Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211358.roa
File: AS211358.roa (raw, json)
Hash identifier: i96qE+q/FdcIna3z3jkKxDVqCO5XU4JaGe3I3P6ZebE=
Subject key identifier: DC:9D:DE:D3:CC:F8:29:05:8F:90:2C:62:25:34:2F:39:0A:BA:9A:0D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 46EC382ADF45E5EE85E63D3F8AAED869A681A1CA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211358.roa
Signing time: Thu 03 Jul 2025 15:52:45 +0000
ROA not before: Thu 03 Jul 2025 15:47:45 +0000
ROA not after: Thu 02 Jul 2026 15:52:45 +0000
asID: 211358
IP address blocks: 2a06:a005:750::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ec:38:2a:df:45:e5:ee:85:e6:3d:3f:8a:ae:d8:69:a6:81:a1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:45 2025 GMT
Not After : Jul 2 15:52:45 2026 GMT
Subject: CN=DC9DDED3CCF829058F902C6225342F390ABA9A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:a7:08:cc:ae:54:76:ca:37:a6:9c:fb:cb:
d7:79:2c:d9:92:92:0c:d0:9a:c3:6d:d7:72:8a:53:
1a:ea:ce:d7:c5:96:db:9b:a0:24:6a:6d:79:23:c0:
8c:07:e9:88:da:04:42:c3:a3:64:c5:db:9d:7b:57:
01:ab:42:c2:9f:13:e5:13:51:a2:b2:1b:0b:ec:70:
d8:62:b7:3e:f2:bd:96:4d:d5:11:1b:25:b3:0b:14:
33:ec:ac:17:82:da:3d:a4:2d:c3:52:74:67:25:8f:
fa:f6:05:0c:e2:c9:d9:ab:88:a0:42:9d:88:63:bd:
a5:19:af:43:e5:9a:3f:89:8b:15:90:ce:b5:be:f3:
67:f7:22:63:ac:c4:6c:b7:97:2b:b2:a0:a9:c4:f6:
93:7d:8a:78:72:c9:d5:db:cd:03:5a:d3:a5:e5:4a:
ac:c0:db:6f:83:d6:8c:38:0d:bb:ec:55:eb:f4:69:
8d:27:62:e6:6f:dc:b6:50:cb:b1:2d:60:79:ee:b4:
07:6e:cb:ef:ee:1c:e3:a8:83:a1:94:b1:d4:67:2c:
57:d5:d6:28:6c:4a:53:06:7d:9c:75:77:64:c6:f2:
fe:eb:d5:45:5b:16:45:8e:52:c6:82:c2:68:ed:20:
91:08:93:70:81:ef:3b:3e:f7:d0:16:5d:4b:39:a2:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9D:DE:D3:CC:F8:29:05:8F:90:2C:62:25:34:2F:39:0A:BA:9A:0D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211358.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:750::/44
Signature Algorithm: sha256WithRSAEncryption
98:87:c7:e1:8d:2b:e5:ef:83:c8:c5:30:68:21:7d:c3:d7:9c:
67:d8:ca:4d:9b:c8:f3:37:d7:08:b8:96:61:f2:5f:00:d0:fc:
81:69:2c:dc:a0:cd:2d:ea:64:40:2a:ab:4d:f6:cf:60:e6:87:
17:24:cf:e8:d3:e2:ec:06:56:4a:69:cb:51:26:ef:b1:82:71:
95:ec:6e:94:ea:f3:c4:ee:48:d5:ef:70:bc:6c:4a:c7:ca:cb:
0d:36:67:4a:90:57:66:28:a1:f5:47:b0:12:68:f8:de:d9:2e:
94:11:7b:d6:30:4b:d8:b6:f1:07:f0:34:be:7a:ec:05:ae:ab:
93:2e:2b:6d:c8:3e:6f:00:e5:7f:61:53:4a:1f:73:2c:a0:b4:
90:49:fe:73:41:ad:73:76:57:81:30:74:67:2b:33:2c:88:03:
3e:7d:59:a3:6a:59:93:aa:01:02:da:0e:8c:00:1e:7e:6a:dd:
60:f3:d1:df:b1:9f:d2:08:7a:b8:7d:5b:72:37:8a:91:17:59:
59:6e:35:2d:de:89:30:fa:12:01:ea:80:ee:ff:c3:05:66:13:
a0:af:db:84:c4:33:64:ba:04:b3:81:7c:c4:e3:7d:c8:5c:13:
f9:25:9e:13:d7:e7:b9:bd:a6:1c:6c:24:2c:09:90:c3:ed:f1:
b1:06:bd:07
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIURuw4Kt9F5e6F5j0/iq7YaaaBocowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ3NDVaFw0yNjA3MDIxNTUyNDVaMDMxMTAvBgNV
BAMTKERDOURERUQzQ0NGODI5MDU4RjkwMkM2MjI1MzQyRjM5MEFCQTlBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6KcIzK5Udso3ppz7y9d5LNmS
kgzQmsNt13KKUxrqztfFltuboCRqbXkjwIwH6YjaBELDo2TF2517VwGrQsKfE+UT
UaKyGwvscNhitz7yvZZN1REbJbMLFDPsrBeC2j2kLcNSdGclj/r2BQziydmriKBC
nYhjvaUZr0Plmj+JixWQzrW+82f3ImOsxGy3lyuyoKnE9pN9inhyydXbzQNa06Xl
SqzA22+D1ow4DbvsVev0aY0nYuZv3LZQy7EtYHnutAduy+/uHOOog6GUsdRnLFfV
1ihsSlMGfZx1d2TG8v7r1UVbFkWOUsaCwmjtIJEIk3CB7zs+99AWXUs5oh89AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU3J3e08z4KQWPkCxiJTQvOQq6mg0wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjExMzU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBQdQMA0GCSqGSIb3DQEBCwUAA4IBAQCYh8fh
jSvl74PIxTBoIX3D15xn2MpNm8jzN9cIuJZh8l8A0PyBaSzcoM0t6mRAKqtN9s9g
5ocXJM/o0+LsBlZKactRJu+xgnGV7G6U6vPE7kjV73C8bErHyssNNmdKkFdmKKH1
R7ASaPje2S6UEXvWMEvYtvEH8DS+euwFrquTLittyD5vAOV/YVNKH3MsoLSQSf5z
Qa1zdleBMHRnKzMsiAM+fVmjalmTqgEC2g6MAB5+at1g89HfsZ/SCHq4fVtyN4qR
F1lZbjUt3okw+hIB6oDu/8MFZhOgr9uExDNkugSzgXzE433IXBP5JZ4T1+e5vaYc
bCQsCZDD7fGxBr0H
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:00:44 2025 by rpki-client