Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44570.roa
File: AS44570.roa (raw, json)
Hash identifier: cmWdSKmWgIAqyW2VlguP7frElZK+RSLzCjzP+gVDWd8=
Subject key identifier: FD:AA:9B:87:AE:52:67:5A:FE:B6:5E:0B:7F:5A:B8:39:D6:8F:7F:5E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4E0197DD3E58EF9C1B30061A697435716DEC8940
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44570.roa
Signing time: Thu 03 Jul 2025 15:52:42 +0000
ROA not before: Thu 03 Jul 2025 15:47:42 +0000
ROA not after: Thu 02 Jul 2026 15:52:42 +0000
asID: 44570
IP address blocks: 2a06:1280:1000::/36 maxlen: 36
2a06:a000:2000::/36 maxlen: 48
2a06:a000:3000::/36 maxlen: 48
2a06:a000:4000::/36 maxlen: 48
2a06:a000:5000::/36 maxlen: 48
2a06:a000:6000::/36 maxlen: 48
2a06:a000:7000::/36 maxlen: 48
2a06:a000:9000::/36 maxlen: 48
2a06:a000:a000::/36 maxlen: 48
2a06:a000:b000::/36 maxlen: 48
2a06:a000:c000::/36 maxlen: 48
2a06:a000:d000::/36 maxlen: 48
2a06:a000:e000::/36 maxlen: 48
2a06:a000:f000::/36 maxlen: 48
2a06:a004::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:01:97:dd:3e:58:ef:9c:1b:30:06:1a:69:74:35:71:6d:ec:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:42 2025 GMT
Not After : Jul 2 15:52:42 2026 GMT
Subject: CN=FDAA9B87AE52675AFEB65E0B7F5AB839D68F7F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:7b:76:ca:b6:14:a9:5a:f7:f3:68:f8:8d:
63:62:97:77:e4:28:e9:d2:b0:6a:ee:9b:5d:2c:a5:
4d:d0:a0:19:7b:e7:e2:55:94:9d:e2:13:00:9b:1e:
e5:41:fe:c0:f0:c7:1d:a7:5d:b7:b7:76:2f:c7:fd:
6c:9e:59:65:81:17:32:8d:be:aa:2f:9a:34:b1:95:
67:f2:10:8e:48:aa:b3:78:9e:26:df:a9:53:2b:44:
ce:ce:19:c6:a8:5a:77:e1:fc:8f:68:bc:5a:30:92:
b0:da:c6:d0:78:1c:f3:da:fe:e1:95:64:d1:e1:e8:
6e:9f:23:63:40:d9:66:7e:31:99:10:d4:72:23:86:
f9:26:dc:58:50:dd:8b:89:30:63:75:bf:44:8a:e0:
12:7e:34:4e:a4:a3:96:df:f1:5d:ee:a8:15:2a:f1:
c3:db:ec:02:67:1d:e2:a1:94:78:43:01:6c:1a:17:
e5:53:6e:e6:d6:7a:8d:4f:5f:c7:60:5e:f7:4b:8c:
f5:e2:c8:67:2b:6d:82:ee:21:fd:6b:91:4a:b7:4f:
70:8b:84:ee:3d:82:e6:ec:8b:d3:b4:75:97:51:76:
23:11:8b:93:c6:30:05:5c:45:d8:4c:b6:3d:39:d0:
b0:a0:ef:69:a5:60:56:31:1a:b7:e0:2d:b6:cd:0e:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:9B:87:AE:52:67:5A:FE:B6:5E:0B:7F:5A:B8:39:D6:8F:7F:5E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44570.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:1000::/36
2a06:a000:2000::-2a06:a000:7fff:ffff:ffff:ffff:ffff:ffff
2a06:a000:9000::-2a06:a000:ffff:ffff:ffff:ffff:ffff:ffff
2a06:a004::/32
Signature Algorithm: sha256WithRSAEncryption
4e:1b:5e:d2:91:a0:11:c6:62:e6:66:80:dd:5a:58:fe:df:61:
0f:d0:4e:02:4b:83:e0:12:b6:c9:61:2f:2b:c3:fc:83:1a:80:
9b:28:d5:3b:c2:22:2a:22:b4:86:ac:ee:63:96:a0:df:52:a0:
1e:46:7a:2f:66:2f:6a:33:f5:49:ae:9e:2d:19:2e:c4:72:73:
d1:bc:81:e5:9f:39:ca:7a:eb:af:35:47:3d:32:ab:7b:4e:c7:
b9:41:56:04:41:ff:e9:d2:7a:22:1c:34:d0:15:fd:07:43:b5:
88:fc:0f:4e:29:0e:0b:b9:44:de:8b:ee:6f:c9:68:1a:81:7e:
f0:05:34:03:03:64:44:7d:e8:de:37:d2:05:43:9b:5f:9d:b4:
65:1f:38:22:ef:fb:da:0c:d8:e7:5f:54:e7:1b:90:41:92:05:
5e:99:25:b2:f1:62:3b:d0:1f:c1:eb:2b:a7:8d:a0:90:9b:d6:
aa:83:5e:18:76:d3:ce:6e:42:82:2f:84:ea:ad:e9:24:bd:0c:
7b:83:27:f2:66:c7:98:06:cf:c2:a9:9d:03:7c:ba:ef:df:3a:
d3:48:c0:b3:e7:ea:bd:e3:44:76:8b:61:98:83:64:27:75:d4:
b6:bb:34:07:95:95:f3:5d:e4:e1:6b:fe:32:96:ab:9e:58:67:
04:c7:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:55 2025 by rpki-client