Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS59678.roa
File: AS59678.roa (raw, json)
Hash identifier: o1TwP9Cpn43Uxy7EW+4cqZzgdSZwfjITMRVV9LTvrGw=
Subject key identifier: E4:46:44:10:A9:E4:A7:31:FC:92:85:C0:A5:8A:1F:02:C8:7C:FC:AE
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 50C3403925B466B4C2991BDB03350969FB2482C9
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS59678.roa
Signing time: Thu 03 Jul 2025 15:52:10 +0000
ROA not before: Thu 03 Jul 2025 15:47:10 +0000
ROA not after: Thu 02 Jul 2026 15:52:10 +0000
asID: 59678
IP address blocks: 2a06:a005:2c60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c3:40:39:25:b4:66:b4:c2:99:1b:db:03:35:09:69:fb:24:82:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:47:10 2025 GMT
Not After : Jul 2 15:52:10 2026 GMT
Subject: CN=E4464410A9E4A731FC9285C0A58A1F02C87CFCAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:84:2c:53:ff:d2:0d:11:72:44:d5:6f:58:
a7:df:f6:67:ca:00:34:2d:28:bf:eb:56:52:88:6f:
00:e4:a9:02:fb:41:0e:fe:3c:29:28:f8:ac:cb:63:
fa:8f:85:06:6c:0e:51:86:61:a1:d4:95:01:2f:5b:
4f:21:5e:da:1e:01:9e:de:f6:f8:b0:37:57:3a:2b:
f1:55:c7:a2:54:ec:a3:a5:a4:54:e6:6d:83:6d:75:
e7:3a:e6:18:51:ac:6b:35:e4:96:c0:34:db:f5:50:
00:e8:60:34:34:9a:66:bd:c8:0b:7b:f1:bf:e9:48:
64:c1:bc:12:08:39:35:c2:97:e5:36:f2:cc:0b:03:
c5:f2:a7:6b:c8:7b:e7:a3:b2:e9:f4:a7:39:95:3b:
1b:6b:20:5f:3e:df:b9:e2:cd:3f:36:6f:7d:48:c7:
f6:c7:b9:74:07:67:0c:36:be:ea:94:e1:9c:2b:d8:
2a:c1:9c:c1:3f:d5:fc:00:fe:1d:61:97:cb:32:89:
5b:99:00:25:5f:f2:13:44:c9:f9:0b:e4:d1:8f:43:
11:f9:80:3c:5f:38:2a:66:ed:2c:cd:bc:f0:c3:02:
2a:a0:92:f7:9b:1e:de:0d:65:2c:e9:4e:40:3a:3c:
ad:b5:1d:e2:16:fc:6a:28:4e:12:d8:e1:f4:42:9e:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:44:10:A9:E4:A7:31:FC:92:85:C0:A5:8A:1F:02:C8:7C:FC:AE
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS59678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2c60::/44
Signature Algorithm: sha256WithRSAEncryption
10:c8:b2:23:58:a7:b0:25:e3:2f:e0:1c:b6:2d:67:a7:0a:1e:
75:cb:1a:0c:55:10:eb:48:53:2a:34:96:61:44:be:69:61:e7:
3f:e2:6b:65:f4:27:4b:5f:5a:04:01:15:15:4d:62:b6:7e:bf:
40:85:60:25:15:c0:47:51:04:84:4f:7b:7b:ea:2b:64:a1:df:
5c:97:c3:a8:5f:72:94:90:46:8e:11:96:9f:84:fb:12:37:05:
9c:f9:99:51:61:4f:3f:34:2b:20:11:90:14:49:54:72:f9:a6:
0e:cb:5c:eb:ce:9b:bd:bf:70:b9:1d:bb:8c:cc:88:cd:19:f7:
f8:23:3d:c4:be:c8:68:29:d7:5d:18:1e:7d:d1:12:9a:e7:e8:
18:a2:5c:20:23:d2:84:01:e7:e0:ef:6c:c9:8c:07:2d:01:69:
62:1a:a1:3a:3a:cf:72:64:d4:44:4a:1b:3b:9d:6e:36:05:fa:
70:8e:42:9b:35:02:b8:7a:d9:fd:10:ae:bd:88:cd:7c:01:2a:
ad:d5:5c:b4:85:c2:4d:89:56:6e:ae:29:2d:85:fd:32:f7:3f:
ae:10:a2:9b:42:8d:77:17:b1:25:4a:27:b3:93:f3:c8:59:36:
b4:67:c3:d6:c9:11:54:10:4e:46:e6:ac:97:63:93:c4:30:88:
09:a5:62:c3
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUUMNAOSW0ZrTCmRvbAzUJafskgskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ3MTBaFw0yNjA3MDIxNTUyMTBaMDMxMTAvBgNV
BAMTKEU0NDY0NDEwQTlFNEE3MzFGQzkyODVDMEE1OEExRjAyQzg3Q0ZDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNCoQsU//SDRFyRNVvWKff9mfK
ADQtKL/rVlKIbwDkqQL7QQ7+PCko+KzLY/qPhQZsDlGGYaHUlQEvW08hXtoeAZ7e
9viwN1c6K/FVx6JU7KOlpFTmbYNtdec65hhRrGs15JbANNv1UADoYDQ0mma9yAt7
8b/pSGTBvBIIOTXCl+U28swLA8Xyp2vIe+ejsun0pzmVOxtrIF8+37nizT82b31I
x/bHuXQHZww2vuqU4Zwr2CrBnME/1fwA/h1hl8syiVuZACVf8hNEyfkL5NGPQxH5
gDxfOCpm7SzNvPDDAiqgkvebHt4NZSzpTkA6PK21HeIW/GooThLY4fRCnvfTAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU5EZEEKnkpzH8koXApYofAsh8/K4wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NTk2Nzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwQqBqAFLGAwDQYJKoZIhvcNAQELBQADggEBABDIsiNY
p7Al4y/gHLYtZ6cKHnXLGgxVEOtIUyo0lmFEvmlh5z/ia2X0J0tfWgQBFRVNYrZ+
v0CFYCUVwEdRBIRPe3vqK2Sh31yXw6hfcpSQRo4Rlp+E+xI3BZz5mVFhTz80KyAR
kBRJVHL5pg7LXOvOm72/cLkdu4zMiM0Z9/gjPcS+yGgp110YHn3REprn6BiiXCAj
0oQB5+DvbMmMBy0BaWIaoTo6z3Jk1ERKGzudbjYF+nCOQps1Arh62f0Qrr2IzXwB
Kq3VXLSFwk2JVm6uKS2F/TL3P64QoptCjXcXsSVKJ7OT88hZNrRnw9bJEVQQTkbm
rJdjk8QwiAmlYsM=
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:17:39 2025 by rpki-client