Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206290.roa
File: AS206290.roa (raw, json)
Hash identifier: z3TacpvUMJJFpub+2qEIwhgyPTRwxt+wmatBrk3thM0=
Subject key identifier: 43:14:0A:8A:10:4D:62:B3:A0:0A:A3:29:E9:8E:2F:6D:15:D2:80:A6
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5F652A1BB5127F456C5B98F9659D66A762B7FDBC
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206290.roa
Signing time: Thu 03 Jul 2025 15:51:36 +0000
ROA not before: Thu 03 Jul 2025 15:46:36 +0000
ROA not after: Thu 02 Jul 2026 15:51:36 +0000
asID: 206290
IP address blocks: 2a06:a005:1276::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:65:2a:1b:b5:12:7f:45:6c:5b:98:f9:65:9d:66:a7:62:b7:fd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:36 2025 GMT
Not After : Jul 2 15:51:36 2026 GMT
Subject: CN=43140A8A104D62B3A00AA329E98E2F6D15D280A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:d1:c0:23:d2:38:0f:31:c4:46:67:64:50:
c7:31:6b:8e:19:54:b9:b2:1f:d2:82:b7:ac:56:03:
82:cd:0b:e0:16:c0:c9:f8:84:5e:88:c0:0c:4c:1b:
0e:8f:f1:c2:8d:a2:d9:cd:a6:d4:e1:70:a0:ae:cc:
75:52:c3:34:cb:cb:d1:a8:62:a6:d2:c7:83:1b:80:
da:b7:48:b1:ea:c6:ee:bc:b8:71:d0:a2:8a:a1:fa:
29:f4:f8:29:85:69:b2:8d:49:c8:1a:d4:27:f4:81:
0f:b2:7b:1e:7c:c4:eb:87:6b:04:dd:aa:8f:f5:03:
ae:1e:a5:8b:bb:e9:13:a7:ef:4d:5d:4d:27:b6:18:
70:04:30:2d:8b:1c:1f:d8:3c:11:49:0e:c2:60:79:
aa:0d:c1:d2:89:c1:e6:0c:16:33:7d:75:2a:19:72:
92:6a:8c:fe:36:1f:36:54:01:8e:a0:44:c1:58:a4:
26:df:31:9e:f8:d8:5e:37:79:0c:fa:c3:7f:6d:aa:
76:b5:41:03:f7:90:5c:10:9f:5e:b8:8f:a9:87:ac:
b4:64:ee:3d:06:26:f5:2c:6c:38:7c:26:d5:f0:74:
d2:49:ee:eb:07:cc:2f:45:de:0b:3b:bf:80:05:62:
25:1a:27:a0:1d:f9:87:2d:9e:0d:89:ec:ff:dd:e1:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:0A:8A:10:4D:62:B3:A0:0A:A3:29:E9:8E:2F:6D:15:D2:80:A6
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206290.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1276::/47
Signature Algorithm: sha256WithRSAEncryption
57:31:80:4f:fe:dc:6c:4c:67:34:59:05:0c:25:13:3b:7c:9a:
32:dc:8c:9f:d5:db:e6:31:8c:bc:09:fc:7c:ec:74:0a:25:95:
8c:9d:e4:e6:5a:fc:8f:30:6e:ae:51:4a:dd:8d:35:87:98:26:
c9:9c:9b:76:63:43:96:23:4e:55:92:2b:65:1b:14:9d:b6:14:
3e:8a:77:ef:12:e7:20:d7:fe:5e:13:2c:50:92:58:a4:d8:de:
f6:2f:29:7d:f5:c1:08:1c:8e:b8:71:3f:4c:27:8e:63:df:ad:
b4:07:78:29:a9:ed:a4:50:fa:1d:1e:50:3c:38:c6:96:8e:84:
90:8d:f5:2e:1c:22:81:6d:ae:71:7d:9e:63:00:2e:12:b1:56:
81:dd:db:0f:0b:c0:5a:8d:02:2b:53:1b:d7:9a:da:4a:cb:37:
aa:e5:dd:55:d4:0f:2a:39:b8:4d:c4:15:d3:eb:02:be:08:03:
3a:13:ea:5b:99:42:00:dd:01:d9:72:26:f3:24:96:57:fb:9a:
39:5f:21:95:61:9b:95:ae:f3:55:ae:46:5a:49:8e:60:fc:8c:
e4:aa:51:92:6f:98:28:32:9e:cc:5b:98:d3:1f:fa:2a:6d:be:
84:4e:3d:a8:dd:e2:d1:79:67:49:29:11:71:26:7e:3e:6c:22:
f7:a9:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:13 2025 by rpki-client