Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211360.roa
File: AS211360.roa (raw, json)
Hash identifier: eEoX0VY4/zB9gsEBs2enW8Wmd6H0n0iU5slI7mN/dXo=
Subject key identifier: 70:57:99:3B:E6:91:FD:3B:EE:D6:59:BD:FF:DD:D2:BF:F7:2F:DD:62
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0BE75049D5EFB5D31E94908A39650399FE7C34C7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211360.roa
Signing time: Thu 03 Jul 2025 15:51:37 +0000
ROA not before: Thu 03 Jul 2025 15:46:37 +0000
ROA not after: Thu 02 Jul 2026 15:51:37 +0000
asID: 211360
IP address blocks: 2a06:a005:1f::/48 maxlen: 48
2a06:a005:a90::/44 maxlen: 48
2a06:a005:aa0::/44 maxlen: 48
2a06:a005:ac0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e7:50:49:d5:ef:b5:d3:1e:94:90:8a:39:65:03:99:fe:7c:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:37 2025 GMT
Not After : Jul 2 15:51:37 2026 GMT
Subject: CN=7057993BE691FD3BEED659BDFFDDD2BFF72FDD62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:e6:79:63:15:fe:ec:18:69:ab:8f:85:28:
2a:e8:c9:e7:f4:b6:5e:c2:03:d1:d6:67:fd:08:ae:
8a:a6:06:99:22:4c:40:34:a7:2b:0e:08:13:26:19:
ec:b0:84:f8:d2:02:81:ce:44:5f:8b:cf:13:e2:6d:
a8:25:86:95:df:4f:97:ab:f3:02:80:84:67:53:9a:
37:c5:3d:85:20:da:4b:60:8c:8f:0f:64:46:41:91:
47:80:6e:00:cc:47:54:9c:09:6c:ec:30:58:eb:e8:
cf:1e:26:83:79:ca:8a:e6:91:a2:ee:1d:81:7d:53:
cb:44:27:fb:6d:ed:30:d2:0f:a6:1f:42:28:60:e3:
c5:9d:5b:a9:cd:5f:b7:d7:e4:44:2e:e9:74:27:06:
57:0b:39:26:9b:ac:c3:b5:ec:d8:12:d9:63:74:b3:
70:b6:81:47:37:fb:60:f3:e5:6c:b0:52:80:02:6c:
e9:4b:bd:1a:b9:7b:e4:a3:f4:f1:7a:4d:e5:c9:10:
8d:3a:91:a3:5b:55:1f:7c:51:f8:38:12:f9:f9:07:
da:10:38:f4:0f:b3:3d:e8:8a:71:e5:70:b9:a7:06:
3b:9e:8d:44:ec:82:47:57:62:1c:0f:18:88:f5:d7:
c5:2f:c8:e5:32:a0:88:bd:ca:88:b5:ec:06:1d:85:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:99:3B:E6:91:FD:3B:EE:D6:59:BD:FF:DD:D2:BF:F7:2F:DD:62
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1f::/48
2a06:a005:a90::-2a06:a005:aaf:ffff:ffff:ffff:ffff:ffff
2a06:a005:ac0::/44
Signature Algorithm: sha256WithRSAEncryption
2e:9e:d6:82:84:05:7d:43:8f:7f:84:fb:93:a3:c3:ca:82:5e:
9e:50:65:ca:c2:c6:6f:81:fe:39:7e:97:f6:a7:3c:f7:1d:fd:
b9:4d:53:2a:20:44:58:5e:c5:3d:34:c5:a5:43:3c:1e:02:de:
f9:92:45:9d:c9:38:c1:23:a3:a3:c5:7e:61:31:8e:37:ed:00:
80:4d:41:43:5f:ac:89:ad:57:f8:89:9c:34:f2:f1:5f:61:91:
20:1b:65:4e:70:5b:2c:b0:4e:5b:36:89:af:d3:c4:6c:58:ba:
b2:f6:d2:97:5b:06:d3:95:99:ec:4c:47:25:b9:7e:45:f6:1c:
b0:1b:ee:43:cf:0a:bb:8b:96:e5:c3:a4:41:3b:1b:14:8c:53:
ab:03:59:e6:a9:75:79:3c:b2:88:21:97:95:22:2d:bc:82:d4:
a5:36:9b:8f:a3:11:1b:23:a6:21:ac:a0:2c:3d:9c:8b:15:fb:
8b:42:92:54:22:b4:54:ae:0e:9f:f7:45:65:9f:13:90:80:6b:
53:3a:45:e2:e5:05:07:3c:40:42:1f:64:ea:c2:4c:3e:4a:a6:
3f:fa:a5:d1:85:b1:51:dc:11:46:6f:b6:da:f4:8f:cf:14:f8:
0e:2e:8a:ab:83:f5:f5:ca:0f:ce:98:81:5a:4c:09:d8:14:c9:
81:59:20:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:19:17 2025 by rpki-client