Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa
File: AS207196.roa (raw, json)
Hash identifier: +g76+FzqksePQiEd2RxCkzGAXsH8XYdjfFmTJdZB2Qw=
Subject key identifier: F0:5B:7D:20:2E:5A:A0:CC:E1:DD:13:B5:C1:E0:59:46:4C:24:3A:9A
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3AE4EA637713FC32BDA893A1CAF34706F7400EFD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa
Signing time: Tue 09 Sep 2025 19:32:04 +0000
ROA not before: Tue 09 Sep 2025 19:27:04 +0000
ROA not after: Tue 08 Sep 2026 19:32:04 +0000
asID: 207196
IP address blocks: 118.91.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e4:ea:63:77:13:fc:32:bd:a8:93:a1:ca:f3:47:06:f7:40:0e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 9 19:27:04 2025 GMT
Not After : Sep 8 19:32:04 2026 GMT
Subject: CN=F05B7D202E5AA0CCE1DD13B5C1E059464C243A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:c0:89:a6:56:30:64:95:17:7f:c6:3c:1f:
68:ec:bc:0c:13:15:0f:95:f2:02:e6:93:17:20:e4:
a2:62:cb:6d:62:59:95:56:b3:bd:52:d3:a4:86:d6:
51:59:6f:83:f0:da:74:58:96:81:a0:13:45:c8:68:
9e:c4:40:b9:78:73:08:d0:28:99:47:37:19:9f:94:
09:72:33:75:34:9d:c1:ac:dd:81:18:3e:a0:52:78:
ae:16:ae:c1:c3:0c:af:23:a2:be:6e:e6:ed:fc:5f:
b2:34:68:71:10:d0:9f:fb:7f:2d:a6:4d:01:04:4c:
1c:5d:71:b5:6e:18:58:a2:4d:a1:5a:89:3d:99:d3:
85:8a:0f:a8:84:c6:88:4f:55:db:0e:93:2b:79:60:
40:3d:0f:08:e2:c7:eb:4b:0b:9f:5d:ce:ea:55:41:
66:fe:cd:40:95:93:68:68:e1:4e:c0:a1:1b:49:14:
fe:51:9f:f7:14:35:4b:1b:37:de:20:c2:ef:ab:86:
a8:9c:b9:97:23:8c:31:f6:7f:bd:43:a4:7c:55:f7:
75:bf:f6:92:3c:64:11:ab:8a:91:f5:e3:d4:8a:89:
cb:24:4f:60:b6:38:19:47:0a:0a:e3:4b:61:93:f8:
9d:de:0d:af:be:7d:d6:f2:1d:c3:c3:3f:09:a4:99:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:7D:20:2E:5A:A0:CC:E1:DD:13:B5:C1:E0:59:46:4C:24:3A:9A
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.184.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5f:a6:8c:5d:a1:23:20:7d:1e:7c:2d:a2:73:23:c3:e0:33:
ed:3d:61:e7:b3:d0:8f:f0:9e:31:23:24:8f:2f:45:74:42:2d:
6c:36:e2:24:27:b3:c1:9e:2a:c7:30:15:8a:cf:9c:ae:25:ff:
f8:81:02:68:ba:2d:b0:e7:a5:d6:7f:56:14:f6:e1:17:7b:00:
df:96:4a:84:bf:f6:a6:32:04:92:d6:30:c2:a2:ca:c2:e5:99:
30:85:83:9a:b1:5a:e9:cf:86:d8:44:78:f1:44:3a:25:05:fc:
72:74:62:69:70:8b:b1:7d:b3:25:4b:52:ba:49:f0:d7:d7:61:
23:90:4f:76:25:c4:ee:3d:f9:34:c7:a1:6c:c4:13:f3:d6:e8:
c6:df:78:ac:c5:e4:c8:b2:08:7c:a2:d7:87:49:79:62:6c:88:
07:af:16:25:e2:95:75:60:5f:5a:f7:22:49:dc:93:b1:1e:f2:
78:17:73:03:b5:0d:64:33:6f:a0:ff:ef:e7:59:5e:b9:2e:9b:
90:2f:24:8b:de:cf:74:40:d1:e6:f3:5a:2a:d9:98:8a:29:a9:
b0:b3:46:b2:96:d1:6a:d6:e4:33:d9:ba:e4:fd:e0:07:34:d0:
73:c0:d0:04:72:1e:d6:29:af:e3:6b:d5:9e:61:26:e8:20:d2:
32:47:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:19:34 2025 by rpki-client