Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213768.roa
File: AS213768.roa (raw, json)
Hash identifier: JhJjFu86rooxSaL7jn9bzxrpu6DgJp6crAoUNWlzdU8=
Subject key identifier: B7:59:6A:FC:E6:90:95:EE:83:DD:32:4B:A2:C5:BA:C1:D3:32:6E:F9
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2144EC7A887949CCAD3677E0FCFFD6139347F556
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213768.roa
Signing time: Sun 21 Jun 2026 19:58:55 +0000
ROA not before: Sun 21 Jun 2026 19:53:55 +0000
ROA not after: Sun 20 Jun 2027 19:58:55 +0000
asID: 213768
IP address blocks: 202.50.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:44:ec:7a:88:79:49:cc:ad:36:77:e0:fc:ff:d6:13:93:47:f5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 21 19:53:55 2026 GMT
Not After : Jun 20 19:58:55 2027 GMT
Subject: CN=B7596AFCE69095EE83DD324BA2C5BAC1D3326EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:c6:dd:e7:2f:74:20:00:95:f6:0b:b3:dc:
84:96:e0:70:97:7e:ad:35:30:d2:e5:c7:a5:5d:30:
ef:b3:0d:42:40:11:04:2d:1a:26:af:f5:8b:83:f8:
f7:e8:8c:a8:c3:26:b3:98:63:2f:74:94:ac:6e:13:
a6:e6:9c:98:4e:21:d4:60:f7:75:fa:83:80:4b:c2:
30:f6:87:4b:e7:15:29:9a:6e:0b:d6:4f:da:e8:68:
d7:4e:6c:d4:46:fd:c8:2f:9d:9a:7f:86:44:35:cb:
79:c7:cd:db:c3:1d:9a:45:15:ea:d7:5b:da:08:2d:
ee:46:76:3d:3d:62:87:3a:8b:c8:42:52:69:eb:34:
4e:c0:fd:a0:00:6b:4d:43:b8:2c:36:c0:e7:bd:e7:
47:39:40:44:ca:f3:c7:2d:28:fd:12:44:42:45:70:
e6:27:ab:5c:d1:16:67:78:fa:27:2c:ed:70:36:07:
9a:b1:af:a3:75:1b:81:4f:c6:85:a7:e2:a3:3c:0e:
29:d2:7e:c2:a6:10:4b:84:21:b5:e1:27:91:00:3a:
a4:db:3d:fc:68:40:eb:97:13:1a:45:7f:83:9b:52:
76:21:81:9d:ea:99:18:a2:25:db:97:12:d0:9b:f3:
09:ca:b8:01:b9:ca:c6:23:2e:2e:4f:f6:a6:a8:82:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:59:6A:FC:E6:90:95:EE:83:DD:32:4B:A2:C5:BA:C1:D3:32:6E:F9
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.53.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:eb:83:a5:32:7b:59:5a:16:24:bb:44:e6:bb:b9:54:29:43:
9e:c1:cd:50:30:e8:96:1d:5f:9f:3b:9c:0a:72:08:ec:ba:91:
ac:c5:f9:20:d9:90:10:a4:ae:72:f5:15:e4:a8:06:be:e2:48:
18:e1:3d:0a:9c:7f:5b:87:9f:bc:b5:60:cf:3a:8f:ab:cf:57:
a0:19:a8:1c:4c:f1:8d:9c:71:5d:52:23:f5:10:54:c4:e3:59:
9c:03:8d:70:f5:ef:7f:78:80:73:c4:c8:b3:6a:de:21:bf:8d:
af:81:d2:c1:69:33:3b:08:4e:c4:8c:9b:f3:bd:20:f6:d6:19:
6a:ac:78:c6:78:29:e7:54:da:82:da:91:ef:08:23:ed:5e:72:
ee:e4:4d:67:18:be:75:3f:9e:05:5b:b1:1d:5f:38:57:a7:9e:
83:81:d7:6a:b2:a9:aa:d5:9b:e6:bd:6f:3d:3e:4b:34:41:b0:
6f:20:7a:51:e2:c1:cd:15:ec:93:b9:22:93:24:4c:51:d7:5c:
d1:86:b4:5e:6e:15:da:e3:99:b6:10:23:1b:20:a7:f5:9f:78:
86:b0:5a:f6:07:ea:bb:c3:66:7a:29:e2:e1:c3:ef:e2:ae:00:
6a:73:a4:35:ec:52:d5:c5:b3:e1:52:e0:44:1c:b7:36:4e:5b:
cc:2b:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 14:13:25 2026 by rpki-client