Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: 54QRl8f4AfVsEJlUH321O7dofbQM4ey9Y0HZ+2+PNEQ=
Subject key identifier: 37:73:3B:08:EC:BF:BE:E1:94:BB:37:27:96:35:7E:33:8E:99:5B:23
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6251D77BF571499F53DD33678A2E03267346733F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212238.roa
Signing time: Tue 07 Oct 2025 17:51:11 +0000
ROA not before: Tue 07 Oct 2025 17:46:11 +0000
ROA not after: Tue 06 Oct 2026 17:51:11 +0000
asID: 212238
IP address blocks: 206.53.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:51:d7:7b:f5:71:49:9f:53:dd:33:67:8a:2e:03:26:73:46:73:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 7 17:46:11 2025 GMT
Not After : Oct 6 17:51:11 2026 GMT
Subject: CN=37733B08ECBFBEE194BB372796357E338E995B23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:b5:d0:48:24:a9:d7:fa:c1:dc:0d:1d:9e:
4b:c4:f1:97:59:7b:d3:e0:1a:e3:5f:e6:a0:bd:4c:
33:8f:54:11:55:0b:b1:f9:89:a3:7e:0d:bd:24:76:
90:c7:59:7e:f1:df:52:17:93:30:a1:64:50:92:e0:
3a:81:5d:bb:1a:e4:fc:19:d7:2e:a2:54:33:21:dd:
98:b2:df:8b:0d:26:02:6f:5b:9b:6d:29:09:39:50:
64:cc:a1:dd:5f:1a:d9:3b:1a:7e:1e:44:41:17:eb:
5c:d0:ea:92:22:e3:72:53:08:18:18:76:29:34:d2:
a3:94:6c:a7:d6:6c:53:4b:d1:f0:09:e0:fb:92:08:
d6:c1:81:c4:fd:f8:fd:c9:2e:44:13:00:6d:22:61:
28:b1:9e:7d:21:63:d5:cb:80:11:aa:10:2a:be:17:
41:2e:a5:32:1a:9c:50:9f:16:bf:c0:a9:f4:9d:2f:
da:11:ef:6d:fd:66:52:cf:b4:da:b9:05:85:64:de:
63:99:05:84:ff:0d:77:85:d0:fa:3f:8d:37:19:fb:
61:d6:7d:02:92:d0:00:86:2e:d9:16:cb:0e:60:71:
f6:cc:54:13:9f:15:26:ed:46:0a:64:66:26:55:58:
e5:ee:6a:ab:2f:35:e9:1b:2a:4c:59:20:c4:03:14:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:73:3B:08:EC:BF:BE:E1:94:BB:37:27:96:35:7E:33:8E:99:5B:23
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.1.0/24
Signature Algorithm: sha256WithRSAEncryption
79:82:29:f6:22:1b:c6:64:1b:29:94:06:9f:58:be:8c:9b:8e:
7a:c5:55:e9:41:8b:33:28:b4:ed:2d:d3:be:68:b1:2b:8b:1a:
a5:cb:ec:a7:6d:9f:e7:7a:4a:d0:48:b0:a8:61:92:28:1b:f3:
5a:8b:7c:d4:f9:79:02:ac:a6:4b:e9:2d:53:66:1e:3e:83:4a:
8d:07:03:81:7b:59:00:07:1b:59:b1:51:4a:c1:6f:7c:98:42:
8b:4b:6a:07:4e:2f:96:bf:3c:d5:a0:98:15:32:fa:d7:80:49:
1d:9d:d7:2b:e2:44:79:9d:44:d7:9c:42:99:73:cb:62:c1:4b:
38:73:d1:74:95:9c:2d:31:08:3f:87:1e:74:1e:14:04:2c:4b:
43:88:bf:4e:13:11:24:2c:0f:e3:7f:0e:b4:14:14:d6:15:5a:
76:3e:32:e6:03:ad:94:0c:a3:2c:b8:1a:42:e5:26:e9:da:e4:
a3:12:1a:36:5e:b2:8d:08:a8:ed:4a:10:02:26:62:62:04:5b:
1a:bd:01:80:04:37:7a:7d:ec:b9:6e:12:85:80:16:0b:f4:d9:
0c:e8:b0:8c:e9:5e:9f:8b:28:48:a4:ce:7b:e9:ef:e8:72:99:
c8:47:09:c3:1e:f0:20:f0:a4:a3:89:26:c3:a1:e6:d3:45:14:
52:db:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:19:34 2025 by rpki-client