Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212789.roa
File: AS212789.roa (raw, json)
Hash identifier: Gqx/sFxB0ZmentR+JD7YYSnYJDNo/3gB8ynVGXNdgCg=
Subject key identifier: D4:B4:65:D7:0B:23:89:0A:3D:3A:75:35:78:A7:07:F3:E6:DE:2B:A9
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6C7E7D6ABBEB89FB673002C728C82213DD52E295
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212789.roa
Signing time: Thu 03 Jul 2025 15:51:59 +0000
ROA not before: Thu 03 Jul 2025 15:46:59 +0000
ROA not after: Thu 02 Jul 2026 15:51:59 +0000
asID: 212789
IP address blocks: 2a06:a005:1ca0::/44 maxlen: 48
2a06:a005:1cb0::/44 maxlen: 48
2a06:a005:1cc0::/44 maxlen: 48
2a06:a005:1cd0::/44 maxlen: 48
2a06:a005:1ce0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7e:7d:6a:bb:eb:89:fb:67:30:02:c7:28:c8:22:13:dd:52:e2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:59 2025 GMT
Not After : Jul 2 15:51:59 2026 GMT
Subject: CN=D4B465D70B23890A3D3A753578A707F3E6DE2BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:5c:73:9f:30:c3:9e:54:c1:68:7a:dc:ee:
ef:51:a8:a5:d1:ab:3b:90:40:fb:3d:b9:52:06:5a:
88:ee:72:d9:b1:65:55:f0:17:ab:be:8c:0a:dc:7b:
6e:33:2b:4d:15:46:2b:29:f0:a2:da:58:72:eb:12:
14:d2:25:e4:fa:6c:95:da:4c:ce:72:cc:70:56:7c:
58:96:d9:3e:4b:be:53:3a:84:3a:ad:9a:0b:36:ae:
01:46:af:07:b3:2b:1c:90:f9:38:bb:c3:7a:6d:cb:
83:81:ba:d1:52:35:5e:39:9a:92:96:51:1c:d9:3b:
8c:f5:6b:4c:f4:c0:0d:03:74:fa:ca:f6:bd:66:b7:
62:d2:f6:7c:fe:ef:88:46:a5:d0:63:0f:a9:f9:45:
d3:4b:b1:91:8a:cf:26:a4:af:a3:de:39:34:23:98:
1c:48:8b:23:6b:27:d6:e2:34:be:18:72:83:8e:18:
c1:4f:ec:9b:b2:34:69:75:e3:ec:b5:ee:96:9f:b5:
40:84:c7:54:c1:b8:ea:80:25:05:95:09:57:00:2c:
07:2b:34:05:5d:de:c0:f8:b0:ff:58:0f:6f:06:e7:
5c:f9:76:d2:01:02:f0:22:8b:7b:00:db:0d:0d:94:
31:1e:f4:47:2c:73:fa:bc:75:b7:54:70:6d:f0:5a:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:65:D7:0B:23:89:0A:3D:3A:75:35:78:A7:07:F3:E6:DE:2B:A9
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ca0::-2a06:a005:1cef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
10:28:8d:af:7c:b1:59:95:1f:0d:8a:3b:5e:33:64:df:7c:38:
ec:51:37:bf:a2:f6:1e:4b:67:fc:44:10:cb:f5:b7:fa:41:70:
2f:d0:be:70:a6:c3:7f:96:b4:e2:16:f3:ff:58:fa:3f:b0:12:
81:7c:e9:c6:a4:58:76:ce:bd:86:4f:2e:26:c5:52:21:4a:82:
c1:c1:3c:de:fb:fe:5b:ea:e6:df:8d:69:11:b6:e8:ed:55:c5:
fb:57:86:40:85:26:66:ce:e3:5d:a5:24:06:d5:3f:fe:29:44:
85:7c:ff:eb:4b:2f:df:3d:99:89:62:09:13:40:df:ef:42:f4:
a1:07:31:e7:5c:9c:2d:5d:f9:df:c6:84:04:50:cf:c2:29:50:
a6:b9:90:e3:78:fb:32:c9:ea:13:91:ff:46:70:37:6b:b8:62:
2b:3d:2a:d6:32:37:30:0e:70:72:89:8c:ca:2b:59:0b:e6:56:
e3:5a:86:f0:64:ef:71:1d:45:bb:ac:46:d0:c2:d3:7f:b8:c9:
bf:de:72:74:92:08:dd:04:e5:27:df:78:91:8e:b9:a7:2f:bb:
76:ea:87:64:14:f5:d9:88:1d:59:4e:a5:3d:62:6c:ad:30:67:
ea:c3:11:18:f5:87:d9:e4:f4:91:11:2f:9e:c8:dc:95:e7:46:
bf:9d:e6:02
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUbH59arvriftnMALHKMgiE91S4pUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ2NTlaFw0yNjA3MDIxNTUxNTlaMDMxMTAvBgNV
BAMTKEQ0QjQ2NUQ3MEIyMzg5MEEzRDNBNzUzNTc4QTcwN0YzRTZERTJCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XlxznzDDnlTBaHrc7u9RqKXR
qzuQQPs9uVIGWojuctmxZVXwF6u+jArce24zK00VRisp8KLaWHLrEhTSJeT6bJXa
TM5yzHBWfFiW2T5LvlM6hDqtmgs2rgFGrwezKxyQ+Ti7w3pty4OButFSNV45mpKW
URzZO4z1a0z0wA0DdPrK9r1mt2LS9nz+74hGpdBjD6n5RdNLsZGKzyakr6PeOTQj
mBxIiyNrJ9biNL4YcoOOGMFP7JuyNGl14+y17paftUCEx1TBuOqAJQWVCVcALAcr
NAVd3sD4sP9YD28G51z5dtIBAvAii3sA2w0NlDEe9Ecsc/q8dbdUcG3wWhwnAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQU1LRl1wsjiQo9OnU1eKcH8+beK6kwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEyNzg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEH
AQH/BB4wHDAaBAIAAjAUMBIDBwUqBqAFHKADBwQqBqAFHOAwDQYJKoZIhvcNAQEL
BQADggEBABAoja98sVmVHw2KO14zZN98OOxRN7+i9h5LZ/xEEMv1t/pBcC/QvnCm
w3+WtOIW8/9Y+j+wEoF86cakWHbOvYZPLibFUiFKgsHBPN77/lvq5t+NaRG26O1V
xftXhkCFJmbO412lJAbVP/4pRIV8/+tLL989mYliCRNA3+9C9KEHMedcnC1d+d/G
hARQz8IpUKa5kON4+zLJ6hOR/0ZwN2u4Yis9KtYyNzAOcHKJjMorWQvmVuNahvBk
73EdRbusRtDC03+4yb/ecnSSCN0E5SffeJGOuacvu3bqh2QU9dmIHVlOpT1ibK0w
Z+rDERj1h9nk9JERL57I3JXnRr+d5gI=
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:18:42 2025 by rpki-client