Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS32613.roa
File: AS32613.roa (raw, json)
Hash identifier: gP8WDZFBlEai7fWJPq/VZcs/nEev5FUEe1/k6wLDNok=
Subject key identifier: 3D:24:FC:A2:21:21:A7:A9:C3:EA:69:9B:2B:D3:32:1D:CA:A5:0C:BD
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 778B4D8185671382B125809CDAC67E519397F6BE
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS32613.roa
Signing time: Thu 18 Sep 2025 19:19:22 +0000
ROA not before: Thu 18 Sep 2025 19:14:22 +0000
ROA not after: Thu 17 Sep 2026 19:19:22 +0000
asID: 32613
IP address blocks: 199.47.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8b:4d:81:85:67:13:82:b1:25:80:9c:da:c6:7e:51:93:97:f6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 18 19:14:22 2025 GMT
Not After : Sep 17 19:19:22 2026 GMT
Subject: CN=3D24FCA22121A7A9C3EA699B2BD3321DCAA50CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:c3:fb:1e:f1:95:fb:7a:57:b3:4e:d2:75:
15:1d:ee:d5:5c:3e:8f:ee:2d:d7:cb:fb:66:e0:a5:
03:16:d2:0d:cf:73:97:5d:1b:bd:b8:ff:70:89:1d:
2b:c4:39:e1:3e:bd:a0:80:b8:90:f9:3b:f6:2d:c2:
e8:0b:e6:fa:d7:1c:4f:e4:c8:57:de:da:60:cd:cf:
48:68:4d:a9:ee:0f:1e:08:e5:8d:6d:31:16:05:8c:
21:d6:82:53:d5:28:e6:a8:fd:32:96:28:fe:fe:81:
6d:83:e1:b9:de:ce:51:57:6a:cc:c8:90:51:87:99:
61:a2:c9:68:7e:05:51:c5:d6:6c:05:1f:0c:e5:61:
91:21:91:5b:da:ff:36:5d:dc:a1:f1:2b:e7:70:79:
37:b8:6c:a4:ab:5e:31:f0:a7:50:c4:16:ae:6d:d2:
a8:b5:3a:c0:99:b6:e9:56:e5:97:24:4d:fc:18:3a:
64:c6:d4:0f:fc:3d:48:53:e9:9c:01:f7:39:cc:63:
b8:d4:84:58:c1:c3:e5:b3:4a:37:d8:3b:db:c0:09:
b3:36:25:e8:9f:82:7c:9e:c8:f0:79:e9:ae:79:c9:
b2:76:bc:8a:04:53:95:c1:9d:0d:00:ec:51:0c:f0:
b1:67:5a:21:f6:8a:94:a2:76:06:b0:2e:e8:16:6f:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:FC:A2:21:21:A7:A9:C3:EA:69:9B:2B:D3:32:1D:CA:A5:0C:BD
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS32613.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:04:04:56:33:cb:f2:7e:55:d5:38:97:77:86:3a:c4:4e:b4:
6a:b8:5c:36:e1:fd:db:88:3a:80:be:64:dc:82:6c:43:22:68:
d2:70:b0:64:36:7b:7a:ca:6e:ed:12:66:cb:bf:e8:0d:fe:b0:
70:43:7d:cf:c4:0d:ce:2b:02:7f:af:dd:fa:03:c0:04:5a:74:
2a:3f:5e:bb:0d:ee:5f:b8:04:dd:a5:bc:52:fb:82:e9:71:d5:
54:ab:65:e7:d7:c8:73:77:27:66:75:6a:30:d0:8c:99:3c:b3:
30:c8:be:82:23:06:b4:d6:38:d8:d3:0b:e6:87:00:f2:0f:9f:
03:93:b9:0a:94:03:45:5a:82:b2:29:2c:05:b0:70:d6:a0:7e:
22:21:2b:58:02:16:15:6b:72:79:df:a9:46:f9:41:77:7f:ab:
19:21:93:b0:b8:fd:4a:e5:a7:8b:fc:ee:18:b1:70:bb:cf:c7:
a7:93:99:e4:18:74:8b:a8:0b:27:57:eb:99:4a:3b:23:f8:35:
91:a4:d4:23:19:66:37:c0:22:e3:47:e9:01:4d:84:87:ec:12:
fd:9b:d0:92:44:99:38:c9:be:93:c4:51:4c:d3:82:e7:e8:16:
8a:65:6f:de:e6:88:36:33:c2:27:59:5b:57:2e:ad:e3:4f:48:
4a:d0:94:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:19:34 2025 by rpki-client