Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204789.roa
File: AS204789.roa (raw, json)
Hash identifier: Af8cHty0DnD2eVZTSZz96JFJ3dVYWVSAB3SyiPdhE9s=
Subject key identifier: DC:C2:45:46:BD:6E:3E:C9:43:D9:20:3E:42:71:29:E4:08:66:7A:70
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 359CA213E7FB61CF027F99DB05EA866CE6484252
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204789.roa
Signing time: Thu 04 Jun 2026 15:58:50 +0000
ROA not before: Thu 04 Jun 2026 15:53:50 +0000
ROA not after: Thu 03 Jun 2027 15:58:50 +0000
asID: 204789
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a001:a0b0::/44 maxlen: 48
2a06:a005:1db0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9c:a2:13:e7:fb:61:cf:02:7f:99:db:05:ea:86:6c:e6:48:42:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:50 2026 GMT
Not After : Jun 3 15:58:50 2027 GMT
Subject: CN=DCC24546BD6E3EC943D9203E427129E408667A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:c9:be:57:3e:74:b7:96:ad:c8:45:78:ab:
16:3a:6f:55:fc:fb:5e:62:5b:83:50:2b:cd:e3:69:
e8:db:92:4b:23:d6:94:ab:99:62:76:15:13:42:79:
a3:42:1d:d1:1e:12:25:90:d2:40:fe:f1:53:0d:bc:
9e:24:cf:2e:56:07:e0:5d:14:bb:ef:74:c2:2d:b1:
c4:f7:19:f7:e1:88:1a:f1:77:43:08:24:57:33:de:
61:d6:16:8b:ed:ce:16:2f:03:b9:10:83:11:d2:37:
0d:43:b7:fb:a7:48:ca:5c:bf:70:79:45:57:bf:73:
9a:e1:49:32:5e:49:dc:d5:ba:2f:4e:15:dc:52:58:
94:bc:7f:7a:3e:41:11:df:11:f0:9e:e3:d8:41:23:
18:4c:cd:3f:02:2a:d2:34:f3:ef:72:2f:55:11:d9:
d9:17:e1:51:2a:a4:cf:9b:7c:e6:6f:7f:50:88:2d:
76:47:5b:84:6d:71:54:55:52:17:55:ae:2f:fc:fa:
e1:b9:cc:79:7b:4b:bb:f3:68:bc:3e:bd:a5:40:72:
05:05:cc:03:0b:b2:de:50:38:6e:86:a2:25:cc:de:
82:29:4f:45:0b:ec:31:5a:84:9b:2b:69:e8:d1:80:
8b:34:94:c8:0e:17:cc:7f:85:6a:f8:3b:8d:8e:53:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C2:45:46:BD:6E:3E:C9:43:D9:20:3E:42:71:29:E4:08:66:7A:70
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:a001:a0b0::/44
2a06:a005:1db0::/44
Signature Algorithm: sha256WithRSAEncryption
53:03:ae:20:e5:b9:62:a9:da:df:d9:9f:db:6b:77:3f:49:41:
e7:ea:69:14:84:27:95:56:b0:4e:72:6d:28:dd:a7:b5:d4:d7:
71:dc:00:b4:25:37:fc:ae:a5:9b:53:d1:a4:50:f0:16:b3:ba:
33:f1:df:97:16:44:dd:48:9c:6a:e9:c8:8d:83:b6:1e:aa:19:
30:e7:24:88:b4:a5:59:a9:9b:ac:6e:73:a0:3f:13:e1:b5:de:
fe:cd:d7:b0:ae:15:ac:9c:a0:26:4d:71:f2:3f:b0:63:50:1a:
76:55:f2:04:6b:38:a0:3e:c1:d3:22:49:3e:f1:e6:92:dd:80:
54:ee:b4:57:52:14:9d:20:90:19:04:2f:a1:5e:c6:4f:a7:b2:
0f:f3:e9:d5:cd:0e:73:e3:75:63:5b:87:25:78:ee:07:b7:ed:
17:84:1e:a8:63:21:bc:44:c2:c5:16:78:1c:5d:61:ce:e1:60:
ea:c3:e7:aa:69:a3:20:e1:bd:38:33:f8:ab:b1:45:3d:95:47:
cb:e2:82:0a:7a:1e:da:ee:a0:bd:17:f6:88:fa:48:ab:4e:94:
09:f3:42:cb:c4:4f:ae:22:db:70:f9:ee:44:09:cb:c3:29:e5:
b3:1c:4b:7e:f7:f5:56:a1:f5:8c:3b:2f:79:22:0e:a1:8c:d9:
4d:f2:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:36 2026 by rpki-client