Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206292.roa
File: AS206292.roa (raw, json)
Hash identifier: 2iifdFSml6N8bLP7rc195Qxja/fuw7miG70MqAW7Cgg=
Subject key identifier: 03:71:73:8F:91:15:29:0A:CD:82:CC:D8:B2:4A:40:84:BB:4A:24:62
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 10B9CD97C781A6431B1E29080EB3056CFAE7E81D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206292.roa
Signing time: Thu 04 Jun 2026 15:58:49 +0000
ROA not before: Thu 04 Jun 2026 15:53:49 +0000
ROA not after: Thu 03 Jun 2027 15:58:49 +0000
asID: 206292
IP address blocks: 81.31.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b9:cd:97:c7:81:a6:43:1b:1e:29:08:0e:b3:05:6c:fa:e7:e8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:49 2026 GMT
Not After : Jun 3 15:58:49 2027 GMT
Subject: CN=0371738F9115290ACD82CCD8B24A4084BB4A2462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:92:7b:c5:db:30:21:16:d7:79:e6:15:ed:
a2:c1:d3:b4:00:c8:41:9d:97:ac:1a:bb:35:1c:fa:
7d:7f:e3:0e:8a:5e:3d:14:91:0d:63:f9:a5:76:fd:
eb:28:00:f1:7d:0e:e9:e7:02:b9:19:c4:b1:98:53:
56:26:c0:4b:27:d4:f9:57:81:04:82:3b:71:ba:12:
51:9e:82:4c:98:cf:f5:bb:3f:70:d2:99:7d:85:e8:
54:f2:d3:f3:00:1a:d5:11:bc:0c:39:88:69:9b:1e:
dd:91:a2:dd:c5:f6:8b:87:dd:66:a0:06:cd:9a:50:
8d:c3:3f:20:6e:b2:49:44:30:a9:05:32:87:1e:ab:
dd:14:f2:ce:1d:09:c0:40:71:07:35:6e:82:4e:88:
76:3e:3d:b0:f8:25:0a:a7:87:62:9a:53:b7:3e:da:
5b:0b:e7:55:f3:e6:27:23:3e:c9:28:ad:7d:b4:9b:
e8:b7:20:03:b6:ac:15:a0:de:b0:55:a3:29:10:f1:
09:f6:a4:a6:92:12:e5:3a:36:8f:89:3a:85:6f:be:
0a:be:9d:94:40:3a:9a:6a:03:c9:f1:49:53:d1:6e:
6a:1b:8a:c6:bc:c9:41:7d:35:23:3d:a9:aa:9a:50:
57:2f:bc:02:bf:86:b1:eb:84:af:43:ec:b8:e5:df:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:71:73:8F:91:15:29:0A:CD:82:CC:D8:B2:4A:40:84:BB:4A:24:62
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206292.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0e:e6:d6:53:d6:1d:43:28:26:a3:6d:8f:42:b8:23:dd:84:
8f:dc:86:51:9d:06:5d:3b:4c:7c:20:90:25:63:b3:1b:50:cb:
77:eb:f5:86:4d:6b:8f:4e:dc:4a:8c:d3:20:ef:c6:b2:4d:8b:
d8:a5:bf:a0:02:76:5a:99:70:f1:35:37:ae:17:69:cd:57:25:
70:ed:93:ec:85:44:24:cc:9b:cd:46:fe:89:f1:22:b3:92:bb:
2b:ec:03:05:42:ae:bf:2e:45:55:3a:af:d3:94:06:5b:ac:47:
5d:58:cb:90:49:0a:4e:b4:4c:d8:00:15:8e:a6:8b:95:4a:c0:
8e:86:03:5b:1c:0e:83:3d:33:dc:84:9f:4e:f6:9f:ab:12:ae:
e5:3b:44:de:52:1e:e1:3f:f8:fc:aa:8e:66:10:ec:96:f8:55:
70:98:4b:5e:c1:ed:f4:65:88:bd:fa:98:e1:dd:d2:87:04:b9:
6a:d6:ce:53:b7:bd:08:28:bc:47:3a:0b:3b:a6:74:fc:c2:93:
f7:37:ea:fc:b4:e1:8d:b2:31:37:78:53:8d:17:a9:f8:5e:10:
6b:fc:fa:97:51:07:23:70:d8:c5:be:7b:f9:9f:d5:f0:f4:a2:
a3:f5:5d:ed:79:f3:f5:45:45:3e:34:2e:29:67:92:60:54:7c:
a9:bd:58:cf
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUELnNl8eBpkMbHikIDrMFbPrn6B0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNDlaFw0yNzA2MDMxNTU4NDlaMDMxMTAvBgNV
BAMTKDAzNzE3MzhGOTExNTI5MEFDRDgyQ0NEOEIyNEE0MDg0QkI0QTI0NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAZJ7xdswIRbXeeYV7aLB07QA
yEGdl6wauzUc+n1/4w6KXj0UkQ1j+aV2/esoAPF9DunnArkZxLGYU1YmwEsn1PlX
gQSCO3G6ElGegkyYz/W7P3DSmX2F6FTy0/MAGtURvAw5iGmbHt2Rot3F9ouH3Wag
Bs2aUI3DPyBusklEMKkFMoceq90U8s4dCcBAcQc1boJOiHY+PbD4JQqnh2KaU7c+
2lsL51Xz5icjPskorX20m+i3IAO2rBWg3rBVoykQ8Qn2pKaSEuU6No+JOoVvvgq+
nZRAOppqA8nxSVPRbmobisa8yUF9NSM9qaqaUFcvvAK/hrHrhK9D7Ljl32JVAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUA3Fzj5EVKQrNgszYskpAhLtKJGIwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjA2MjkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAUR/XMA0GCSqGSIb3DQEBCwUAA4IBAQB7DubWU9Yd
Qygmo22PQrgj3YSP3IZRnQZdO0x8IJAlY7MbUMt36/WGTWuPTtxKjNMg78ayTYvY
pb+gAnZamXDxNTeuF2nNVyVw7ZPshUQkzJvNRv6J8SKzkrsr7AMFQq6/LkVVOq/T
lAZbrEddWMuQSQpOtEzYABWOpouVSsCOhgNbHA6DPTPchJ9O9p+rEq7lO0TeUh7h
P/j8qo5mEOyW+FVwmEtewe30ZYi9+pjh3dKHBLlq1s5Tt70IKLxHOgs7pnT8wpP3
N+r8tOGNsjE3eFONF6n4XhBr/PqXUQcjcNjFvnv5n9Xw9KKj9V3tefP1RUU+NC4p
Z5JgVHypvVjP
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:23:11 2026 by rpki-client