Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213520.roa
File: AS213520.roa (raw, json)
Hash identifier: X8T6OtS3yHBLkivgGkAJOozIXCsX6sn0E40eF5nlNws=
Subject key identifier: FA:F4:CB:EF:0D:0E:1B:54:89:CD:58:C5:64:01:51:24:40:D4:81:0E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 41C531517D29FE1FD91F697AD18ACFEBD90E73F9
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213520.roa
Signing time: Wed 07 Oct 2026 01:57:36 +0000
ROA not before: Wed 07 Oct 2026 01:52:36 +0000
ROA not after: Wed 06 Oct 2027 01:57:36 +0000
asID: 213520
IP address blocks: 2a06:9f43::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c5:31:51:7d:29:fe:1f:d9:1f:69:7a:d1:8a:cf:eb:d9:0e:73:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 7 01:52:36 2026 GMT
Not After : Oct 6 01:57:36 2027 GMT
Subject: CN=FAF4CBEF0D0E1B5489CD58C56401512440D4810E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:43:ec:31:9d:c0:2e:c6:08:ee:30:b5:2f:
a3:20:48:fa:df:5d:4f:4d:4f:e3:2b:3d:f6:11:11:
39:4a:9d:23:22:0d:78:e7:62:50:d3:c8:35:16:c0:
51:22:fd:ba:51:90:2c:53:f3:94:9d:4b:24:e4:27:
6d:18:db:b6:be:b0:a5:1f:0c:61:91:4b:ea:d4:34:
78:60:f4:9b:03:9b:e4:ec:89:6d:43:ee:eb:fe:b3:
47:01:17:8b:8e:e9:45:91:3c:f5:a6:7b:c1:5c:6b:
e8:c6:33:8f:4c:1e:3a:85:db:de:7b:d6:3f:c5:11:
33:73:00:fd:b3:8d:a3:dd:d9:9a:d6:87:f5:94:c8:
e0:b8:36:72:7a:04:c7:94:71:d1:8d:ec:93:87:69:
9d:e6:64:7e:7c:f0:95:a5:f3:65:5e:b0:52:5e:fe:
c8:74:aa:9e:fb:2e:f5:51:49:13:c4:22:41:13:33:
4c:f2:06:21:8d:c8:83:fa:54:32:27:99:6e:9d:3c:
59:03:6a:73:93:0f:71:8a:00:4d:db:a4:60:ad:17:
ea:2a:a5:ec:56:d5:03:1e:4c:72:88:c6:c8:e3:1c:
bb:41:fd:bc:8b:10:88:d4:83:2f:70:a1:11:b4:e4:
9c:a9:50:4e:37:a6:29:96:38:0f:d4:1e:75:3a:2b:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F4:CB:EF:0D:0E:1B:54:89:CD:58:C5:64:01:51:24:40:D4:81:0E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213520.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f43::/32
Signature Algorithm: sha256WithRSAEncryption
b3:61:35:a9:f9:3e:cf:67:a3:e1:90:36:96:5b:1f:8e:f9:85:
3f:2e:59:cb:8e:7e:ef:cf:83:18:4a:56:56:cc:bd:46:95:ee:
79:e5:0b:1a:3c:fa:a8:51:91:1a:77:81:a2:e7:da:c8:93:21:
d5:b2:55:21:05:03:88:b1:b9:14:63:38:dc:55:7e:50:44:2d:
d4:d6:95:52:cc:10:c1:76:c1:36:24:78:a4:cc:a6:04:6a:c2:
da:17:be:ad:64:ed:a3:39:76:9f:c2:bc:3b:48:31:68:eb:81:
16:c8:44:3f:da:76:42:19:48:5b:e3:11:5f:b4:43:af:b1:42:
11:20:e1:43:cd:e5:e9:a3:59:6f:89:5f:f3:49:78:67:2f:7e:
38:39:76:d1:1c:28:85:3a:d7:f7:9d:9f:14:2a:c6:75:57:1c:
7e:fc:4b:9a:04:c0:59:8e:76:29:b4:b9:c8:f6:9e:bf:92:37:
cf:39:e0:bc:09:bb:7a:6d:d4:3a:ad:75:bd:02:06:f8:90:c1:
50:5e:9e:3c:ea:be:ea:47:bf:cc:b7:31:42:87:f1:59:f2:19:
c8:07:5e:fc:26:d0:5f:52:d9:e6:8b:63:f2:6a:89:07:c6:e8:
c4:ae:a4:38:65:ca:de:5c:5c:de:8e:68:97:83:85:66:20:f5:
64:79:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 21:39:53 2026 by rpki-client