Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393577.roa
File: AS393577.roa (raw, json)
Hash identifier: BrZ2gFS+QmeNo/A0KlBVQpBWu30QsufRFOmANVgxeTE=
Subject key identifier: F6:9C:32:B4:34:95:AD:92:AC:07:93:88:B4:48:40:4E:0D:E1:37:7E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 16456876245C1DB6BDD3ED258C6B407AC66B5CFB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393577.roa
Signing time: Thu 03 Jul 2025 15:51:44 +0000
ROA not before: Thu 03 Jul 2025 15:46:44 +0000
ROA not after: Thu 02 Jul 2026 15:51:44 +0000
asID: 393577
IP address blocks: 2a06:a005:15d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:45:68:76:24:5c:1d:b6:bd:d3:ed:25:8c:6b:40:7a:c6:6b:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:44 2025 GMT
Not After : Jul 2 15:51:44 2026 GMT
Subject: CN=F69C32B43495AD92AC079388B448404E0DE1377E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:01:52:80:b8:d6:45:8a:76:e9:17:93:8d:
d0:43:18:4c:98:ab:86:e2:a8:3a:29:e4:83:ff:c8:
34:93:77:4c:cb:91:46:85:38:d4:2b:d1:11:22:b9:
18:2f:80:96:4f:32:fc:c4:90:6a:ee:d3:8e:fe:34:
1a:c9:e2:51:8f:6e:c2:7c:26:47:fd:6e:0f:ac:47:
4e:05:fe:71:53:8b:d1:25:50:fe:e9:77:3f:4a:61:
d1:c3:6d:28:e2:5a:3c:dc:a9:88:39:12:ec:52:f1:
f3:5f:ca:eb:21:fd:f8:67:dc:04:55:ff:0f:1a:34:
48:94:7b:7f:bd:fc:64:a2:ad:e9:8e:cc:ae:dd:61:
f7:e0:3c:99:85:6d:c9:91:89:1d:79:00:7d:f6:85:
cd:c7:c8:d9:d3:81:8d:21:4e:0e:a6:68:34:34:3d:
c9:72:03:8f:d7:82:c3:67:08:95:d6:cf:1c:ad:e0:
a3:39:00:1d:9f:53:87:8c:da:33:9b:32:af:d9:3b:
f2:09:c5:bb:2c:3d:0e:40:be:d9:88:b1:84:65:1d:
e8:51:58:16:a9:b0:c6:8f:23:bd:bd:e6:e2:81:ad:
45:28:97:da:37:fc:49:f2:56:4c:94:a4:c4:08:4e:
93:74:88:59:79:65:40:7e:9f:93:ac:fd:17:04:ee:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:32:B4:34:95:AD:92:AC:07:93:88:B4:48:40:4E:0D:E1:37:7E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393577.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15d8::/48
Signature Algorithm: sha256WithRSAEncryption
4a:c9:d9:2f:8a:b1:85:be:f7:c2:a2:46:80:04:ff:57:4f:fa:
87:f4:e3:4c:18:d8:6d:ff:37:a7:a5:e1:46:3a:c5:27:88:6f:
0f:03:20:e3:e4:48:48:dc:36:59:18:c4:bb:0a:8e:27:1f:2f:
07:0c:f0:97:84:cb:c4:10:f7:4d:02:d0:5e:3a:6b:6d:e7:8a:
58:ec:1a:6a:4b:22:58:06:92:f7:a1:6b:bb:c3:c6:fa:8c:d7:
5a:81:e4:58:e6:c7:6a:87:95:fb:7f:a2:09:13:84:a6:86:5f:
3c:63:c3:c2:b1:66:15:73:fa:86:11:65:07:74:9a:0c:14:21:
a5:d8:71:95:6e:65:84:a1:bb:da:f7:24:ca:69:ff:c6:56:c7:
ce:ce:91:02:ec:e8:ec:5e:62:38:a3:43:de:d2:f4:a7:47:b5:
17:4d:8b:26:64:37:bb:58:b8:0e:d9:48:2b:4f:dc:d4:a7:7b:
c5:cf:45:15:16:3c:f0:71:32:b6:4c:ea:cf:a2:dd:40:24:df:
09:f8:12:be:d6:f5:5b:ad:91:96:4a:1d:a1:03:60:be:19:b4:
f3:33:44:f2:61:84:cb:87:4d:06:bb:f3:e8:68:ad:51:cf:a5:
4c:7a:ca:8f:08:06:d4:2b:97:7c:c5:91:9f:5d:67:27:7e:a0:
ab:6e:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:09 2025 by rpki-client