Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: df1y22ofyy2jIyMd3QXIIIAyURmaLf7D5v38DSNLFVw=
Subject key identifier: 24:CC:D9:AC:B9:14:84:C5:AF:17:2C:46:3A:E3:69:1B:6D:DD:3A:6E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 076630C99FB67BA53A7252F5D2154AB80934FDD0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204844.roa
Signing time: Thu 03 Jul 2025 15:51:55 +0000
ROA not before: Thu 03 Jul 2025 15:46:55 +0000
ROA not after: Thu 02 Jul 2026 15:51:55 +0000
asID: 204844
IP address blocks: 2a06:a005:14f0::/44 maxlen: 48
2a06:a005:1b40::/44 maxlen: 48
2a06:a005:1be0::/44 maxlen: 48
2a06:a005:1d60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:66:30:c9:9f:b6:7b:a5:3a:72:52:f5:d2:15:4a:b8:09:34:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:55 2025 GMT
Not After : Jul 2 15:51:55 2026 GMT
Subject: CN=24CCD9ACB91484C5AF172C463AE3691B6DDD3A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:cf:68:a6:c5:f9:a3:f5:92:3e:8f:fd:6e:
71:43:a2:8f:63:ef:1a:20:79:cc:bf:a6:3e:39:44:
3a:38:32:cf:2f:3f:47:0a:b7:e9:a8:4a:93:87:1c:
14:60:27:ac:4a:99:e2:35:03:f1:5f:18:16:45:49:
94:3c:64:0a:82:18:87:37:4e:fe:fd:02:af:ff:cd:
e2:59:33:bc:35:90:77:21:f5:51:8d:60:54:98:ef:
ff:70:b7:7a:f2:a2:22:b7:40:58:3a:82:7a:78:b9:
fe:e7:03:1d:07:90:81:08:01:12:07:42:3b:f8:9a:
82:09:60:94:24:37:f6:61:8f:82:11:b2:ad:2f:c8:
a9:77:95:c7:ad:ae:ff:9d:22:60:24:e6:9d:b0:48:
62:1a:29:c9:48:35:bc:7c:fc:a9:28:58:24:c2:a6:
6a:10:fe:79:c8:95:62:4c:da:dd:db:a7:db:08:cc:
1c:84:57:c5:e6:e9:1a:72:60:43:65:5f:f8:e2:20:
8d:cf:6c:b1:68:5f:e5:18:37:87:df:c7:01:e3:16:
7f:9f:4a:10:bb:8c:53:59:cc:2b:9c:0d:ef:16:42:
30:4b:ec:3f:c3:c6:2c:7d:34:93:eb:6e:e4:b9:89:
5d:17:84:65:d3:2b:da:fb:a7:26:57:3a:d9:f8:df:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:D9:AC:B9:14:84:C5:AF:17:2C:46:3A:E3:69:1B:6D:DD:3A:6E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14f0::/44
2a06:a005:1b40::/44
2a06:a005:1be0::/44
2a06:a005:1d60::/44
Signature Algorithm: sha256WithRSAEncryption
6d:ea:32:68:72:c7:23:d2:9f:da:84:d1:62:30:71:83:d9:e4:
cc:fa:5f:ff:e5:af:f1:07:73:0c:a7:20:54:1f:94:4d:49:5a:
b1:b3:67:dd:2d:e3:0a:21:9d:85:28:d2:94:46:5b:3d:b3:f1:
84:d0:34:89:70:34:5c:c8:09:a5:0b:9d:f2:ff:2b:3d:3f:9b:
88:50:db:2c:d4:a2:c8:19:eb:43:4c:30:a7:19:db:06:94:f2:
bf:06:db:03:d6:6f:48:13:95:66:e5:ce:c5:d8:6e:b5:5a:de:
32:1a:8d:a8:48:97:c8:5e:06:c0:53:8c:41:63:a7:06:fd:67:
95:a7:c8:38:9b:b3:9a:07:51:f5:e1:5a:1e:8f:01:4f:0b:ab:
f1:56:de:95:5d:56:1d:1c:0b:d8:d3:68:70:bb:87:98:71:bd:
b7:90:f8:c4:af:de:d4:e4:85:13:26:63:6e:f9:b5:c2:64:99:
92:76:41:e3:f0:98:18:d4:d4:ad:df:10:6f:5f:0d:13:92:06:
cf:a2:44:75:ef:97:ad:33:eb:47:e3:e2:3b:35:1e:79:d5:4f:
25:27:2a:0e:d3:a6:7a:67:57:5b:4d:76:cc:0a:08:32:63:f7:
a7:f0:4f:cf:08:bd:da:17:db:41:97:63:06:b4:eb:2c:7e:f2:
ef:22:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:09 2025 by rpki-client