Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: 6S7Nma0hgXl0IuCJp9qN8OQAJYcOMH0DcW4brbm0jZM=
Subject key identifier: 82:82:71:5E:CA:24:4D:CD:F8:95:23:7B:AA:D9:B5:18:34:AA:CB:FD
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3E26AADF83E9C0826607C2E5E5F734C86C7FCBE2
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23470.roa
Signing time: Fri 26 Jun 2026 22:58:55 +0000
ROA not before: Fri 26 Jun 2026 22:53:55 +0000
ROA not after: Fri 25 Jun 2027 22:58:55 +0000
asID: 23470
IP address blocks: 144.48.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:26:aa:df:83:e9:c0:82:66:07:c2:e5:e5:f7:34:c8:6c:7f:cb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 26 22:53:55 2026 GMT
Not After : Jun 25 22:58:55 2027 GMT
Subject: CN=8282715ECA244DCDF895237BAAD9B51834AACBFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:9a:b0:01:4f:ad:b2:03:2c:d8:97:dd:61:
7a:26:28:bb:ca:5d:70:47:b8:28:04:29:af:d0:2d:
4e:94:c4:06:ed:ae:cc:a6:7e:7d:c6:46:0d:7e:b9:
48:34:97:67:26:25:bb:4b:b3:55:0b:00:ce:a6:1e:
a3:a0:b5:b5:01:a6:da:67:19:78:cc:43:65:a2:ca:
b9:5a:04:53:92:62:b6:06:db:0f:43:37:15:bc:64:
c3:b4:c9:bd:6f:74:a3:f9:74:22:e6:ab:d8:89:23:
73:b1:d5:a1:37:10:0e:b7:b9:7f:e0:04:ad:a1:0c:
53:ac:90:aa:f3:54:91:ae:f1:55:60:b3:cd:9e:d3:
e9:ac:cc:58:84:d2:88:bb:a2:61:40:08:83:73:e2:
bb:fc:df:a7:b9:54:24:4d:48:d4:ab:37:40:1a:34:
b6:32:74:1a:0b:9e:48:92:b8:13:6a:84:ae:c2:8f:
86:bd:20:2f:f7:2f:23:7a:25:0e:7c:0e:3d:d8:9e:
3f:90:bd:e7:2e:4a:4f:ce:ca:80:d9:0e:94:b9:2b:
7f:16:44:9b:36:c3:61:7f:bf:31:1b:57:eb:10:36:
36:91:77:e1:f8:ce:3d:a0:42:7b:ab:97:0f:ed:24:
a2:21:a5:c6:01:c8:fa:aa:57:d4:0d:aa:ce:65:68:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:71:5E:CA:24:4D:CD:F8:95:23:7B:AA:D9:B5:18:34:AA:CB:FD
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ab:a6:bb:82:bc:2b:b1:d3:0b:61:f0:4d:84:08:f2:4d:5c:
33:d9:70:7f:6b:d9:c6:d4:13:a5:49:1b:fa:09:b1:ab:b9:ae:
80:f0:0a:2c:57:36:d2:b5:65:95:f1:91:b5:64:ca:dd:fe:e3:
0e:2b:c6:d9:8a:83:76:92:f7:d3:4f:35:1d:f9:dc:aa:61:f6:
ab:6d:ed:33:9f:b6:fe:e4:18:17:d4:b6:7e:51:d8:35:57:86:
28:fb:f6:b4:0b:ea:e6:3b:c7:72:8c:e5:bd:99:9e:c2:f3:f6:
64:bf:fe:22:cf:fd:6b:cb:04:e1:51:c1:9c:e7:d4:ca:a2:3f:
97:97:3f:03:3b:71:7f:87:fd:df:ba:ac:cb:49:81:de:59:d4:
d3:4a:7c:9c:0a:d4:c8:da:ae:68:31:17:57:c1:71:02:b8:e4:
70:b9:f8:47:1a:f9:90:09:4e:5f:5c:52:5b:3f:3f:7e:23:d8:
cf:45:e9:95:ae:8e:28:71:ca:da:f4:11:7d:37:28:88:30:cd:
c9:4f:dc:b7:a4:77:ea:d9:66:22:5e:3f:2b:22:c4:8d:4a:96:
4d:5b:23:28:2b:f6:55:4a:0b:98:b4:63:4e:46:f3:d5:c0:29:
2d:c3:e4:5a:3a:db:8b:11:67:5a:93:d1:91:be:3f:45:f3:73:
bb:f8:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 12:25:38 2026 by rpki-client