Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205398.roa
File: AS205398.roa (raw, json)
Hash identifier: woalSsrzV0vwYL3Ht4S1AwBfh188oL1REAP5IxCxCpk=
Subject key identifier: 8A:ED:16:B7:4E:35:4B:BE:FE:27:AD:F4:29:E7:B7:34:00:7C:BA:BC
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5CDC38BF514484D1F1C351BEA1B742796E1AA56D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205398.roa
Signing time: Thu 03 Jul 2025 15:52:25 +0000
ROA not before: Thu 03 Jul 2025 15:47:25 +0000
ROA not after: Thu 02 Jul 2026 15:52:25 +0000
asID: 205398
IP address blocks: 2a06:a005:2db::/48 maxlen: 48
2a06:a005:b6c::/48 maxlen: 48
2a06:a005:b6d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:dc:38:bf:51:44:84:d1:f1:c3:51:be:a1:b7:42:79:6e:1a:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:25 2025 GMT
Not After : Jul 2 15:52:25 2026 GMT
Subject: CN=8AED16B74E354BBEFE27ADF429E7B734007CBABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6c:ae:17:03:8a:f7:3c:9e:25:cb:fe:0f:12:
2a:bd:54:27:c4:6e:16:32:de:a7:89:79:a1:3f:11:
b5:0a:59:b7:f6:66:51:be:87:c0:be:59:e0:c1:2d:
47:3a:0d:28:84:51:3b:35:0f:a2:19:6b:15:62:24:
44:13:cc:51:cc:08:d8:ba:d5:ea:d7:3e:be:4e:27:
08:8f:2c:4f:bd:3f:81:7f:d0:c3:9c:f1:e9:a2:ac:
e4:21:bd:a4:94:bf:b1:5d:38:19:27:de:e2:22:c4:
68:6e:95:b4:b7:95:f7:d4:d5:74:e1:51:fe:a1:e8:
f2:97:3e:1a:82:cf:23:a3:a2:a0:b4:6a:5e:34:4d:
df:66:d5:42:31:c4:ea:97:8b:d4:ad:27:78:f6:a8:
c5:63:32:18:b6:30:04:4f:31:d5:d0:14:69:0e:39:
3b:f7:b0:16:10:22:23:0d:c1:e0:32:d9:7d:f3:3c:
99:bb:8a:1a:46:0b:57:17:c8:33:17:aa:23:26:2d:
c2:7c:7a:0e:ba:18:91:03:ae:ee:6f:6b:46:30:ac:
9b:b7:a7:6e:84:26:d1:88:a4:88:db:02:22:43:31:
1a:a0:28:f2:8e:fa:fc:d3:f3:89:49:25:a9:70:45:
cd:05:2d:be:0b:dd:e1:2b:35:0e:89:de:fe:bc:3c:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:16:B7:4E:35:4B:BE:FE:27:AD:F4:29:E7:B7:34:00:7C:BA:BC
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2db::/48
2a06:a005:b6c::/47
Signature Algorithm: sha256WithRSAEncryption
c3:0b:f5:a5:6a:47:54:06:8c:df:b9:3f:c6:8c:3c:11:ce:c8:
ae:3a:9d:53:2a:a5:7b:78:18:7b:1f:51:1c:90:b9:ba:c5:88:
95:35:26:10:f5:cd:65:5a:1b:a9:c2:99:77:3f:7b:a9:dd:dc:
70:ff:61:34:41:0e:f6:3b:ee:1a:71:d1:ed:35:d2:63:82:20:
11:3b:b7:6a:cd:4f:41:ac:60:34:c2:ed:a4:79:36:07:64:f5:
fe:0d:56:01:83:5f:ff:3e:3c:fc:39:e6:f8:f2:ea:7f:6f:eb:
1e:5c:7b:3d:2d:3b:4a:a4:19:ac:d7:67:f6:23:2d:07:b3:6c:
2f:e4:1f:85:7a:e2:16:81:a5:81:90:03:4d:f4:13:a6:a8:8b:
84:cf:71:8e:e9:ee:53:59:77:cc:50:54:f1:05:b4:0a:b2:8d:
d0:1a:f9:86:2b:44:47:bf:a5:98:82:77:53:98:59:93:84:86:
69:00:ed:b8:4c:87:cd:fe:ca:ed:e7:cd:65:93:41:d3:27:3d:
9f:a0:e8:5c:30:50:6b:01:87:e5:d3:ae:87:f3:c0:0a:64:2e:
08:21:78:a0:66:9a:0c:35:ac:97:d9:57:1b:20:e2:92:a5:d1:
f4:d7:ac:21:68:75:e8:99:df:84:21:19:11:24:04:1a:c6:6d:
2d:57:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:56 2025 by rpki-client