Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211360.roa
File: AS211360.roa (raw, json)
Hash identifier: GnwcVy1usjtwzpNPHhW7wITNgic/fdkY0MQUV3eTwUs=
Subject key identifier: 4F:A1:24:D4:0A:FD:CA:96:74:50:83:E4:E2:B4:BB:37:63:B1:24:83
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3606069F287ED72459AC50C7329EFB5AAD428CDB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211360.roa
Signing time: Thu 04 Jun 2026 15:58:47 +0000
ROA not before: Thu 04 Jun 2026 15:53:47 +0000
ROA not after: Thu 03 Jun 2027 15:58:47 +0000
asID: 211360
IP address blocks: 2a06:a005:1f::/48 maxlen: 48
2a06:a005:a90::/44 maxlen: 48
2a06:a005:aa0::/44 maxlen: 48
2a06:a005:ac0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:06:06:9f:28:7e:d7:24:59:ac:50:c7:32:9e:fb:5a:ad:42:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:47 2026 GMT
Not After : Jun 3 15:58:47 2027 GMT
Subject: CN=4FA124D40AFDCA96745083E4E2B4BB3763B12483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:d9:89:0c:34:e8:b9:6f:ba:73:58:79:78:
aa:29:72:e4:42:e3:4d:b4:78:b6:f0:c9:5d:9f:1b:
0d:d1:fd:39:a5:64:77:0e:11:23:56:c2:cf:a8:0e:
63:5d:7b:56:e7:b2:8b:7d:65:0d:34:e5:13:a2:c3:
e3:2e:72:81:77:a2:dd:ba:ad:e7:cb:84:94:9f:22:
30:fc:4e:77:7f:d5:2e:e9:b8:39:93:01:c4:49:fb:
a7:8a:7e:a3:be:39:25:58:3a:ad:90:1e:d0:29:fa:
7f:3d:8f:e9:ee:79:64:93:97:bf:57:19:9c:84:46:
2a:a7:2e:09:0c:af:99:14:73:a8:5a:3c:56:69:59:
b4:47:39:22:e4:30:16:1a:7a:4d:96:7f:72:5d:1d:
3e:43:c9:80:9c:de:3f:16:a7:34:e1:21:de:37:57:
b4:43:d6:33:8c:06:86:84:b6:36:f2:b8:15:d8:4d:
06:58:94:bb:00:9d:da:e1:4a:82:9e:b5:51:e2:fe:
6e:2f:1a:a7:55:02:81:83:7e:73:78:38:ff:ed:ad:
10:90:7b:5e:cf:fc:ab:25:c6:15:8e:d6:1c:b2:4c:
a3:74:93:be:44:f6:0f:24:4f:16:7c:00:6b:5b:c3:
73:e4:6e:e3:a6:d6:82:f6:42:ec:0a:5d:0c:62:36:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:24:D4:0A:FD:CA:96:74:50:83:E4:E2:B4:BB:37:63:B1:24:83
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1f::/48
2a06:a005:a90::-2a06:a005:aaf:ffff:ffff:ffff:ffff:ffff
2a06:a005:ac0::/44
Signature Algorithm: sha256WithRSAEncryption
30:ad:70:74:00:17:59:9c:2e:5d:01:0d:91:ba:89:b1:6d:f8:
ed:b9:6d:c6:fc:36:8f:23:df:89:29:38:51:24:9b:e0:4a:e1:
53:6c:f4:c6:9c:68:1c:1c:d1:32:48:e7:47:1e:68:2b:6c:0c:
8e:0d:99:c0:c0:c7:9a:c6:6c:46:36:d3:f1:ad:bf:c0:2b:dd:
15:5b:da:6e:e1:e3:66:33:61:4e:10:14:f2:23:05:00:30:87:
52:7d:f1:0c:48:f4:03:af:b9:2b:25:b8:f1:53:1c:27:4c:6b:
82:46:25:0f:87:6c:3f:8c:1a:d5:bc:ec:09:6a:48:93:99:a4:
a4:a0:6b:23:f0:d7:e1:52:df:66:3a:79:74:11:f1:00:47:eb:
58:98:75:1a:43:7c:db:41:de:7c:1f:54:68:87:19:e0:c9:12:
be:31:3d:f8:b6:eb:1c:88:e5:9d:b7:f1:2f:b4:de:7e:b7:93:
cd:0b:b9:ae:7f:62:72:bc:f8:4a:ce:44:25:47:4e:63:b5:a2:
0d:5d:0e:38:cf:f7:94:31:30:38:f1:bc:25:6f:45:78:1f:1f:
14:0a:fd:0e:71:be:84:2d:05:51:3f:ba:7d:55:84:99:33:f1:
05:65:58:7b:0c:2f:6d:4e:8c:77:6d:de:13:5e:f0:e4:e0:c8:
de:ef:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:36:18 2026 by rpki-client