Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210260.roa
File: AS210260.roa (raw, json)
Hash identifier: ryhAfH50neptAzgQDEUu07ZahXpiCq/vkLAWFUfUNGo=
Subject key identifier: 0F:1C:85:92:F5:DB:95:41:93:17:0A:2A:B4:CD:0E:F4:EA:AA:12:AA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7B804875D265EB1CAEFC71ABE153CCDC48DEB1E1
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210260.roa
Signing time: Thu 03 Jul 2025 15:51:52 +0000
ROA not before: Thu 03 Jul 2025 15:46:52 +0000
ROA not after: Thu 02 Jul 2026 15:51:52 +0000
asID: 210260
IP address blocks: 2a06:1286::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:80:48:75:d2:65:eb:1c:ae:fc:71:ab:e1:53:cc:dc:48:de:b1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:52 2025 GMT
Not After : Jul 2 15:51:52 2026 GMT
Subject: CN=0F1C8592F5DB954193170A2AB4CD0EF4EAAA12AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:cd:37:7a:70:da:73:d3:ff:bc:c4:bd:3b:
3d:70:1c:37:97:75:75:aa:d7:27:0d:c3:a1:73:98:
a8:53:0e:19:5e:23:61:e5:b0:36:64:99:5b:62:0f:
df:15:0c:17:e7:89:93:43:df:24:28:37:69:c3:ce:
7a:b0:94:d1:ff:78:0f:cd:7a:65:aa:c9:4e:fc:0d:
58:2a:84:09:92:32:69:3c:a3:1e:d7:96:bc:f9:f8:
b6:73:42:8a:64:0c:ee:a9:9f:d9:87:cc:cb:c7:59:
16:ec:58:ec:67:5d:5e:01:5b:95:2f:ff:fa:19:62:
f9:b6:94:9e:22:fe:3e:3d:1c:cf:db:c8:24:40:7f:
74:21:e6:97:86:fe:fd:ed:09:b1:c2:29:d0:82:d8:
f2:52:c2:53:31:44:d7:46:a4:d3:82:5c:de:2e:2f:
c1:8b:ac:74:8b:42:93:c5:6f:45:14:e9:db:9f:f2:
11:ff:5c:ef:a5:85:21:0c:6b:84:34:0a:04:db:f9:
48:e7:16:bd:f3:e8:e2:07:33:ed:24:9b:2a:8f:21:
ad:33:16:5b:a6:fb:85:26:4d:b3:e7:47:c4:83:7d:
65:75:1a:0d:5e:ad:87:6d:ac:9e:8e:33:85:7e:fb:
60:3d:e0:47:c4:da:bd:04:d7:4c:f7:57:20:74:9b:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1C:85:92:F5:DB:95:41:93:17:0A:2A:B4:CD:0E:F4:EA:AA:12:AA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
Signature Algorithm: sha256WithRSAEncryption
47:f0:3e:28:a2:d2:56:ec:3f:26:6b:5a:04:d2:c1:e2:75:5b:
7f:a0:54:d2:09:12:bb:8a:10:8c:e0:0c:04:40:a6:d9:c3:ba:
d8:2c:3c:72:13:15:8e:62:09:dc:af:a3:4b:b7:4f:10:a8:03:
69:ad:0c:6b:df:bb:85:ea:c5:45:23:88:6f:58:ce:35:b8:ba:
91:ed:d6:5b:2d:94:00:1b:01:d8:cb:5b:2a:c6:a7:5f:c6:53:
4b:47:69:65:33:b0:26:af:c1:41:1c:a8:28:24:0c:2d:66:9c:
fd:f6:b9:1a:85:9f:cd:24:c3:3c:45:95:4a:65:9a:8e:ec:33:
bf:7d:4c:ec:06:e7:63:a6:df:ee:2b:d4:1d:8e:f2:b1:d2:20:
66:21:3f:34:c3:c3:93:3d:97:3b:1f:5d:50:c5:0c:f1:cb:7b:
4d:6f:78:90:c7:99:99:41:6e:34:df:7e:ad:e2:46:4a:e2:4a:
22:0d:82:90:88:81:5b:9d:07:6a:7e:f0:95:49:e9:8a:fb:bd:
d4:c6:0e:60:85:d9:22:4a:32:21:a7:dc:f7:f8:5d:c9:f4:fc:
b6:0a:38:9b:0d:de:27:1e:f2:3d:24:5f:58:1d:98:53:fa:04:
a3:aa:53:c9:cb:8a:73:fe:a3:bc:0c:4f:c3:e2:f7:3a:b5:34:
91:8f:db:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:22:13 2025 by rpki-client