Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: Z6cFs9cY66fn0mUh4Kv+b4tyBFiLzU2mgy3+EuiU2TI=
Subject key identifier: C5:63:9B:86:D7:84:74:60:88:0E:C5:B7:97:07:82:79:C2:E9:9C:B6
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 212E36C8D5E5E51B01963395CD8721C6C65ED3DE
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212238.roa
Signing time: Tue 08 Sep 2026 17:59:10 +0000
ROA not before: Tue 08 Sep 2026 17:54:10 +0000
ROA not after: Tue 07 Sep 2027 17:59:10 +0000
asID: 212238
IP address blocks: 206.53.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2e:36:c8:d5:e5:e5:1b:01:96:33:95:cd:87:21:c6:c6:5e:d3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 8 17:54:10 2026 GMT
Not After : Sep 7 17:59:10 2027 GMT
Subject: CN=C5639B86D7847460880EC5B797078279C2E99CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:db:84:eb:0e:b2:68:ff:24:b5:96:d1:82:
2e:b9:a1:21:a8:d9:48:7d:6a:74:88:fc:f4:3a:84:
3e:d2:a8:be:11:99:71:2a:e3:44:1d:67:71:9a:1c:
3a:1e:fa:de:7a:c9:3c:eb:bf:3d:29:1e:84:7c:0f:
5b:20:52:82:33:2f:73:af:52:c7:46:1c:01:50:99:
74:91:f5:a7:c2:d3:46:6f:21:dd:62:fa:f6:31:d7:
b9:0d:ec:bf:27:96:47:ea:fe:7c:14:b0:d1:87:f5:
29:d8:b1:51:8f:60:ec:a6:c7:6e:58:cd:fb:59:6f:
d8:8c:17:96:90:10:68:d0:f6:95:d7:9b:02:a9:70:
8f:ca:a8:e6:52:d4:8a:0b:d8:11:bc:dd:29:93:2e:
3a:31:55:6e:cb:cd:a7:1c:fb:b6:21:62:aa:35:b3:
c3:a6:21:59:7b:19:af:57:73:b5:54:ce:08:62:99:
bf:a7:90:c5:09:ff:1a:c0:9a:ce:85:a6:5f:98:cb:
e5:ad:99:c0:38:c3:83:2c:96:b1:19:08:88:db:b7:
65:ad:d7:ae:12:b6:ab:5c:44:73:d9:2a:a2:80:27:
60:9a:f7:f8:6c:95:e7:02:b5:da:a3:35:82:83:a8:
c7:50:52:4f:d7:a1:b3:95:ff:e1:9d:7b:1e:97:0f:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:9B:86:D7:84:74:60:88:0E:C5:B7:97:07:82:79:C2:E9:9C:B6
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:75:62:bf:d7:a8:ad:05:11:2c:83:46:11:df:a0:e4:23:a3:
f6:94:75:bb:a4:27:2d:b2:d6:55:c1:bf:de:75:14:b3:a9:eb:
91:1b:d9:3d:43:f5:0e:ed:4e:8d:04:09:76:0b:20:8d:87:e0:
9a:52:9e:27:c2:46:3f:75:d4:59:82:89:e6:9d:28:00:77:6a:
a1:2c:14:a8:0e:e3:8e:ac:c6:52:c7:d4:23:d6:e1:94:46:f5:
8d:a3:22:01:45:cf:3c:79:80:73:a7:d1:84:53:ae:fe:b6:6b:
f4:62:b0:3a:a5:80:d6:04:79:66:66:55:0c:52:ca:d5:28:af:
62:7a:82:27:7a:23:23:33:6a:d6:69:d1:fa:1a:f8:7a:a1:c3:
2f:34:91:a4:3f:0a:ad:3f:ef:a9:eb:5d:98:35:64:00:2b:4f:
90:18:09:69:22:f5:76:7d:0c:42:61:b4:e8:2e:1e:dc:a9:bc:
d4:c0:73:e9:36:20:1c:92:85:2c:5f:b4:2c:7f:df:76:6c:f1:
6d:c0:2f:f5:42:99:29:f3:7d:3b:47:86:2c:d5:d8:04:93:33:
60:0f:d7:35:ca:22:50:45:8d:13:ee:2a:d3:7c:86:8f:b0:11:
09:5a:f0:83:91:1f:40:73:79:2e:85:f2:4b:48:8e:2d:2a:06:
17:eb:42:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:15:38 2026 by rpki-client