Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS32613.roa
File: AS32613.roa (raw, json)
Hash identifier: ZXW2eVGfe/TZu/I/1veuF18vaAD748BzRbIvcy6PvT4=
Subject key identifier: C2:22:D3:6C:BA:8D:CC:6F:1D:23:C7:E1:78:B6:C2:5C:1F:5B:AA:36
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 33CC01838F730B33F5919224D23A9254FE95C328
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS32613.roa
Signing time: Thu 20 Aug 2026 19:59:09 +0000
ROA not before: Thu 20 Aug 2026 19:54:09 +0000
ROA not after: Thu 19 Aug 2027 19:59:09 +0000
asID: 32613
IP address blocks: 199.47.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:cc:01:83:8f:73:0b:33:f5:91:92:24:d2:3a:92:54:fe:95:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 20 19:54:09 2026 GMT
Not After : Aug 19 19:59:09 2027 GMT
Subject: CN=C222D36CBA8DCC6F1D23C7E178B6C25C1F5BAA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:b4:ac:37:38:26:30:5a:18:f5:c2:94:b9:
62:0f:bb:80:3c:45:d8:18:bb:b3:1e:d0:ba:59:73:
e5:01:40:27:31:12:00:ad:21:c5:c3:c3:cc:00:21:
eb:c4:65:b0:6e:d7:3c:9d:6c:75:36:14:9c:cf:18:
18:ec:f7:04:7d:24:7e:ee:6f:dc:56:3b:e3:04:8f:
ce:a7:15:11:ef:e7:b7:c5:08:7b:bf:fb:4c:02:5a:
b3:d1:e2:a2:22:95:8e:30:b9:59:9c:8e:47:69:19:
49:59:60:b3:03:61:a3:81:7c:f7:bb:3f:e7:12:21:
8c:f7:e8:8d:34:6f:d9:d5:18:ba:80:d3:c4:7d:60:
ef:c4:d0:0f:6d:25:b1:9a:c9:71:56:81:b0:7c:29:
a3:93:dd:3a:c3:08:1d:6b:08:05:39:ac:09:e3:22:
34:6f:37:96:d7:66:77:4f:40:ac:bd:68:15:c8:1c:
f7:f1:a6:09:16:7c:2e:0e:d4:14:c4:11:e9:67:a4:
54:9e:64:77:ee:34:58:e3:9f:6d:9c:2b:6c:81:71:
95:c2:57:f7:22:62:3b:8c:8a:29:0a:c8:05:71:19:
8a:58:7b:42:fe:0c:95:fe:16:59:26:ad:51:dc:ed:
7d:dc:3b:1e:47:6d:92:e3:77:02:59:3d:04:b2:63:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:22:D3:6C:BA:8D:CC:6F:1D:23:C7:E1:78:B6:C2:5C:1F:5B:AA:36
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS32613.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.243.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d7:29:93:1d:f3:da:b1:3d:2a:a7:41:34:be:90:21:de:3a:
1d:e2:3b:3e:aa:f9:66:6d:cb:46:a7:4a:32:16:db:c2:8c:2f:
ee:62:85:c7:e6:8f:5a:f9:a5:0f:e1:f1:b2:90:f3:d0:f1:39:
63:04:53:52:c4:05:92:e1:32:cf:fb:69:a7:ea:73:5e:4f:99:
01:65:de:4e:ca:11:8a:bc:63:5e:fd:a4:d4:53:2d:be:81:08:
c9:34:54:15:a1:dd:cf:0f:95:89:c6:dd:32:e0:6a:6f:3a:61:
3b:00:ec:7f:0c:b2:dc:e7:92:af:65:02:47:57:1d:51:e3:9b:
52:87:a3:fd:5e:18:89:1e:cb:c8:e3:95:22:e0:06:63:4b:70:
04:0a:d3:fd:db:ae:99:57:e8:2d:e1:a5:15:48:37:6a:48:37:
16:f1:7b:19:47:49:62:48:3f:f4:dc:0e:9c:51:f5:b5:b9:da:
fc:b9:7d:8b:f5:2b:7d:1c:22:8f:03:ce:9e:75:96:b7:23:81:
8b:37:2f:30:0c:b0:18:08:25:e0:65:9d:31:3c:50:5c:40:f9:
fa:38:69:0d:73:c0:e7:00:2f:7b:99:26:8b:de:69:69:b7:81:
86:db:69:96:62:d6:11:a0:ab:e6:e9:b6:42:45:fa:ec:cf:43:
83:f1:b5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:57:25 2026 by rpki-client