Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209735.roa
File: AS209735.roa (raw, json)
Hash identifier: oBUwQHkRhkMxYW2c2JW7d7YrwrR1zumNYoQAFDadgGE=
Subject key identifier: F1:29:91:4B:24:D3:25:B0:6C:DC:5B:4B:AC:57:D3:4B:69:E3:E1:7E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7EB194FA95214E60E48D9E0117069FA4628489DD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209735.roa
Signing time: Thu 03 Jul 2025 15:52:24 +0000
ROA not before: Thu 03 Jul 2025 15:47:24 +0000
ROA not after: Thu 02 Jul 2026 15:52:24 +0000
asID: 209735
IP address blocks: 103.146.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b1:94:fa:95:21:4e:60:e4:8d:9e:01:17:06:9f:a4:62:84:89:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:24 2025 GMT
Not After : Jul 2 15:52:24 2026 GMT
Subject: CN=F129914B24D325B06CDC5B4BAC57D34B69E3E17E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:d5:19:fe:5c:54:be:20:ab:e9:f6:f8:40:
82:27:94:b2:37:84:db:89:6e:fa:d5:13:67:9a:7b:
68:78:e3:c2:df:f8:bd:86:e3:a3:6f:50:0f:cb:e2:
d0:b5:6c:9b:64:85:dd:a3:5e:c6:1c:58:4c:0f:f3:
fa:cb:7d:65:a7:86:98:ee:cf:1d:c9:ba:49:7a:a6:
65:45:9a:d3:aa:84:3a:b8:7d:fc:63:51:bc:ac:68:
84:09:ee:db:b2:e1:20:07:69:39:ae:ee:36:e8:c6:
e0:09:d6:4b:d7:0e:f1:bd:f8:5c:ab:09:79:2b:31:
b6:c4:7d:7c:83:89:4a:ae:54:4c:7e:0c:a3:26:ed:
63:12:13:5b:02:c2:40:01:fa:36:18:c5:cc:c7:1d:
09:16:69:76:8e:3a:46:35:70:e6:eb:fe:c4:22:fa:
59:5f:ca:bd:f9:16:17:68:37:5f:c9:bc:68:8a:a7:
17:f2:4e:b5:34:34:3b:20:6f:f0:c3:e0:d7:c7:12:
d5:3b:43:3e:06:9a:1c:85:94:bd:66:e6:58:63:6c:
fc:9a:d8:44:78:8e:88:ad:90:4e:58:4a:c6:e7:38:
f2:5e:b8:9d:db:6b:70:cd:be:3e:85:3a:91:63:2c:
78:81:be:ff:b9:aa:f3:ec:b5:b2:d5:81:4c:9b:86:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:91:4B:24:D3:25:B0:6C:DC:5B:4B:AC:57:D3:4B:69:E3:E1:7E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d0:93:6b:87:d2:91:b6:fa:bb:38:79:be:2e:39:15:d0:ca:
4c:83:4f:15:42:ce:52:bd:87:22:18:9e:63:ff:7b:29:b2:ac:
6b:bb:1e:bb:9d:ff:22:e5:58:7c:8a:13:17:c0:40:88:fc:50:
cb:d9:3c:b9:6b:32:40:57:53:92:53:82:0d:f5:0c:da:00:23:
4e:7a:b8:fb:f7:4a:fa:c7:7a:79:80:72:af:15:29:75:b7:1d:
eb:ea:cd:c1:16:a9:7a:72:5f:12:9f:89:82:cf:4b:3b:f7:2f:
aa:19:5a:0a:b5:67:17:75:a4:61:e3:79:6a:aa:cb:ad:c8:8d:
c3:b6:11:23:c0:b1:c4:96:eb:ef:e7:da:eb:1e:00:4e:d4:e8:
18:de:3d:eb:6a:7a:de:4d:0a:fd:9e:c8:94:6a:01:4b:07:5d:
c1:46:4c:64:1f:f0:26:7f:c0:96:5b:8d:85:1b:e6:92:0d:2b:
e4:4b:4b:34:b6:0b:fc:3f:8d:f1:6e:94:41:72:d1:b6:59:f8:
14:51:85:59:fe:f0:6a:6a:1f:dd:ea:e5:84:bf:cc:58:6e:bb:
a3:6f:c8:62:ff:09:18:c7:83:6b:5e:39:c5:22:aa:dc:c6:ce:
6f:d7:00:c7:66:12:d0:c7:84:ff:9d:04:93:98:85:6b:06:d6:
1a:bf:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:13 2025 by rpki-client