Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204931.roa
File: AS204931.roa (raw, json)
Hash identifier: lgMG7ohqTXyM2xyuHGjfKeeBHkiAPeH9A8mQym7NUI8=
Subject key identifier: 03:83:C1:A6:9D:6A:54:A1:20:9D:55:DA:E1:CC:66:CE:EF:75:30:B6
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 509B5C8D1922C37BC96E2F90DCAB80E1B7872D3D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204931.roa
Signing time: Thu 03 Jul 2025 15:51:53 +0000
ROA not before: Thu 03 Jul 2025 15:46:53 +0000
ROA not after: Thu 02 Jul 2026 15:51:53 +0000
asID: 204931
IP address blocks: 2a06:a005:2bc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9b:5c:8d:19:22:c3:7b:c9:6e:2f:90:dc:ab:80:e1:b7:87:2d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:53 2025 GMT
Not After : Jul 2 15:51:53 2026 GMT
Subject: CN=0383C1A69D6A54A1209D55DAE1CC66CEEF7530B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:e8:84:c4:cd:17:b7:9c:87:bd:43:dd:ba:
ce:d0:f1:3e:01:2f:c8:1c:ef:a6:27:ec:ad:a8:fa:
1c:0e:c2:42:98:fe:11:c2:bf:ca:45:f5:21:51:df:
fc:25:90:c6:77:42:ea:d1:71:26:a9:92:c2:ae:27:
10:54:ca:44:9e:2c:43:e1:77:b1:1b:43:b2:0e:0a:
e4:ef:8b:03:e1:60:34:9c:a4:bf:94:51:69:6c:7a:
21:04:d4:4c:20:1e:d3:63:17:83:ed:30:80:74:9a:
8c:58:c7:3a:ca:3d:73:64:9f:4a:c2:72:72:f4:3f:
3f:1b:cc:43:67:42:76:03:9e:47:d1:ac:89:ef:5a:
a1:2f:50:5a:aa:57:97:0d:61:97:d5:88:25:0f:72:
9f:ab:fa:ad:1c:3d:37:97:f5:e6:7c:41:2c:04:75:
bf:32:28:19:15:d8:8f:71:7d:1d:3e:c9:f8:0b:81:
fc:fb:bb:c4:53:7c:10:d8:29:80:e4:1b:a9:13:0c:
38:4d:3a:2f:34:e0:d6:3d:c2:c1:ba:c7:d5:f5:92:
c6:76:3f:5a:38:11:e9:39:d0:f1:b8:db:c8:b6:12:
54:55:ec:77:de:be:81:c7:a9:ab:28:35:73:b8:12:
19:26:19:c2:d8:34:87:a9:b8:d0:8f:2b:fb:89:5b:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:83:C1:A6:9D:6A:54:A1:20:9D:55:DA:E1:CC:66:CE:EF:75:30:B6
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2bc0::/44
Signature Algorithm: sha256WithRSAEncryption
b6:1f:70:aa:ca:6f:11:03:1d:2f:25:80:94:7b:da:d6:15:06:
4e:23:d9:41:0b:9b:ba:83:b1:6d:46:0c:e4:08:b6:3d:e9:d1:
a7:bf:9f:cb:00:44:c5:5c:a7:66:30:25:31:d0:e0:b5:b4:a0:
9f:dd:27:fb:f9:dd:e7:cd:de:a0:c6:1b:6e:5b:ff:9d:3c:e0:
9e:2d:3c:eb:5f:db:ce:61:61:50:0c:b2:f0:3e:0d:f8:94:e5:
0c:d6:06:27:c5:19:b8:ec:22:a4:9c:d6:81:b0:7b:60:5d:75:
a9:95:a6:31:6c:0f:b5:b0:a4:b9:84:cb:42:fb:7c:ac:a1:eb:
d9:22:f3:e1:75:de:9e:bd:59:4f:7a:34:cd:73:74:7f:47:e6:
7f:67:aa:4d:7e:a2:e9:0f:f7:d1:04:6b:8c:af:e2:fb:c0:fa:
2d:e9:80:83:24:83:eb:fa:56:09:9f:b2:9d:6c:5e:a2:fa:b0:
17:22:08:c3:5f:c6:d4:9f:4f:8f:9b:30:85:d4:36:f0:b7:9d:
7b:ae:d5:79:2f:f1:ed:43:26:a3:d3:9c:ed:20:44:1f:32:0d:
24:35:65:01:31:ac:e0:0f:0f:1d:1e:32:5b:4d:7c:b0:92:a7:
36:0f:2a:97:ad:91:c5:fb:dd:cf:e4:12:66:85:b9:3e:9c:c2:
03:6b:0f:d7
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUUJtcjRkiw3vJbi+Q3KuA4beHLT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ2NTNaFw0yNjA3MDIxNTUxNTNaMDMxMTAvBgNV
BAMTKDAzODNDMUE2OUQ2QTU0QTEyMDlENTVEQUUxQ0M2NkNFRUY3NTMwQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjBOiExM0Xt5yHvUPdus7Q8T4B
L8gc76Yn7K2o+hwOwkKY/hHCv8pF9SFR3/wlkMZ3QurRcSapksKuJxBUykSeLEPh
d7EbQ7IOCuTviwPhYDScpL+UUWlseiEE1EwgHtNjF4PtMIB0moxYxzrKPXNkn0rC
cnL0Pz8bzENnQnYDnkfRrInvWqEvUFqqV5cNYZfViCUPcp+r+q0cPTeX9eZ8QSwE
db8yKBkV2I9xfR0+yfgLgfz7u8RTfBDYKYDkG6kTDDhNOi804NY9wsG6x9X1ksZ2
P1o4Eek50PG428i2ElRV7HfevoHHqasoNXO4EhkmGcLYNIepuNCPK/uJW2AlAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUA4PBpp1qVKEgnVXa4cxmzu91MLYwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjA0OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBSvAMA0GCSqGSIb3DQEBCwUAA4IBAQC2H3Cq
ym8RAx0vJYCUe9rWFQZOI9lBC5u6g7FtRgzkCLY96dGnv5/LAETFXKdmMCUx0OC1
tKCf3Sf7+d3nzd6gxhtuW/+dPOCeLTzrX9vOYWFQDLLwPg34lOUM1gYnxRm47CKk
nNaBsHtgXXWplaYxbA+1sKS5hMtC+3ysoevZIvPhdd6evVlPejTNc3R/R+Z/Z6pN
fqLpD/fRBGuMr+L7wPot6YCDJIPr+lYJn7KdbF6i+rAXIgjDX8bUn0+PmzCF1Dbw
t517rtV5L/HtQyaj05ztIEQfMg0kNWUBMazgDw8dHjJbTXywkqc2DyqXrZHF+93P
5BJmhbk+nMIDaw/X
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:15:14 2025 by rpki-client