Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213124.roa
File: AS213124.roa (raw, json)
Hash identifier: wRJEa4RDXz9Ebr71//IvuuGY/9U1xJ0wiHGFTWuA5qw=
Subject key identifier: 1D:63:24:EB:1E:AA:66:18:9B:10:F8:5A:57:14:9E:F7:BF:EE:A0:EA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 135F3401E78A38888667A864F9DB32490BD4D076
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213124.roa
Signing time: Thu 02 Oct 2025 11:15:31 +0000
ROA not before: Thu 02 Oct 2025 11:10:31 +0000
ROA not after: Thu 01 Oct 2026 11:15:31 +0000
asID: 213124
IP address blocks: 2a09:54c1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5f:34:01:e7:8a:38:88:86:67:a8:64:f9:db:32:49:0b:d4:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 2 11:10:31 2025 GMT
Not After : Oct 1 11:15:31 2026 GMT
Subject: CN=1D6324EB1EAA66189B10F85A57149EF7BFEEA0EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:a1:f7:0a:84:06:25:b1:10:0c:b3:52:31:
c0:37:0d:c7:86:32:aa:f2:36:bb:8c:e2:70:98:b2:
e9:5d:56:3b:db:96:d7:4b:d6:a7:dd:b3:5c:d4:e5:
ae:f6:4b:5c:80:fb:e4:71:5a:fc:f2:07:4b:15:d9:
e8:a7:99:02:13:04:a0:f4:c7:af:73:0c:f9:28:d7:
ff:61:b2:e4:92:5d:d7:00:88:c1:5b:b5:5b:3d:bd:
20:c2:0b:11:f0:a6:c3:64:dc:d4:b9:00:de:dd:00:
4f:dd:3d:82:9a:32:36:d8:9e:37:53:aa:25:95:a8:
51:52:a2:0e:fb:e0:60:63:a3:cc:3a:4c:39:a3:5c:
23:9b:a9:e3:86:93:84:b1:83:bd:76:a8:bf:b5:79:
c7:cc:2f:b5:b7:5f:29:e6:91:ec:39:14:76:fd:54:
55:6d:16:59:fd:71:1d:5c:04:7d:33:76:7e:10:1d:
db:99:b6:2d:ec:c5:6d:e1:6d:c7:d1:e8:ee:18:58:
f0:c9:86:27:e4:26:04:9a:81:78:f6:a9:4a:63:47:
e5:b0:91:b5:d1:c4:a1:e3:12:49:4a:42:92:21:53:
b0:ff:47:95:37:72:07:28:a6:14:4d:58:cf:3b:76:
fb:c0:77:d9:b0:af:94:ea:d1:fb:44:25:32:79:20:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:63:24:EB:1E:AA:66:18:9B:10:F8:5A:57:14:9E:F7:BF:EE:A0:EA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213124.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c1::/32
Signature Algorithm: sha256WithRSAEncryption
9b:87:83:d1:db:83:d5:51:24:ca:4f:98:a3:e4:27:c0:84:de:
10:35:cc:7f:ba:d0:8c:fa:f5:89:9b:b3:51:99:c4:be:a7:9e:
0a:40:72:a0:71:b4:17:f0:50:c4:9c:74:f2:c0:05:17:29:5a:
bd:42:b0:21:3b:c5:9d:b1:78:2c:79:63:73:74:b0:91:2e:95:
b6:77:41:fc:0d:3a:5e:66:c5:dd:eb:41:02:5f:4c:44:57:28:
91:15:d7:58:2d:4b:b6:63:a3:4a:79:9c:d4:6b:6e:bc:69:bc:
7c:56:9a:25:96:88:30:b8:bf:77:5f:12:09:e3:49:20:2f:21:
48:ac:28:08:47:6b:aa:27:30:5b:5d:78:25:e9:12:47:9f:e3:
ce:16:4d:50:bc:ee:fb:aa:b3:30:30:92:5f:3a:e8:cf:c7:b1:
61:80:b6:4a:50:2e:9c:18:88:5b:0f:b9:20:77:04:bf:9e:31:
5c:b9:35:3c:f2:68:c8:22:e3:d8:b2:c2:d3:53:5f:a4:6b:14:
cd:f0:8f:47:07:e5:2b:a4:ef:05:d1:f0:b9:ec:61:5e:49:2b:
9d:c7:53:43:25:0f:28:cd:e3:7c:dc:79:1c:91:e0:18:a3:3b:
13:9a:5a:33:58:4a:fc:80:8e:77:c9:f4:3c:13:2e:b2:e2:8a:
53:45:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:19:34 2025 by rpki-client