Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207705.roa
File: AS207705.roa (raw, json)
Hash identifier: UdrZSjC27kTUS6KhDBnKkIV6se/YyapT6aPGhRkcaeE=
Subject key identifier: 0E:F4:37:19:EB:AA:40:34:03:ED:65:76:03:37:3F:F1:90:C2:1A:04
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 165496D6FED2BB7EE50179264ED19140E78812D7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207705.roa
Signing time: Thu 03 Jul 2025 15:51:29 +0000
ROA not before: Thu 03 Jul 2025 15:46:29 +0000
ROA not after: Thu 02 Jul 2026 15:51:29 +0000
asID: 207705
IP address blocks: 2a06:a005:210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:54:96:d6:fe:d2:bb:7e:e5:01:79:26:4e:d1:91:40:e7:88:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:29 2025 GMT
Not After : Jul 2 15:51:29 2026 GMT
Subject: CN=0EF43719EBAA403403ED657603373FF190C21A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:e6:ac:0a:ee:1c:c2:37:38:51:78:3e:3c:
22:c7:9d:22:92:ed:c4:8e:fb:53:88:1c:7d:17:9d:
20:4e:60:f9:de:c8:9e:99:bb:a1:9a:0c:76:73:13:
cc:b9:eb:49:5c:17:3e:4d:7f:68:e3:f9:77:94:01:
6f:5c:8d:35:cd:fe:b1:f9:09:df:84:db:de:bf:23:
dc:63:3a:ef:14:3c:81:a7:22:f7:c0:aa:b2:f3:99:
e5:a2:1b:b4:90:65:88:d3:2b:13:bd:d1:ad:13:0e:
f5:d4:1c:93:ed:47:87:99:0a:28:53:72:2d:54:bc:
11:f2:fb:cf:70:fa:8f:5c:83:57:c6:5a:71:7d:4b:
17:1b:9e:c8:17:24:b5:0f:0d:7b:dd:75:59:78:98:
37:66:46:80:87:23:0f:3a:e0:e3:f4:25:88:a4:a2:
1a:ef:98:0e:d6:9c:cf:82:0f:cd:9b:02:7f:ab:69:
de:43:52:c8:17:e0:38:08:14:52:7e:42:96:b8:2b:
e1:5f:8b:8d:e9:a4:f1:c7:03:eb:d3:98:d9:04:fa:
4a:ae:70:a0:e1:39:9a:70:1c:2d:7b:9b:0e:dd:e2:
12:5f:5c:11:80:6d:05:a4:96:a2:ee:04:1f:5d:53:
aa:1d:7f:f7:40:53:63:05:c3:28:95:9d:48:a9:cf:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:37:19:EB:AA:40:34:03:ED:65:76:03:37:3F:F1:90:C2:1A:04
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:210::/44
Signature Algorithm: sha256WithRSAEncryption
6c:c4:e1:28:5f:df:65:ed:cc:a7:5d:86:07:f5:6b:aa:b1:1d:
52:6e:e3:a6:39:6f:68:3e:da:87:77:ed:41:2c:98:4c:88:33:
d1:38:00:d8:33:84:3a:a2:3e:bc:c6:8c:6a:ba:7b:2e:61:34:
b3:43:4f:5d:d5:e1:62:99:d5:03:07:ba:95:08:6d:0a:6f:5d:
d2:41:0e:b2:66:03:f7:67:77:53:89:fe:5a:0f:8d:34:7f:eb:
0c:b1:bf:8c:aa:38:0e:85:d4:4f:0f:ec:12:b1:da:df:58:44:
0f:27:5c:13:07:82:c0:9c:41:02:42:31:74:2c:d6:7f:f6:1b:
6f:9c:5d:2e:79:d1:b1:6e:5a:de:97:11:ea:d4:97:bf:ed:de:
b1:89:7a:4e:3f:81:21:90:de:a3:6e:70:2a:46:58:b2:c1:e4:
20:08:14:58:eb:e8:dc:19:90:e6:38:27:6d:20:24:f9:7a:0c:
a6:65:d4:e1:eb:39:83:23:fc:b1:bc:da:5d:bc:67:67:88:1a:
96:bd:99:15:ad:09:11:cc:33:df:a1:cb:f3:58:a8:17:a0:06:
a8:5e:c0:c4:3f:64:93:e7:b2:de:79:e2:87:8d:02:29:a4:93:
bf:9b:82:d7:9b:2a:2e:70:4f:53:d1:3a:09:76:50:05:f5:95:
a0:7c:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:54 2025 by rpki-client