Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209512.roa
File: AS209512.roa (raw, json)
Hash identifier: OqFv2jG4chUmpFc7QZka/VIuhacsvxClt4fYIF8cH78=
Subject key identifier: 03:DF:4B:BA:23:FF:55:22:B8:05:E2:35:43:D5:AF:0D:38:37:6D:63
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 18F8004E4F49830D4561ECAFCF796A236232E000
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209512.roa
Signing time: Thu 03 Jul 2025 15:51:58 +0000
ROA not before: Thu 03 Jul 2025 15:46:58 +0000
ROA not after: Thu 02 Jul 2026 15:51:58 +0000
asID: 209512
IP address blocks: 2a06:a005:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f8:00:4e:4f:49:83:0d:45:61:ec:af:cf:79:6a:23:62:32:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:58 2025 GMT
Not After : Jul 2 15:51:58 2026 GMT
Subject: CN=03DF4BBA23FF5522B805E23543D5AF0D38376D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:a5:1b:5b:43:91:f3:29:7d:f3:f4:15:43:
2e:7c:72:15:e6:b5:ce:5b:d4:2c:62:e1:5d:e9:6c:
34:15:f0:4b:de:07:95:90:39:31:b8:40:63:5a:4f:
98:13:e6:3a:5c:81:78:3e:33:62:4c:d3:f7:9a:f2:
83:22:cd:82:a9:bf:43:7e:33:1c:ea:56:1e:d1:92:
d8:01:a8:93:2d:af:14:95:5d:50:fb:54:a6:9e:76:
43:e7:dc:0c:9a:4a:ca:1d:2c:96:a5:b9:fd:f1:4f:
66:57:e8:9c:6e:68:52:ff:75:36:7e:7b:2b:1f:d0:
07:d4:43:69:ad:a4:9c:db:4c:54:08:79:84:40:3e:
76:b5:58:b5:d3:8d:fe:92:d8:88:ee:5b:af:b0:06:
2a:8f:17:b4:77:09:8b:2a:0d:02:f0:77:e1:1d:a8:
f3:b0:e3:7c:b3:77:4c:f0:d7:42:06:4b:ae:34:fe:
d0:94:01:4e:2b:63:db:a6:9a:94:73:2f:4b:96:1e:
bc:38:33:1f:0c:66:14:26:ca:30:fa:6f:c0:ad:5b:
dd:95:e4:ca:f2:35:88:da:44:be:77:9d:45:85:05:
6d:9a:d8:fb:aa:d8:a1:25:bd:48:3d:50:3f:69:5f:
47:5a:83:71:e5:19:ee:79:3c:57:82:5c:a6:41:7f:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DF:4B:BA:23:FF:55:22:B8:05:E2:35:43:D5:AF:0D:38:37:6D:63
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209512.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:80::/44
Signature Algorithm: sha256WithRSAEncryption
07:57:b5:a7:4e:6c:db:57:44:85:76:d3:c3:a1:ce:81:55:16:
a7:05:3f:b1:33:c4:18:67:7c:fa:ec:20:0c:04:04:ae:da:53:
bf:b5:35:a6:7e:a1:80:12:95:af:27:13:5d:ae:9a:e9:c9:9e:
12:9a:95:40:84:cf:60:d5:6d:ab:c1:9f:18:45:db:01:51:b7:
41:c3:82:dc:71:f2:fc:75:e6:4a:83:66:3b:45:d0:b9:ff:31:
7e:ad:6b:60:5e:23:a7:ef:fc:24:97:c5:94:37:8b:fc:b2:11:
94:87:53:83:ae:f5:a8:fd:e0:b1:2d:d0:92:fa:f4:6e:7b:35:
f3:a4:a9:7f:9d:1c:81:d3:e9:ab:a0:b2:50:9b:41:f4:9d:82:
4b:e2:bc:19:62:e0:d2:cd:f2:90:ce:87:46:e8:f1:92:a1:a1:
6d:cc:95:f3:e8:5b:40:c5:52:7a:51:be:42:66:e9:66:8f:ac:
d8:bf:e0:22:1c:99:d3:eb:3a:73:7b:0d:b0:f5:3c:d0:4a:80:
a5:6c:7d:35:c7:b1:0b:50:3b:d5:4f:a3:5c:d8:25:81:7b:bd:
d4:7d:4f:80:d0:4d:63:07:03:b3:4a:46:bb:f1:38:5d:63:f4:
63:d8:18:da:f3:85:f3:90:c7:76:5b:54:13:b4:da:41:08:eb:
04:1f:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:59:47 2025 by rpki-client