Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208584.roa
File: AS208584.roa (raw, json)
Hash identifier: tR7E5W1wRCBZdd65AaYUih9zs5L/J43aVmmmC4/viKU=
Subject key identifier: 0D:0D:12:B1:F6:D1:1F:08:33:CE:98:CE:29:8F:DD:D5:CE:67:48:96
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5CA58524AA8AB7A4242B8D8956EC84D56A1D97DF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208584.roa
Signing time: Thu 03 Jul 2025 15:51:42 +0000
ROA not before: Thu 03 Jul 2025 15:46:42 +0000
ROA not after: Thu 02 Jul 2026 15:51:42 +0000
asID: 208584
IP address blocks: 2a06:a005:460::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a5:85:24:aa:8a:b7:a4:24:2b:8d:89:56:ec:84:d5:6a:1d:97:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:42 2025 GMT
Not After : Jul 2 15:51:42 2026 GMT
Subject: CN=0D0D12B1F6D11F0833CE98CE298FDDD5CE674896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:77:ef:55:e5:6e:78:11:4c:3e:a9:84:ce:
5a:b1:66:0c:9d:b4:60:8a:02:78:05:0d:08:32:22:
be:00:ef:f5:fa:3d:b3:c3:2a:a9:fa:43:b7:2f:d8:
a9:35:6e:ff:b0:cf:05:c6:69:c5:d2:62:9f:b5:c9:
86:62:ed:75:b9:a6:c4:d9:36:33:88:37:24:f3:2f:
a0:df:53:57:5a:d0:b7:89:51:59:c0:b6:6e:db:26:
40:59:f7:43:d6:68:ef:c2:1f:be:1b:10:43:e5:0d:
3d:3f:d0:d4:8d:01:cd:20:fc:e3:dc:31:7b:78:00:
c2:d9:f8:3d:f0:a3:a5:d4:39:86:c9:28:fb:6f:c8:
fe:5d:93:ca:b3:6b:59:02:ae:16:07:d3:1c:9e:ea:
e8:d4:8a:d9:cf:a7:3c:40:22:01:30:01:fb:5e:e4:
57:62:4f:a7:b8:4c:4d:60:d9:ac:36:55:03:05:fd:
76:b8:70:3a:1d:4e:a0:48:b5:4f:c1:4d:9e:9e:6b:
ba:a4:3a:8c:77:e7:b9:a2:d0:d4:62:bd:38:02:d5:
e5:8c:81:6b:83:05:f2:76:8d:9b:38:69:39:9c:f3:
8a:e0:77:ee:1e:03:0a:ee:4e:4e:07:bf:b8:f2:98:
aa:45:86:4a:39:6f:a8:d3:50:42:d1:40:26:77:e7:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:12:B1:F6:D1:1F:08:33:CE:98:CE:29:8F:DD:D5:CE:67:48:96
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:460::/44
Signature Algorithm: sha256WithRSAEncryption
c0:28:b5:42:7e:96:34:54:1c:6a:e1:80:43:1c:96:31:59:83:
02:1f:c5:9d:39:ff:a6:ca:d3:b1:b7:ef:17:8b:12:8e:ab:1a:
ba:8e:5d:5d:63:2c:64:1e:12:37:cf:d3:6c:03:8f:34:c3:47:
0b:20:41:8e:85:68:b9:d5:e4:de:4b:2f:49:a2:d2:66:44:34:
88:9e:04:e0:88:ae:f7:ea:46:4d:cd:6b:36:05:5b:5c:d3:9f:
03:88:68:f9:d2:be:78:ce:2c:2d:68:32:37:66:ad:30:c8:7b:
3c:d1:e0:96:a9:59:ea:db:7f:16:67:e7:49:af:b3:07:6c:d5:
4b:88:b7:f5:bb:ce:58:ac:7d:ed:7a:14:a9:ed:96:8b:9e:75:
40:72:a5:da:05:5a:34:42:86:5d:aa:f6:0e:6f:b4:12:8f:20:
ea:ef:1f:0f:a5:90:8d:8b:ec:b8:49:4b:63:45:fa:16:8e:8d:
9b:bb:51:11:49:60:cd:b3:88:46:de:f6:8c:de:f4:f8:54:5f:
b1:d9:4e:6d:fd:ab:ae:a4:b6:dc:37:a0:1f:d1:8a:e3:4f:89:
30:38:c0:44:6a:a7:81:e8:01:3a:74:27:a2:98:39:b0:84:72:
7a:c1:be:64:75:70:38:31:b2:22:65:1c:1e:48:0a:ff:20:09:
4c:cc:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:05:28 2025 by rpki-client