Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: 5NdkipbD3A8Sfwzfj4+hBt5cS+9iBrb9LfVaucqykrE=
Subject key identifier: FE:08:35:60:68:31:E6:56:EE:0C:2A:A1:EE:6E:E7:4C:BA:8D:FA:40
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6F057A347A9B16277985692F3C38DAD4A117EE5B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS26042.roa
Signing time: Thu 03 Jul 2025 15:51:37 +0000
ROA not before: Thu 03 Jul 2025 15:46:37 +0000
ROA not after: Thu 02 Jul 2026 15:51:37 +0000
asID: 26042
IP address blocks: 206.53.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:7a:34:7a:9b:16:27:79:85:69:2f:3c:38:da:d4:a1:17:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:37 2025 GMT
Not After : Jul 2 15:51:37 2026 GMT
Subject: CN=FE0835606831E656EE0C2AA1EE6EE74CBA8DFA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:1d:45:85:59:07:b8:b9:4b:1b:54:e0:27:
ae:a9:d8:3a:37:2e:a9:91:83:b6:ee:f5:17:45:b5:
78:18:67:bc:cd:c6:b6:3c:25:7e:d7:e4:10:a1:92:
65:10:41:2c:40:96:d6:f0:d7:8e:fe:f8:ed:22:82:
7c:4b:54:f7:5e:53:8f:e1:79:8a:d4:1c:3f:3b:f0:
c2:9e:de:5d:48:c4:b3:7a:a4:e5:60:f3:50:3d:3b:
8f:f1:f2:9b:14:87:e7:06:18:2c:d7:29:f6:70:7d:
17:cf:51:44:bb:d7:98:a5:25:07:b8:71:01:23:98:
cd:ac:99:dd:9a:01:10:d6:48:a5:d9:19:9d:91:ed:
26:9b:25:72:5b:09:bb:c7:98:f4:7d:60:5c:dc:b7:
a6:2d:73:ea:e7:30:22:89:59:d1:98:13:7a:65:3a:
af:8d:15:9c:ea:e1:d4:66:a1:62:10:11:10:35:52:
e5:fa:89:21:0a:9d:53:37:d7:de:10:44:5e:15:10:
b3:ff:ca:d8:ab:6b:f3:42:f2:60:3a:c6:f8:98:7a:
da:96:fd:46:1a:f4:52:0b:63:7d:17:84:9e:6c:fc:
25:7a:d6:14:c4:2c:70:f8:a7:cd:97:b5:a8:c8:fa:
02:7a:2f:f7:f8:ed:29:d3:37:41:6b:6f:81:be:de:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:08:35:60:68:31:E6:56:EE:0C:2A:A1:EE:6E:E7:4C:BA:8D:FA:40
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.1.0/24
Signature Algorithm: sha256WithRSAEncryption
74:94:75:11:76:bf:6e:07:e2:c2:a3:7d:5a:7c:3f:0c:c3:14:
b8:54:b1:8d:85:71:07:1d:1a:d2:ba:02:4e:5f:ea:bd:12:bf:
bc:27:ff:3d:70:87:63:48:a6:17:a2:34:62:b7:61:9f:7d:99:
90:13:ab:c9:0e:49:a8:b9:56:2e:a1:f3:4f:3f:c6:96:93:88:
44:08:7b:39:0d:de:85:c0:3d:2d:2f:cb:1a:67:74:88:c0:e5:
e4:56:26:da:88:2f:83:de:2e:0e:58:85:72:bb:97:53:0f:f6:
9a:17:a0:e8:2d:63:3b:b7:6c:1f:76:bb:ab:a8:f4:f5:e1:cb:
28:3c:56:0f:b2:98:e4:2d:eb:6a:91:dd:78:a4:44:a6:a0:68:
58:33:dd:a0:8b:19:9c:53:f4:84:4c:5f:02:cc:ff:44:23:98:
3f:85:a8:cc:52:fa:e8:6a:b9:79:30:c0:08:63:45:e7:f8:50:
48:9a:22:e9:40:97:96:d7:bc:7e:bd:c2:e0:a4:e4:7f:2f:95:
82:5d:95:c0:64:d0:43:86:8e:2e:8f:e2:f7:c7:01:b2:3b:80:
63:d5:65:7c:03:e6:b7:c3:1e:65:0a:73:9e:1d:a4:41:de:21:
d7:45:19:85:d1:94:07:a6:2c:00:9b:e9:2b:46:50:9d:d2:00:
a7:85:18:47
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUbwV6NHqbFid5hWkvPDja1KEX7lswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ2MzdaFw0yNjA3MDIxNTUxMzdaMDMxMTAvBgNV
BAMTKEZFMDgzNTYwNjgzMUU2NTZFRTBDMkFBMUVFNkVFNzRDQkE4REZBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyx1FhVkHuLlLG1TgJ66p2Do3
LqmRg7bu9RdFtXgYZ7zNxrY8JX7X5BChkmUQQSxAltbw147++O0ignxLVPdeU4/h
eYrUHD878MKe3l1IxLN6pOVg81A9O4/x8psUh+cGGCzXKfZwfRfPUUS715ilJQe4
cQEjmM2smd2aARDWSKXZGZ2R7SabJXJbCbvHmPR9YFzct6Ytc+rnMCKJWdGYE3pl
Oq+NFZzq4dRmoWIQERA1UuX6iSEKnVM3194QRF4VELP/ytira/NC8mA6xviYetqW
/UYa9FILY30XhJ5s/CV61hTELHD4p82XtajI+gJ6L/f47SnTN0Frb4G+3v0zAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU/gg1YGgx5lbuDCqh7m7nTLqN+kAwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjYwNDIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADONQEwDQYJKoZIhvcNAQELBQADggEBAHSUdRF2v24H
4sKjfVp8PwzDFLhUsY2FcQcdGtK6Ak5f6r0Sv7wn/z1wh2NIpheiNGK3YZ99mZAT
q8kOSai5Vi6h808/xpaTiEQIezkN3oXAPS0vyxpndIjA5eRWJtqIL4PeLg5YhXK7
l1MP9poXoOgtYzu3bB92u6uo9PXhyyg8Vg+ymOQt62qR3XikRKagaFgz3aCLGZxT
9IRMXwLM/0QjmD+FqMxS+uhquXkwwAhjRef4UEiaIulAl5bXvH69wuCk5H8vlYJd
lcBk0EOGji6P4vfHAbI7gGPVZXwD5rfDHmUKc54dpEHeIddFGYXRlAemLACb6StG
UJ3SAKeFGEc=
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:08:30 2025 by rpki-client