Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3257.roa
File: AS3257.roa (raw, json)
Hash identifier: zat7tT3zuRZIOpvE9c/xcbBxZvcgumAnaVjQheNRJzE=
Subject key identifier: 3A:D2:AC:A7:B8:E3:6A:F0:09:C5:C0:80:95:6D:18:36:C6:2C:1D:D1
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6673418FE845E5BC27E5C32A1F9A6F12AA907E8F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3257.roa
Signing time: Wed 12 Aug 2026 20:18:33 +0000
ROA not before: Wed 12 Aug 2026 20:13:33 +0000
ROA not after: Wed 11 Aug 2027 20:18:33 +0000
asID: 3257
IP address blocks: 153.76.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:73:41:8f:e8:45:e5:bc:27:e5:c3:2a:1f:9a:6f:12:aa:90:7e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 12 20:13:33 2026 GMT
Not After : Aug 11 20:18:33 2027 GMT
Subject: CN=3AD2ACA7B8E36AF009C5C080956D1836C62C1DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:d9:9a:96:3b:b2:6b:b7:55:15:3e:8b:8f:
9e:47:c1:f6:c9:f8:bb:cd:5f:ca:57:50:7c:16:c3:
6c:f3:36:46:f7:a8:68:36:b3:b5:2b:36:17:5c:66:
91:ab:28:29:73:ef:0c:b5:94:14:dd:00:a8:ad:30:
a9:54:48:65:be:be:15:2b:c5:1d:b9:c8:d9:53:21:
2c:ae:76:3c:46:8d:8c:85:3f:74:c9:01:db:47:48:
ab:ec:36:d1:da:c9:b4:9e:ad:42:cf:2f:35:a1:b1:
fe:3b:ef:e7:2f:7d:53:97:94:14:75:58:34:55:53:
2f:68:6f:c1:20:90:ed:7d:b8:49:8d:26:b6:69:9c:
69:31:41:8a:88:67:45:a9:f0:71:83:71:e7:34:fa:
3f:cf:48:2b:d1:a6:1d:1e:0b:b0:45:13:aa:15:b1:
3b:e7:4d:23:d2:67:0a:a6:1d:71:61:32:93:90:f9:
53:6b:d4:b4:72:01:5e:64:0b:5c:08:ed:ce:06:73:
ee:b9:89:99:45:60:05:01:4a:3b:87:45:3c:cd:0a:
90:1a:aa:d3:98:9c:03:29:7f:5a:52:8a:35:97:e0:
5e:ae:8f:04:e4:20:30:e8:ba:37:f0:52:50:5b:d8:
3c:ad:49:82:7e:66:84:05:80:84:f3:df:94:19:87:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D2:AC:A7:B8:E3:6A:F0:09:C5:C0:80:95:6D:18:36:C6:2C:1D:D1
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.124.0/22
Signature Algorithm: sha256WithRSAEncryption
79:ae:4a:a6:52:1e:b3:ca:73:fd:c4:34:4c:eb:b7:de:e8:d0:
d2:47:56:41:83:24:42:6b:03:5f:d3:b7:6d:94:be:68:e8:70:
3e:10:ac:c0:2e:2c:0c:fa:ea:30:54:28:73:c7:6a:38:df:86:
25:95:21:8a:ce:c6:67:89:f3:b7:b8:69:15:3f:a8:ea:c1:12:
4b:4f:83:16:57:8b:11:6a:5a:09:e7:78:69:1c:e9:0f:e9:82:
6a:c3:cf:3f:db:89:7d:2b:7f:f3:98:0a:c3:62:ff:4f:b0:0f:
6f:7a:1d:ea:fd:07:57:57:43:1c:a1:0a:b1:fd:1a:b9:88:4e:
57:dd:af:2a:03:4a:2a:f9:10:26:a6:f8:50:5b:d2:ec:48:a0:
bb:2e:72:d5:19:1e:90:30:f3:8f:1a:85:d6:91:7e:3d:bd:f9:
d7:b9:20:4f:24:e5:87:13:c0:f4:87:60:da:7d:2c:cc:c8:56:
21:00:16:9e:12:9b:b8:d3:f4:11:71:15:d8:6b:22:7a:54:b0:
32:52:92:19:36:f1:c4:10:6c:d5:61:82:e2:5c:9a:2e:a9:dd:
f8:0d:1a:aa:03:91:8e:9d:7c:15:0c:d5:52:03:27:67:c8:bc:
0e:8f:ea:b8:ed:38:61:7b:68:d8:02:49:c8:36:ca:06:cf:ba:
a0:ec:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:34:48 2026 by rpki-client