Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218758.roa
File: AS218758.roa (raw, json)
Hash identifier: c48SjJI0XTheVEuNdvIwElqgJQFg4Njfg7Yo202OyZU=
Subject key identifier: 5C:69:20:65:42:32:3E:F7:17:A1:F0:05:B4:89:4E:15:F0:04:FF:60
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 36D384039F5D5C6C94A639EF4CDDBB24E4988440
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218758.roa
Signing time: Fri 04 Sep 2026 12:33:29 +0000
ROA not before: Fri 04 Sep 2026 12:28:29 +0000
ROA not after: Fri 03 Sep 2027 12:33:29 +0000
asID: 218758
IP address blocks: 2a0d:d904::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d3:84:03:9f:5d:5c:6c:94:a6:39:ef:4c:dd:bb:24:e4:98:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 4 12:28:29 2026 GMT
Not After : Sep 3 12:33:29 2027 GMT
Subject: CN=5C69206542323EF717A1F005B4894E15F004FF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:34:63:d5:56:03:6f:46:28:de:c9:fd:26:
c9:84:ab:aa:5b:3e:88:bf:57:51:50:1f:38:b1:ae:
39:59:ad:5f:09:51:37:51:73:2e:d8:b1:f8:dc:42:
0f:11:96:21:86:0a:65:72:7d:03:d4:9f:8f:0c:0e:
09:a4:b0:7d:c6:6c:b8:56:bc:00:3e:1f:be:7b:28:
da:9e:13:52:cd:7f:06:b3:dd:c3:55:08:77:b9:dd:
e8:9d:27:c1:6d:a3:3d:a7:e3:40:be:c0:6f:b0:d4:
53:ff:5b:e0:5b:01:17:43:83:64:ff:54:75:b1:3a:
f2:d3:7f:09:20:ba:ff:34:e3:48:0d:95:b1:42:97:
9d:49:bd:0a:04:43:57:58:67:04:c4:ec:95:22:57:
7d:71:7f:70:38:4f:62:01:30:66:59:86:21:60:e7:
dc:35:42:a9:78:a6:0e:2d:b0:63:9e:79:3e:85:34:
08:e0:22:27:b4:43:9b:4d:0d:ba:3e:18:1c:4c:31:
63:dd:56:6f:24:fc:a8:fc:63:dc:1b:c5:7e:53:e2:
c7:dd:aa:53:0a:e3:ac:f0:0a:22:3d:98:b4:ba:35:
d5:e9:7e:0a:80:2f:a3:0f:8d:dc:c4:7a:02:9f:30:
6b:f2:1b:25:b6:24:24:ca:3e:a6:39:8d:a5:f1:69:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:20:65:42:32:3E:F7:17:A1:F0:05:B4:89:4E:15:F0:04:FF:60
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d904::/32
Signature Algorithm: sha256WithRSAEncryption
37:c4:87:c4:54:02:88:f6:de:de:c0:e8:2a:74:82:f6:56:d2:
42:0c:38:e3:a9:3d:61:83:fe:7f:7b:5b:38:df:9c:bb:7d:d3:
a6:a8:7a:07:f7:5a:99:8a:ed:f6:1d:e8:78:cf:11:a9:36:48:
2c:78:83:5f:bd:3c:ad:e4:70:f1:70:de:a1:79:80:fc:73:d8:
2f:19:01:c3:ff:d7:98:c6:46:24:01:ba:41:b0:9d:56:d4:47:
22:64:bd:98:ad:2f:bc:81:08:62:61:0d:24:b5:5a:ac:c5:a6:
03:bd:77:28:cd:90:e3:65:5e:a5:c3:13:f2:cc:39:5f:65:f5:
35:ae:92:84:34:19:f1:f9:59:f8:fe:31:09:da:1e:69:c6:8d:
32:37:ed:5f:cd:af:13:1f:e8:7d:a9:ea:51:30:6b:22:36:db:
88:93:90:86:a6:4f:cb:7b:ec:a0:c1:69:b7:dd:d9:44:49:94:
b5:44:30:a5:fb:69:c7:59:1d:db:a5:ed:6f:e7:de:ed:4c:da:
45:3e:e7:c0:5d:a6:44:b9:cb:04:23:2f:d7:1c:5e:88:62:b3:
95:c7:b5:a8:fe:ec:f5:0d:fe:ff:2c:5b:26:2d:62:9a:05:e5:
a7:44:8b:98:4a:4c:e9:2d:a7:d3:15:1d:51:b4:5f:b1:90:75:
eb:13:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:31:32 2026 by rpki-client