Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205212.roa
File: AS205212.roa (raw, json)
Hash identifier: AldA4VcVfw2hQrSpp+ws4ZL+cDupSi+ppPduDFzYyB8=
Subject key identifier: 20:CB:83:06:76:20:46:13:93:CB:D6:3C:C9:2D:D2:39:FF:25:3D:E4
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0C7BD3EB149C559DBC4199FEDBBFE11446AF7404
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205212.roa
Signing time: Thu 04 Jun 2026 15:58:53 +0000
ROA not before: Thu 04 Jun 2026 15:53:53 +0000
ROA not after: Thu 03 Jun 2027 15:58:53 +0000
asID: 205212
IP address blocks: 2a06:a005:1f70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:7b:d3:eb:14:9c:55:9d:bc:41:99:fe:db:bf:e1:14:46:af:74:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:53 2026 GMT
Not After : Jun 3 15:58:53 2027 GMT
Subject: CN=20CB83067620461393CBD63CC92DD239FF253DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:d0:af:fc:84:2f:7a:ff:30:f5:74:89:28:
c0:24:f8:6a:7f:fa:c5:f9:4c:60:82:c9:56:a3:36:
08:bd:a6:62:47:f9:e3:96:c0:ca:5f:64:f3:25:fc:
a1:aa:b6:df:a7:95:ed:c2:8d:e4:99:d2:cc:dc:4f:
77:b3:e8:bd:bd:44:a6:95:28:13:31:25:9e:36:49:
c7:f2:e0:95:56:b1:32:cc:67:4a:e2:6d:a9:c0:6d:
98:eb:d8:d5:9f:c0:01:9a:8d:24:42:f4:00:99:82:
c8:07:fd:38:e7:7e:cf:6d:a6:87:1c:2e:00:a8:ad:
77:fb:7e:03:08:f1:88:d0:84:02:7b:64:f3:a3:12:
ac:81:cb:ac:80:e4:44:0c:5d:e5:90:9f:c4:18:1b:
39:1d:83:b1:24:79:dc:33:97:15:d1:d3:da:6b:f6:
15:37:06:74:5a:b6:a5:8c:85:98:07:15:d0:e5:64:
9b:77:95:0c:62:7f:b5:03:04:85:ac:b5:d7:da:85:
1f:c3:f9:06:50:64:01:42:84:72:3a:b3:36:21:11:
a4:bf:6f:1f:96:0e:34:7f:ca:9f:de:a1:45:10:ff:
80:5d:bb:22:ed:1b:f8:4a:47:12:5b:e0:57:57:c6:
9d:36:21:1f:2e:91:7e:4b:54:fe:1c:93:f2:ce:79:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:83:06:76:20:46:13:93:CB:D6:3C:C9:2D:D2:39:FF:25:3D:E4
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1f70::/44
Signature Algorithm: sha256WithRSAEncryption
58:de:c7:47:b4:6c:39:d5:5c:ab:79:da:cb:e1:4f:e4:c3:25:
e9:70:b6:6d:26:e7:00:3f:a5:4e:16:4a:0d:61:b1:f5:3f:5b:
fa:7f:6e:e0:7a:33:55:e0:95:f8:f6:4b:d2:bf:4f:86:90:52:
af:8d:9d:77:1c:87:68:1c:cf:f9:fb:bb:2a:4a:92:db:d4:b2:
53:df:04:66:76:ab:a2:04:78:eb:54:ed:51:de:3b:b8:58:02:
01:7c:c8:79:36:2f:4e:7b:a4:8f:5f:b4:19:d1:89:86:8f:68:
2c:5b:7c:07:7e:a9:93:34:7f:3d:8e:69:4a:5d:fc:f0:08:b1:
64:bf:75:93:b0:85:98:6b:58:6e:30:00:02:1e:11:58:15:90:
fc:1d:c5:2f:82:02:7e:59:fa:02:e9:7a:5c:6c:77:54:c6:01:
d5:7c:a6:9e:d2:a7:84:c4:f3:70:d1:c4:31:4f:a8:2c:ad:9b:
73:f7:7e:84:58:a0:31:69:66:6e:f8:b4:a8:e0:9f:ea:aa:b0:
c0:69:f4:63:4f:87:0b:9d:91:d9:bd:0e:38:06:99:fc:9c:61:
39:09:96:b8:35:9b:c0:f7:53:33:f8:e8:89:01:6d:7e:5d:b8:
7e:98:1d:bc:34:4e:d2:82:b9:07:5d:10:9b:82:fb:9a:8c:ec:
ad:03:a8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:28 2026 by rpki-client