Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213122.roa
File: AS213122.roa (raw, json)
Hash identifier: 09qwktWPnV4ZpdAWi+jyfHbIuuHuDvwyvzZse5BcbVY=
Subject key identifier: 96:E2:70:56:5C:91:DD:CB:B1:89:64:03:53:C9:F5:45:E8:FC:DE:8F
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1CBDA9599EDA72D4AE1686261EC670ECFC69B0D8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213122.roa
Signing time: Thu 03 Jul 2025 15:51:44 +0000
ROA not before: Thu 03 Jul 2025 15:46:44 +0000
ROA not after: Thu 02 Jul 2026 15:51:44 +0000
asID: 213122
IP address blocks: 185.147.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:bd:a9:59:9e:da:72:d4:ae:16:86:26:1e:c6:70:ec:fc:69:b0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:44 2025 GMT
Not After : Jul 2 15:51:44 2026 GMT
Subject: CN=96E270565C91DDCBB189640353C9F545E8FCDE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:49:21:09:4e:56:01:70:1b:a3:1d:f0:29:
1c:67:73:2b:f1:c3:1b:10:07:8c:73:dc:9a:74:12:
16:8d:72:d2:0d:64:a5:9a:a8:ad:3d:0d:14:ee:77:
a3:0d:bb:58:51:62:51:c8:d2:e1:a0:32:7a:2f:eb:
e1:1d:ed:52:7b:9a:9c:82:01:5d:d0:9c:ea:46:a4:
86:c4:29:fd:7b:ea:7c:ba:11:fe:b3:37:51:7f:0a:
e8:b4:ec:70:78:14:a7:ac:09:c9:6f:a1:b1:56:43:
ab:ce:e6:36:8e:25:3b:10:97:26:b0:84:82:68:bd:
5f:8a:17:c9:b8:3d:eb:3e:80:23:ba:97:90:cb:17:
36:24:fc:d4:cb:48:2c:f0:1b:e4:fe:80:58:e7:f4:
05:6f:cd:79:24:e0:4c:77:af:b8:ef:57:96:cd:fb:
62:72:46:ed:e9:01:58:62:69:76:df:63:96:27:b6:
5f:ba:eb:45:7a:80:24:5b:33:20:c7:7a:10:06:da:
3c:db:2d:63:b7:71:ad:1f:49:5d:9b:b5:23:40:22:
50:b1:28:93:fc:79:10:40:42:90:21:d1:28:8c:ec:
a4:43:77:94:88:39:df:a9:08:e2:6e:59:23:10:9a:
ef:ac:34:2b:33:c1:1c:34:dd:2f:47:1a:7d:0e:70:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E2:70:56:5C:91:DD:CB:B1:89:64:03:53:C9:F5:45:E8:FC:DE:8F
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213122.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.34.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c0:5c:97:88:65:4e:58:65:07:cb:47:9e:ab:07:d9:6b:1d:
0d:2a:25:cb:2d:06:d5:65:0d:b5:8d:cb:0d:57:94:fd:fd:38:
f4:5c:77:9e:d5:5d:36:93:0a:f0:b3:76:a2:e5:d9:03:dc:0b:
0a:8b:e0:de:4c:5f:71:10:36:37:46:9e:da:1f:4a:f6:11:83:
2b:3b:ac:b4:a2:85:d3:c7:79:bc:36:f6:6e:cf:95:b3:b5:46:
d7:fa:cc:81:a5:17:31:bb:df:06:39:7d:83:68:09:96:d2:cc:
b0:d4:4f:a7:8f:89:7c:57:6e:32:b5:bc:65:f3:19:42:06:d9:
22:0b:f0:2f:6b:90:f0:8d:0e:01:b6:1c:ce:7c:cf:5c:b8:38:
5c:eb:8c:1e:ab:6e:65:8a:12:0b:58:37:46:84:c9:cc:e4:d0:
5a:cb:ac:4b:1f:b8:7d:a2:00:c8:53:5b:08:a0:62:f3:b6:6f:
f9:de:49:5e:5d:61:4f:01:5c:08:af:ae:8d:42:ae:ff:0d:90:
ce:44:b6:d5:00:69:91:ec:b1:bf:6d:3c:9c:72:eb:bc:4d:1a:
02:8d:0a:69:44:ed:ba:45:91:2d:99:4a:9f:4d:cd:00:13:82:
8e:9e:dd:a8:ab:83:60:84:89:15:ee:5e:3d:29:2c:0c:64:c1:
62:50:c1:1c
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUHL2pWZ7actSuFoYmHsZw7PxpsNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ2NDRaFw0yNjA3MDIxNTUxNDRaMDMxMTAvBgNV
BAMTKDk2RTI3MDU2NUM5MUREQ0JCMTg5NjQwMzUzQzlGNTQ1RThGQ0RFOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtD0khCU5WAXAbox3wKRxncyvx
wxsQB4xz3Jp0EhaNctINZKWaqK09DRTud6MNu1hRYlHI0uGgMnov6+Ed7VJ7mpyC
AV3QnOpGpIbEKf176ny6Ef6zN1F/Cui07HB4FKesCclvobFWQ6vO5jaOJTsQlyaw
hIJovV+KF8m4Pes+gCO6l5DLFzYk/NTLSCzwG+T+gFjn9AVvzXkk4Ex3r7jvV5bN
+2JyRu3pAVhiaXbfY5Yntl+660V6gCRbMyDHehAG2jzbLWO3ca0fSV2btSNAIlCx
KJP8eRBAQpAh0SiM7KRDd5SIOd+pCOJuWSMQmu+sNCszwRw03S9HGn0OcMj1AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUluJwVlyR3cuxiWQDU8n1Rej83o8wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEzMTIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuZMiMA0GCSqGSIb3DQEBCwUAA4IBAQCQwFyXiGVO
WGUHy0eeqwfZax0NKiXLLQbVZQ21jcsNV5T9/Tj0XHee1V02kwrws3ai5dkD3AsK
i+DeTF9xEDY3Rp7aH0r2EYMrO6y0ooXTx3m8NvZuz5WztUbX+syBpRcxu98GOX2D
aAmW0syw1E+nj4l8V24ytbxl8xlCBtkiC/Ava5DwjQ4BthzOfM9cuDhc64weq25l
ihILWDdGhMnM5NBay6xLH7h9ogDIU1sIoGLztm/53kleXWFPAVwIr66NQq7/DZDO
RLbVAGmR7LG/bTyccuu8TRoCjQppRO26RZEtmUqfTc0AE4KOnt2oq4NghIkV7l49
KSwMZMFiUMEc
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:07:35 2025 by rpki-client