Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: gcbRi7Km9fRmpilDsxigikXQRJAw9SnBtuSjUlWNY6I=
Subject key identifier: A8:51:91:81:CF:68:07:1E:B7:A1:B1:C7:08:1B:26:4F:78:90:7C:50
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3168E5E4ED9FC4DD1F7CCCFD5A274D4B19EA8553
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207941.roa
Signing time: Thu 03 Jul 2025 15:52:15 +0000
ROA not before: Thu 03 Jul 2025 15:47:15 +0000
ROA not after: Thu 02 Jul 2026 15:52:15 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:68:e5:e4:ed:9f:c4:dd:1f:7c:cc:fd:5a:27:4d:4b:19:ea:85:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:15 2025 GMT
Not After : Jul 2 15:52:15 2026 GMT
Subject: CN=A8519181CF68071EB7A1B1C7081B264F78907C50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:e0:3a:49:75:e5:0d:7b:76:43:35:a2:4d:
8b:c6:a5:b0:d6:1e:9f:b2:2f:22:60:12:f6:c2:aa:
30:4f:d4:3d:c6:26:8d:dc:df:c8:08:b7:ab:6c:e9:
fb:6f:5f:91:ca:5a:fe:63:28:82:27:b3:67:4f:7b:
47:12:02:15:06:d4:85:54:7b:75:7f:15:ec:88:7c:
b5:ac:db:dd:19:6d:81:64:31:65:23:4e:1c:8e:c8:
a3:17:82:9c:61:ad:5c:83:02:6b:ae:b5:34:b6:9b:
98:2a:93:20:aa:1a:96:6a:91:44:ce:81:65:9c:a0:
59:72:e2:21:f2:2b:f7:ca:bf:7e:20:ac:f8:07:84:
60:20:5d:06:68:7e:29:71:c7:4a:3c:2b:22:3e:14:
61:5c:89:8a:d8:1a:b0:3d:e8:25:93:dd:62:e7:64:
97:6e:cb:bc:20:64:1d:18:91:23:20:75:86:55:31:
15:b5:9e:da:b2:2f:e3:c8:ed:d5:97:1f:6b:c6:76:
7c:fa:bf:e8:f3:8e:ea:1b:72:5d:38:bc:80:eb:3c:
f2:38:c8:9a:13:5e:43:b1:bb:25:f3:af:a1:c3:29:
5b:9c:22:77:ed:bf:4d:d4:03:20:fb:d4:96:f9:8f:
3a:d6:45:14:c2:4b:fd:0a:ee:83:68:55:db:05:ca:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:91:81:CF:68:07:1E:B7:A1:B1:C7:08:1B:26:4F:78:90:7C:50
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b6:63:16:ee:78:d7:b3:30:e3:98:13:2a:73:0c:9d:1b:d5:e4:
97:40:ac:78:36:14:96:80:46:08:51:d2:47:c3:93:31:86:10:
a3:ac:d8:86:79:45:9d:44:f8:f8:1e:48:e0:a7:f1:42:cb:dc:
ad:17:4e:a4:68:19:46:a1:09:03:96:64:33:3e:6f:da:11:e5:
f6:00:cc:7f:09:24:d3:30:6f:1f:bb:24:0e:03:92:e6:23:95:
a7:f6:e0:29:c9:63:1a:0f:3e:48:c9:00:27:86:e2:65:97:0f:
76:cc:84:b2:39:cb:45:f0:58:54:1a:a8:44:52:94:43:14:1b:
d4:3c:27:c5:86:ce:3f:55:b1:0f:d7:04:2f:84:6b:fe:af:5d:
11:da:52:46:2a:a1:14:12:63:89:d5:bc:64:c0:63:03:7d:5b:
74:ff:12:72:9e:1c:9a:0c:08:23:d7:9b:32:2e:b7:0a:f0:05:
c3:39:87:fb:13:7e:43:67:8c:45:a8:99:d5:7f:35:2e:87:3b:
50:0a:ab:74:f3:bf:df:39:8a:7c:30:33:51:38:36:6c:3b:d5:
29:ce:14:2c:a0:85:be:5c:dc:6b:0e:d7:8e:83:99:06:45:84:
57:a8:d7:9a:c4:1f:11:db:49:f8:dc:ce:20:62:3d:a2:bc:fb:
77:5d:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:56:58 2025 by rpki-client