Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204789.roa
File: AS204789.roa (raw, json)
Hash identifier: wBEXVml/f23WsZfUpsvrmovn8zUGtdtzO4FUqsUU47Q=
Subject key identifier: DE:F4:B2:1B:F4:84:9D:99:1C:85:B1:13:6A:21:E1:BA:E2:91:54:8C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1EA3C92B18BDED7465BD8769D62544226EBCC2AF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204789.roa
Signing time: Thu 03 Jul 2025 15:52:26 +0000
ROA not before: Thu 03 Jul 2025 15:47:26 +0000
ROA not after: Thu 02 Jul 2026 15:52:26 +0000
asID: 204789
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a001:a0b0::/44 maxlen: 48
2a06:a005:1db0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a3:c9:2b:18:bd:ed:74:65:bd:87:69:d6:25:44:22:6e:bc:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:26 2025 GMT
Not After : Jul 2 15:52:26 2026 GMT
Subject: CN=DEF4B21BF4849D991C85B1136A21E1BAE291548C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:ad:ce:99:36:5e:d8:12:41:ed:e4:eb:7b:
71:e6:76:90:db:33:2a:ac:80:9c:02:aa:bd:bc:9f:
6c:46:a2:b9:28:cf:61:48:27:c0:2c:e8:30:59:59:
06:ac:b9:9c:e1:75:64:bb:2b:0e:6d:c6:9c:27:93:
95:90:c9:d8:8a:0d:ef:7f:87:25:3b:ee:8b:4a:0a:
9f:1b:58:97:eb:92:64:4a:f8:24:3a:1e:9f:f2:cb:
98:90:08:17:fc:8c:18:bd:67:c8:7a:24:8e:20:bd:
54:d1:c1:31:48:b7:d9:b7:52:81:e5:38:11:f7:50:
04:cf:c6:3c:22:42:05:49:e1:86:d3:f7:81:0b:4b:
e6:6d:90:9d:dd:c7:e7:f5:54:e9:c8:45:70:db:49:
db:0a:de:33:93:07:f3:13:3b:29:d1:cf:f4:93:f7:
25:45:63:e4:0f:ea:d6:13:6d:5f:84:4c:63:61:96:
6f:a8:47:70:13:87:09:23:00:f3:79:a8:18:10:7f:
de:c3:c9:e5:78:0d:6a:66:01:96:e0:15:dd:d2:b4:
c5:21:76:89:ee:1a:ea:89:1d:4b:19:99:83:e0:16:
c4:e0:e4:0f:bc:02:a2:e3:cd:6e:ef:70:dc:0d:61:
84:0a:26:fa:ca:ac:12:c0:93:37:97:7a:d5:92:15:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:B2:1B:F4:84:9D:99:1C:85:B1:13:6A:21:E1:BA:E2:91:54:8C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:a001:a0b0::/44
2a06:a005:1db0::/44
Signature Algorithm: sha256WithRSAEncryption
66:f6:33:5a:d9:bd:93:64:7d:23:4e:c8:3c:0e:c7:91:18:e0:
f9:0c:bd:fb:01:e2:cc:37:a8:49:e4:90:e4:60:15:72:25:b2:
9d:17:01:eb:29:fc:09:98:c9:6d:a8:74:89:8d:6d:e7:da:d1:
cf:1c:f8:e1:53:83:44:d9:d4:37:61:60:8f:54:6d:26:b4:19:
e1:5a:fd:5f:1d:91:f0:19:9b:41:50:82:65:69:8b:95:09:58:
6a:b3:c2:a7:cd:f8:08:00:60:88:7a:48:06:7d:e1:67:3f:ea:
ce:4e:82:07:2e:73:a5:38:84:27:11:9c:0b:98:d9:37:e5:9f:
a2:84:ed:27:31:34:02:e6:27:f9:ba:72:16:fd:8e:e0:d6:4f:
e2:f1:04:45:38:40:d6:54:fb:ed:b5:1d:21:43:fc:2e:57:59:
6c:30:da:f6:87:69:a7:ef:67:8d:66:cc:7e:4b:b2:8c:b1:a4:
93:34:20:5f:0f:f3:b9:be:71:41:f7:41:72:2f:dd:ed:df:32:
ec:58:3f:7f:64:80:06:e8:04:5a:68:8a:f7:13:9c:93:df:d0:
df:b8:15:41:5d:91:ef:53:c6:53:c0:fd:8c:51:fc:d1:70:d7:
be:b4:12:19:fd:86:7c:a7:7e:39:64:f9:d3:ae:85:15:ad:37:
4f:00:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:24:17 2025 by rpki-client