Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204406.roa
File: AS204406.roa (raw, json)
Hash identifier: XHV5NDDLDmC0+ffIB7560i4A8zKeuqH23416t+5LzvQ=
Subject key identifier: DA:C3:B4:13:D5:3A:8F:D6:02:94:8E:43:C8:2F:F1:43:15:B9:D3:B2
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7C866BAE5CC4BDED4E2236507CE02C31F852A6BE
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204406.roa
Signing time: Thu 03 Jul 2025 15:52:34 +0000
ROA not before: Thu 03 Jul 2025 15:47:34 +0000
ROA not after: Thu 02 Jul 2026 15:52:34 +0000
asID: 204406
IP address blocks: 2a06:a005:1660::/44 maxlen: 48
2a06:a005:1c90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:86:6b:ae:5c:c4:bd:ed:4e:22:36:50:7c:e0:2c:31:f8:52:a6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:34 2025 GMT
Not After : Jul 2 15:52:34 2026 GMT
Subject: CN=DAC3B413D53A8FD602948E43C82FF14315B9D3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:d4:68:28:26:a4:38:79:5f:f2:c5:54:e7:
23:cc:32:b1:07:9f:f0:02:70:d5:f2:21:40:9a:72:
87:48:f1:d8:30:75:b7:d8:d3:b7:2e:6d:ed:d2:6d:
06:61:79:6a:1c:65:0a:d8:6b:6f:a5:6d:fc:63:3c:
01:58:ee:07:c5:20:e6:7b:fa:e9:68:5d:1e:12:5f:
ef:da:28:7d:cb:40:cb:c9:5c:c8:e4:c4:5a:1b:f0:
f8:27:f8:16:53:ce:a2:fd:b0:54:9b:d2:5b:5b:73:
e3:67:fe:62:86:2f:f0:d2:77:5b:38:0d:49:00:30:
49:3b:42:2e:a0:e3:a0:d8:f7:0b:41:e4:dd:fc:d6:
d3:c0:4f:68:73:4c:86:1b:94:7d:08:1b:c9:a8:df:
7b:96:ab:d5:a4:5e:42:84:86:6e:0a:8a:9c:a8:2c:
0f:da:59:be:00:7f:11:e1:fd:ae:b5:30:9e:60:f3:
52:04:b5:d0:7b:bf:33:a7:7e:0f:c3:cc:84:02:a4:
10:86:b9:08:a1:5e:e0:fd:bb:e3:e4:80:e5:f4:ab:
74:19:90:22:27:d4:3a:f6:09:0a:17:60:e9:16:5f:
63:33:66:53:64:d9:73:a4:f0:1b:f6:a5:80:aa:20:
bd:42:ec:8c:60:36:3b:5d:1b:2e:b7:58:90:d5:3a:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:B4:13:D5:3A:8F:D6:02:94:8E:43:C8:2F:F1:43:15:B9:D3:B2
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1660::/44
2a06:a005:1c90::/44
Signature Algorithm: sha256WithRSAEncryption
96:3c:14:4b:e8:8d:ff:f9:33:b1:1d:ba:c9:42:f4:5d:df:ff:
1c:08:d3:75:d5:71:2a:d7:ab:43:45:1b:ea:84:f7:47:bd:4a:
db:da:2e:73:2c:22:ea:de:78:f9:bb:b0:9b:7d:46:ac:b4:68:
37:66:9b:86:ac:17:1e:ef:96:c9:a9:60:f0:4d:7b:32:96:d1:
45:78:c6:03:ae:b4:9e:83:f6:7a:20:12:3e:91:7d:03:2b:83:
f2:68:43:2f:52:e2:6e:b7:d3:12:bb:ea:7b:3b:af:28:32:c4:
bb:1b:be:d6:c9:30:40:5f:1c:f9:90:a0:3f:9f:8a:ab:d6:fd:
8f:09:84:12:02:d1:bb:ce:91:29:76:c7:6a:da:a8:32:8a:38:
5c:21:1c:de:6e:c7:32:28:94:8f:9d:0c:a8:cb:7a:f8:ab:8c:
8a:1d:7d:c8:7f:f3:33:14:85:2e:3d:d7:93:b5:4f:5d:22:0d:
57:44:37:52:87:bb:34:49:cf:58:5a:4b:4b:8d:15:6e:75:eb:
92:63:cb:89:c5:2e:25:5e:f0:00:ec:b6:2e:93:ca:a8:1d:bc:
05:26:32:60:5f:e8:dc:03:e3:21:1b:bc:3f:90:53:09:57:a1:
be:59:58:11:87:8b:b8:de:87:ed:f4:d8:62:f9:47:f8:f7:28:
27:d2:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:27:42 2025 by rpki-client