Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205663.roa
File: AS205663.roa (raw, json)
Hash identifier: AajOaPnREZM3UGt9VL6TDOiZ1iCKbtf5nx1Kknd/Wwg=
Subject key identifier: 61:E5:D8:3A:F1:95:B5:E8:98:22:AB:AD:51:CE:10:53:9D:6F:89:BA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 625A311A2E1F72EC1C8E78A73EDEE5AA875249A1
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205663.roa
Signing time: Thu 03 Jul 2025 15:51:36 +0000
ROA not before: Thu 03 Jul 2025 15:46:36 +0000
ROA not after: Thu 02 Jul 2026 15:51:36 +0000
asID: 205663
IP address blocks: 2a09:54c1:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5a:31:1a:2e:1f:72:ec:1c:8e:78:a7:3e:de:e5:aa:87:52:49:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:36 2025 GMT
Not After : Jul 2 15:51:36 2026 GMT
Subject: CN=61E5D83AF195B5E89822ABAD51CE10539D6F89BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:33:e4:42:65:0c:39:b6:1a:43:13:92:e2:
99:a0:9b:b6:e7:b2:51:64:3f:34:fc:5f:79:35:02:
04:25:31:ce:e1:16:cb:72:2e:c1:58:17:5f:bd:9a:
3c:f2:ca:13:bb:e8:14:1f:9a:71:e1:b1:2b:ee:ff:
e6:4e:ed:08:89:8d:98:88:44:0d:0b:84:d8:0d:13:
eb:d6:41:ba:21:87:0b:1f:aa:37:c2:be:99:24:1d:
d9:61:6a:81:71:2b:5e:b9:f7:31:e4:00:db:23:3c:
cd:b7:a6:2c:c5:71:6c:f7:00:91:6f:bb:57:bf:a4:
9b:8c:58:6d:f7:9d:6d:2f:98:ed:ae:e0:e8:9d:a2:
d6:05:ca:84:24:f8:32:fb:a8:f4:5b:bc:e5:f4:b9:
b6:6b:c7:a3:84:92:6e:aa:5f:21:77:a3:21:b7:76:
4c:ea:f8:4f:e3:98:32:24:17:e7:4e:5a:4f:b3:40:
e4:e8:d4:e8:58:4f:00:82:ca:30:49:30:04:f4:b8:
01:76:48:c0:8b:e3:da:25:5b:2c:f4:d8:3e:8d:dd:
f3:34:b3:45:30:af:8a:00:66:1d:8b:56:71:cc:96:
91:b4:dd:2e:1a:be:98:aa:78:ef:7c:c6:aa:6a:27:
5a:b2:45:7e:a0:c8:38:a9:d9:45:fa:aa:79:b7:b7:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E5:D8:3A:F1:95:B5:E8:98:22:AB:AD:51:CE:10:53:9D:6F:89:BA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c1:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
a7:c8:aa:c3:56:23:2f:d3:d2:ec:d7:3a:60:69:dd:cb:e9:a0:
dd:06:f1:33:b8:0c:f0:70:2d:e5:13:84:7a:73:79:f4:95:b7:
cf:3e:b2:61:11:b5:bf:0c:90:63:61:44:e8:7c:5d:8e:00:3d:
d0:01:2c:2a:12:d6:bd:92:61:16:33:00:56:21:bd:6d:18:c7:
e2:d3:ae:09:94:59:3d:d6:10:fe:e7:b3:2f:91:50:35:63:39:
b7:2c:b5:c3:3b:45:2d:d9:04:64:1e:27:a1:5f:1b:76:a5:01:
53:49:6c:81:d0:e3:43:1a:f1:f9:7e:60:0c:85:5c:9c:06:d2:
d8:73:88:fb:ee:5e:50:38:03:38:c7:d9:66:07:00:7f:55:55:
96:b3:53:a6:8e:94:b2:63:2e:23:46:d5:5e:d9:f8:e1:eb:2b:
b9:ce:2a:9a:f9:43:e9:7d:7c:49:00:25:21:5e:ce:18:7a:3f:
b3:b1:6f:bc:61:54:63:bf:43:cb:1f:0b:d6:61:5e:93:d0:f2:
3a:a9:32:d6:b0:da:11:92:55:c3:5f:f9:11:f2:d3:7a:11:13:
70:43:bf:b4:bf:60:e1:9e:4f:d6:bd:b6:3a:39:04:c2:f6:79:
92:5c:c5:f3:07:ac:75:1b:8c:c1:67:51:8a:05:ba:21:bc:3b:
1e:09:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:00:43 2025 by rpki-client