Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63286.roa
File: AS63286.roa (raw, json)
Hash identifier: sknoyzqhH2nvqFk6SgcFSnRgq0G7CethIT+gP1h3hlM=
Subject key identifier: 3A:DC:C5:52:A1:E7:98:5C:4B:21:8D:9E:66:60:A6:89:53:C5:F3:F5
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 504F978D4DB4715D47E9F3CA3329F9977A7D9F80
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63286.roa
Signing time: Thu 08 Oct 2026 18:19:58 +0000
ROA not before: Thu 08 Oct 2026 18:14:58 +0000
ROA not after: Thu 07 Oct 2027 18:19:58 +0000
asID: 63286
IP address blocks: 2a0a:6042::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 22:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4f:97:8d:4d:b4:71:5d:47:e9:f3:ca:33:29:f9:97:7a:7d:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 8 18:14:58 2026 GMT
Not After : Oct 7 18:19:58 2027 GMT
Subject: CN=3ADCC552A1E7985C4B218D9E6660A68953C5F3F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:89:67:c1:d0:5f:db:fd:28:df:99:ff:6e:
9a:86:e2:2d:10:e8:54:f0:6c:60:5a:d9:a8:56:e4:
b7:b6:c4:36:cc:88:3f:0e:44:dc:2d:07:7e:51:7f:
c8:aa:9b:08:76:e2:ea:ce:df:b5:6e:67:be:4c:ea:
1c:0f:e7:74:c2:13:1a:1b:fd:61:cd:51:a4:fa:1a:
f8:ac:b9:75:c0:a0:84:10:e8:c9:88:14:7d:3f:d7:
d6:94:96:a3:33:8d:0b:b4:9c:7d:01:ae:f9:28:48:
5a:ea:d5:d6:e4:af:32:6d:b9:2e:40:0d:d1:75:9a:
d6:77:25:78:b4:b1:82:1b:29:33:77:37:8f:30:37:
80:23:d2:87:b2:89:be:b4:ce:7e:c4:c1:4d:52:43:
0c:51:e6:a2:c8:ab:ec:b4:f9:17:cb:26:ec:af:e3:
32:1a:86:b7:30:72:ff:bc:61:35:19:29:2c:ec:54:
39:cd:3e:a7:14:36:69:0b:43:d1:b8:6b:2c:57:8d:
e9:10:b3:2b:ca:92:d1:87:54:2f:3a:e2:81:f4:e9:
38:cf:31:54:c8:26:72:cb:56:0b:99:4b:12:ec:d9:
01:c6:31:14:f7:6b:0c:1c:59:68:ec:80:dc:a0:e0:
16:f4:ff:e2:66:3f:2c:56:44:5d:92:11:7b:d2:06:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:C5:52:A1:E7:98:5C:4B:21:8D:9E:66:60:A6:89:53:C5:F3:F5
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6042::/32
Signature Algorithm: sha256WithRSAEncryption
31:a1:d7:38:00:6b:41:1a:00:90:6f:2c:4a:5a:80:34:97:f9:
f0:47:c1:9c:25:ac:26:b4:23:a6:c3:2a:0c:26:d4:d5:6c:80:
c4:a5:0e:46:cc:3f:41:6d:8c:a2:79:39:59:c2:f4:66:14:54:
fa:fd:af:38:84:3d:36:31:5b:ae:0d:f4:4d:e3:ff:35:a6:7e:
4e:a3:43:a4:5a:31:f6:61:24:0c:7b:0d:45:fc:db:c4:10:c5:
52:6f:f8:c3:ce:f8:08:fa:4c:6e:76:75:5c:44:de:38:5e:29:
d7:ff:8c:51:99:fa:c0:76:55:3b:1a:84:97:a9:ab:43:41:ee:
b5:d9:7f:d9:fc:dd:8e:30:25:40:17:ad:ff:46:5f:cb:52:ce:
f7:08:1e:c9:77:d1:28:68:51:f6:dd:42:89:b7:f3:83:6c:00:
4f:02:1f:95:a6:72:03:c0:a7:88:d0:3c:58:d1:96:01:24:70:
8b:a3:af:fc:f8:75:ed:98:66:5d:77:63:98:02:6e:7d:63:9f:
34:97:34:c3:4d:6c:b7:a4:f8:15:2b:77:b7:09:2f:b0:f0:e9:
e8:e0:9b:75:0f:aa:27:1f:c7:7d:b1:b7:06:0d:a1:5e:e4:6d:
5b:d5:23:1d:e7:21:a6:e4:6f:cf:00:78:1d:fa:58:18:bc:aa:
ff:fa:be:59
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUUE+XjU20cV1H6fPKMyn5l3p9n4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjEwMDgxODE0NThaFw0yNzEwMDcxODE5NThaMDMxMTAvBgNV
BAMTKDNBRENDNTUyQTFFNzk4NUM0QjIxOEQ5RTY2NjBBNjg5NTNDNUYzRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnIlnwdBf2/0o35n/bpqG4i0Q
6FTwbGBa2ahW5Le2xDbMiD8ORNwtB35Rf8iqmwh24urO37VuZ75M6hwP53TCExob
/WHNUaT6GvisuXXAoIQQ6MmIFH0/19aUlqMzjQu0nH0BrvkoSFrq1dbkrzJtuS5A
DdF1mtZ3JXi0sYIbKTN3N48wN4Aj0oeyib60zn7EwU1SQwxR5qLIq+y0+RfLJuyv
4zIahrcwcv+8YTUZKSzsVDnNPqcUNmkLQ9G4ayxXjekQsyvKktGHVC864oH06TjP
MVTIJnLLVguZSxLs2QHGMRT3awwcWWjsgNyg4Bb0/+JmPyxWRF2SEXvSBiK1AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUOtzFUqHnmFxLIY2eZmCmiVPF8/UwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NjMyODYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAqCmBCMA0GCSqGSIb3DQEBCwUAA4IBAQAxodc4AGtB
GgCQbyxKWoA0l/nwR8GcJawmtCOmwyoMJtTVbIDEpQ5GzD9BbYyieTlZwvRmFFT6
/a84hD02MVuuDfRN4/81pn5Oo0OkWjH2YSQMew1F/NvEEMVSb/jDzvgI+kxudnVc
RN44XinX/4xRmfrAdlU7GoSXqatDQe612X/Z/N2OMCVAF63/Rl/LUs73CB7Jd9Eo
aFH23UKJt/ODbABPAh+VpnIDwKeI0DxY0ZYBJHCLo6/8+HXtmGZdd2OYAm59Y580
lzTDTWy3pPgVK3e3CS+w8Ono4Jt1D6onH8d9sbcGDaFe5G1b1SMd5yGm5G/PAHgd
+lgYvKr/+r5Z
-----END CERTIFICATE-----
Generated at Sat Oct 10 05:44:12 2026 by rpki-client