Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23033.roa
File: AS23033.roa (raw, json)
Hash identifier: /gbn2PDDekOQOimVMPIsra5zICEmdqNcDfU7hLRPVSo=
Subject key identifier: CD:6B:78:B5:E2:40:BC:9B:93:88:DC:88:F7:A5:B4:8F:2D:56:37:D2
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 407D1916C61A9483340AED6C26F05EE6C77E4037
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23033.roa
Signing time: Thu 03 Jul 2025 15:51:25 +0000
ROA not before: Thu 03 Jul 2025 15:46:25 +0000
ROA not after: Thu 02 Jul 2026 15:51:25 +0000
asID: 23033
IP address blocks: 160.202.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:7d:19:16:c6:1a:94:83:34:0a:ed:6c:26:f0:5e:e6:c7:7e:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:25 2025 GMT
Not After : Jul 2 15:51:25 2026 GMT
Subject: CN=CD6B78B5E240BC9B9388DC88F7A5B48F2D5637D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:d0:47:01:03:41:f9:75:e8:29:ac:11:92:
8d:ca:fc:6a:80:f3:79:88:03:c4:74:8b:89:fd:52:
c8:f7:a0:9f:a7:96:fc:26:dc:5a:ff:87:ec:af:39:
2b:ba:7e:81:45:23:4c:57:bd:cf:38:be:94:dd:3c:
27:e2:9e:a8:01:be:f9:89:b0:65:e7:9d:eb:8a:da:
18:29:d9:c0:c2:49:01:cb:a3:6e:f6:ae:92:e7:05:
4e:d7:d2:0d:f2:5d:22:8c:0b:11:ec:a2:d9:02:53:
de:19:82:54:c7:b3:20:6c:df:f8:03:3b:8c:6f:be:
64:c0:8c:b1:38:57:a2:ad:a7:6d:eb:ab:4d:49:7c:
4b:51:2f:c2:db:01:f5:fd:24:f5:7a:9a:cf:77:89:
c6:91:32:0a:84:ac:82:20:2e:c8:79:4c:fe:16:ef:
8e:d6:55:37:3b:41:e8:de:de:8d:ff:50:50:1b:c4:
a8:03:f2:73:b1:87:56:e2:b6:92:fd:f9:34:d4:f1:
de:46:fc:d4:74:b5:3e:56:27:24:1f:11:2c:3b:d7:
62:dd:dd:cd:60:98:fb:eb:d1:12:62:0c:9d:30:3d:
f3:f1:14:ee:fb:f5:a5:45:f0:21:12:dd:d7:fe:bd:
cf:85:24:3f:0a:20:38:92:db:b6:93:25:f0:b8:9f:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:78:B5:E2:40:BC:9B:93:88:DC:88:F7:A5:B4:8F:2D:56:37:D2
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.132.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:3d:83:07:a3:bf:d0:a7:97:c2:7d:68:c7:94:db:72:d8:59:
40:08:63:bd:b0:6e:eb:f1:ac:57:98:37:f8:c7:80:1b:28:4a:
a2:95:30:17:86:3d:ee:72:a0:eb:f2:1e:c3:24:5b:01:22:09:
4b:52:5e:f2:4a:2c:65:9e:cc:ad:93:66:bb:e8:23:fe:b3:ff:
d1:2b:77:3a:b3:6e:e6:4e:3e:59:f3:a2:1d:29:ee:46:95:12:
90:ca:45:75:a2:97:a5:bd:38:98:72:b1:95:dc:61:f4:82:41:
71:39:e3:89:72:d6:5d:98:bb:47:2a:8b:a1:26:b4:0d:03:2b:
ee:bb:a8:2c:fc:14:a2:eb:df:a2:a8:35:d7:77:a3:68:c8:60:
d9:37:06:af:d7:8a:99:04:1c:a9:22:7f:75:fb:29:a8:46:1b:
09:cd:42:0d:49:a7:61:34:c2:08:fa:f4:04:23:f6:b4:9f:1c:
89:15:cf:e2:22:aa:a3:cd:eb:5f:05:b8:5c:55:bd:3b:e1:17:
8a:93:2c:08:3f:ad:a6:d0:a7:0e:ee:0c:c7:89:c1:02:dd:4a:
55:53:2f:13:a7:e0:e8:8c:d5:5f:05:9f:78:80:d7:95:aa:a6:
2b:c3:16:d2:3b:62:c5:97:9d:f6:47:84:7c:ce:a6:5f:07:d9:
d5:39:b6:5a
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUQH0ZFsYalIM0Cu1sJvBe5sd+QDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ2MjVaFw0yNjA3MDIxNTUxMjVaMDMxMTAvBgNV
BAMTKENENkI3OEI1RTI0MEJDOUI5Mzg4REM4OEY3QTVCNDhGMkQ1NjM3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmjdBHAQNB+XXoKawRko3K/GqA
83mIA8R0i4n9Usj3oJ+nlvwm3Fr/h+yvOSu6foFFI0xXvc84vpTdPCfinqgBvvmJ
sGXnneuK2hgp2cDCSQHLo272rpLnBU7X0g3yXSKMCxHsotkCU94ZglTHsyBs3/gD
O4xvvmTAjLE4V6Ktp23rq01JfEtRL8LbAfX9JPV6ms93icaRMgqErIIgLsh5TP4W
747WVTc7Qeje3o3/UFAbxKgD8nOxh1bitpL9+TTU8d5G/NR0tT5WJyQfESw712Ld
3c1gmPvr0RJiDJ0wPfPxFO779aVF8CES3df+vc+FJD8KIDiS27aTJfC4nxPVAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUzWt4teJAvJuTiNyI96W0jy1WN9IwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACgyoQwDQYJKoZIhvcNAQELBQADggEBALw9gwejv9Cn
l8J9aMeU23LYWUAIY72wbuvxrFeYN/jHgBsoSqKVMBeGPe5yoOvyHsMkWwEiCUtS
XvJKLGWezK2TZrvoI/6z/9ErdzqzbuZOPlnzoh0p7kaVEpDKRXWil6W9OJhysZXc
YfSCQXE544ly1l2Yu0cqi6EmtA0DK+67qCz8FKLr36KoNdd3o2jIYNk3Bq/XipkE
HKkif3X7KahGGwnNQg1Jp2E0wgj69AQj9rSfHIkVz+IiqqPN618FuFxVvTvhF4qT
LAg/rabQpw7uDMeJwQLdSlVTLxOn4OiM1V8Fn3iA15WqpivDFtI7YsWXnfZHhHzO
pl8H2dU5tlo=
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:15:13 2025 by rpki-client