24:9f:c0:
25:c5:eb:06:1b:1e:79:35:08:29:52:99:00:cf:3b:83:de:e2:
b6:fd:c8:3d:e0:34:be:50:47:2c:ab:6e:b3:f0:f0:b3:f8:d6:
78:92:ab:95:0c:00:00:24:82:d6:09:83:5c:51:60:b6:c7:9f:
13:b2:c4:f1:51:77:3c:d8:55:88:bc:2e:57:b6:2a:7f:a2:b5:
a5:08:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:15:13 2025 by rpki-client