Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213045.roa
File: AS213045.roa (raw, json)
Hash identifier: WnmBAaZvoM7g3EcXymL/npi3iAZ9jlihpUTKun+iS8o=
Subject key identifier: D7:A3:20:99:77:28:8E:9C:40:2E:83:89:61:FD:5C:C1:B3:7A:FE:E8
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2E6DDD4B9F6786BBB7512915AB54C4B8950184E5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213045.roa
Signing time: Thu 03 Jul 2025 15:51:43 +0000
ROA not before: Thu 03 Jul 2025 15:46:43 +0000
ROA not after: Thu 02 Jul 2026 15:51:43 +0000
asID: 213045
IP address blocks: 2a06:a005:e20::/44 maxlen: 48
2a06:a005:1140::/44 maxlen: 48
2a06:a005:1ef0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6d:dd:4b:9f:67:86:bb:b7:51:29:15:ab:54:c4:b8:95:01:84:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:43 2025 GMT
Not After : Jul 2 15:51:43 2026 GMT
Subject: CN=D7A3209977288E9C402E838961FD5CC1B37AFEE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:03:69:05:7b:c6:b9:a3:fb:1d:7f:b6:ce:
31:e5:e0:23:c9:ec:8a:c8:51:cb:d6:d7:85:fc:41:
76:a9:85:99:0f:f1:0f:56:c3:75:15:41:59:2e:b4:
9d:55:a5:59:4e:7d:dc:6c:fa:1a:86:74:75:49:d5:
e9:9d:e3:1c:72:e5:71:17:6c:e4:03:fe:0f:2c:a6:
4f:dd:d4:81:85:94:a5:fb:fc:50:dd:7d:89:64:01:
fd:e5:4e:a5:e4:5e:03:35:dd:b2:3b:36:04:37:3f:
7e:11:0c:73:01:87:a5:1d:28:ca:62:03:d6:83:a1:
65:32:9a:59:b2:c4:d9:72:76:42:50:db:b7:df:07:
24:31:08:d3:a1:34:11:7f:32:b7:2c:a5:56:60:f2:
80:35:10:da:8e:12:63:a0:2f:27:b4:40:35:91:c4:
bf:f6:f0:69:a9:29:00:31:a1:09:72:32:da:0d:44:
be:41:59:9f:b0:14:30:d2:36:f3:9d:4e:82:5c:f1:
e7:e5:36:b5:66:65:ad:47:a9:10:ec:f4:ea:50:09:
5b:4c:df:85:dd:64:6d:17:9a:23:8d:6d:d5:b1:18:
e8:75:fd:19:8c:02:b4:b1:f3:64:5c:30:9f:bd:64:
39:33:ab:1d:87:2e:46:ab:f9:d7:07:25:03:9c:d3:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:20:99:77:28:8E:9C:40:2E:83:89:61:FD:5C:C1:B3:7A:FE:E8
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e20::/44
2a06:a005:1140::/44
2a06:a005:1ef0::/44
Signature Algorithm: sha256WithRSAEncryption
a0:d9:40:1b:c9:0b:f5:5f:1b:47:30:d6:b5:af:8a:50:6d:e5:
51:20:13:02:b6:ba:d5:b6:47:aa:8c:5b:06:81:d6:12:36:71:
1f:b5:96:20:e4:13:d1:96:28:77:65:66:bc:e1:66:9a:d8:e7:
d0:1d:dd:ae:92:c9:71:f1:c2:82:3e:c1:90:ea:b0:88:2d:9c:
29:97:97:40:ab:b9:8b:60:f7:31:d4:b3:40:e8:f2:07:cf:b4:
ff:e9:47:83:52:c2:d8:7e:34:a5:b6:62:30:07:36:c4:b4:9e:
78:3f:e3:c6:fb:80:14:5d:5d:a4:be:0a:a9:98:ab:bc:67:62:
25:4f:e7:9c:a9:22:9c:24:f8:2f:e8:55:1f:43:94:be:96:34:
8f:08:1e:df:5c:59:2d:3e:07:67:60:00:b6:0f:0f:25:55:75:
27:bb:5c:04:2c:95:00:c4:86:18:92:ac:f5:8d:93:2a:db:e3:
3b:aa:a0:4b:4a:77:0e:17:2e:61:52:75:46:9a:8b:51:98:34:
95:53:d0:ce:bf:70:ec:1c:d9:e4:15:55:5c:45:35:96:50:8c:
e5:68:69:eb:b3:ae:fa:7a:dc:81:42:67:29:d7:26:57:b4:d9:
98:66:b2:8e:7e:dd:a9:04:88:f1:7b:5f:8f:9b:6d:49:b4:75:
36:dc:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:18:42 2025 by rpki-client