Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58270.roa
File: AS58270.roa (raw, json)
Hash identifier: 6Pc8C7eSjT1nWuaYMAKDDYtoOzkujNq9WWRpkc0RheI=
Subject key identifier: CC:7D:24:DE:EA:6A:94:36:CF:47:3F:25:AD:CF:2C:B7:A0:0D:46:36
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2779893C3D6BE5DDBFE2FF662FE1B0AF1874C642
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58270.roa
Signing time: Thu 03 Jul 2025 15:51:44 +0000
ROA not before: Thu 03 Jul 2025 15:46:44 +0000
ROA not after: Thu 02 Jul 2026 15:51:44 +0000
asID: 58270
IP address blocks: 2a06:a004:2000::/36 maxlen: 48
2a06:a004:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:79:89:3c:3d:6b:e5:dd:bf:e2:ff:66:2f:e1:b0:af:18:74:c6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:44 2025 GMT
Not After : Jul 2 15:51:44 2026 GMT
Subject: CN=CC7D24DEEA6A9436CF473F25ADCF2CB7A00D4636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:cd:16:df:5b:5a:7a:e3:12:fc:91:41:0b:
50:43:70:e1:53:15:38:1d:15:4f:06:88:6b:a9:09:
be:9b:2b:4b:35:f0:e4:eb:d1:fd:b3:cf:91:7c:cc:
fd:89:f7:98:ec:30:43:ea:f2:19:34:47:e2:72:2a:
b5:a9:9c:4f:69:96:b6:57:8d:59:17:be:3c:9d:16:
25:6a:48:16:31:c6:57:5b:81:cf:c3:93:67:b8:40:
25:6b:7b:55:38:08:4c:9d:8f:8f:74:01:29:4d:85:
86:5e:c6:10:f8:16:13:6d:6d:94:a7:86:ac:79:45:
65:1d:c9:6b:b9:08:e5:14:79:b9:4b:05:f6:33:8d:
db:08:f6:e2:3d:db:f0:c0:cf:53:28:2a:1a:df:cd:
0d:0c:07:1e:6d:00:57:3d:5d:10:fb:ff:b0:23:8d:
99:41:03:ee:0b:f9:2c:30:b2:ac:05:14:6a:9b:6f:
1f:29:f9:52:5e:c1:96:91:50:5d:d0:3b:ed:68:ed:
b1:7f:dd:af:8f:0b:5e:e6:59:fd:20:8d:19:84:8c:
28:45:32:f7:21:2f:2b:a0:6b:2e:8d:6e:39:15:5e:
86:68:f3:a2:7d:0a:7c:fb:44:03:4b:46:93:bf:10:
e3:c6:63:bc:cc:72:16:e5:e1:25:d8:f8:94:b9:61:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:24:DE:EA:6A:94:36:CF:47:3F:25:AD:CF:2C:B7:A0:0D:46:36
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58270.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a004:2000::/35
Signature Algorithm: sha256WithRSAEncryption
06:04:5e:49:35:01:18:23:c3:03:5e:c7:ca:3b:a4:88:7c:17:
8b:7d:19:c6:68:79:b7:cc:1b:e5:47:d8:59:3a:9d:fd:46:41:
2b:88:04:e0:bf:19:cd:42:d3:62:40:6e:13:19:6a:27:e4:78:
ee:43:26:d2:3f:53:81:90:19:e1:10:00:5d:2e:cf:f3:25:b9:
3f:84:78:00:1a:25:45:a5:89:e2:ae:86:81:59:ea:4d:8d:8c:
7f:d6:e4:e0:bd:af:67:6b:04:c5:ba:b5:d3:aa:be:39:d6:67:
86:15:76:18:60:e8:da:2c:ff:8a:99:98:19:79:e4:05:6d:93:
c9:31:06:f8:60:e4:3d:c7:1e:67:f4:fe:84:77:0a:17:2d:16:
0e:db:df:82:96:59:7f:a7:95:22:65:96:86:3f:3f:b7:71:aa:
10:38:92:08:e4:cd:a9:74:c4:38:42:f8:75:dd:4f:29:c6:1b:
3b:10:21:4a:4a:94:f4:d6:db:97:ad:3e:04:1c:09:9c:b1:54:
9a:a6:b2:73:0e:87:c2:15:c8:77:74:78:9b:09:68:8a:26:92:
a5:76:7b:c7:8a:9d:69:f2:45:95:c7:a5:a0:e5:9e:96:c4:c0:
36:b6:7f:f9:42:18:81:19:24:60:9f:3e:3f:df:6d:97:c2:87:
24:75:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:54 2025 by rpki-client