Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS9267.roa
File: AS9267.roa (raw, json)
Hash identifier: jCRO+5UffPvTirJnb27XZCbissaLBRTSGUrCncKV52U=
Subject key identifier: D5:8B:CC:CF:50:C7:E6:B2:89:B2:5D:BE:64:AD:77:D9:CE:A1:3D:13
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 15CCE303637E2D99E2ADDBAC4E2DBB4582BB3FB2
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS9267.roa
Signing time: Thu 03 Jul 2025 15:51:59 +0000
ROA not before: Thu 03 Jul 2025 15:46:59 +0000
ROA not after: Thu 02 Jul 2026 15:51:59 +0000
asID: 9267
IP address blocks: 2a06:a005:200::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cc:e3:03:63:7e:2d:99:e2:ad:db:ac:4e:2d:bb:45:82:bb:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 3 15:46:59 2025 GMT
Not After : Jul 2 15:51:59 2026 GMT
Subject: CN=D58BCCCF50C7E6B289B25DBE64AD77D9CEA13D13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:4d:87:91:ea:ce:f2:8c:9c:30:d3:4b:ec:
f7:70:d2:59:65:0f:20:3b:cf:e4:b7:d2:e0:96:ae:
10:2e:8b:99:24:f3:c0:49:5d:cb:e8:4e:17:4a:0d:
d0:f1:51:7d:e7:e3:df:95:c1:a5:15:c1:85:c8:e5:
39:50:0c:3a:a1:13:3f:ca:03:1d:6b:32:12:3b:d4:
4c:5e:20:41:4a:83:2f:a6:5a:1b:87:14:0b:82:57:
db:fb:2a:ba:38:b2:da:4e:00:72:7a:72:9c:9f:0b:
c8:83:f8:a9:ed:d4:87:14:07:ac:89:6a:7d:e7:ff:
17:89:95:2d:80:c3:70:a7:e3:a1:cd:db:70:a5:45:
fe:e5:96:73:e0:52:b4:d7:75:b2:a7:5b:a1:4d:1b:
29:0f:d5:c1:15:1e:28:1f:44:d4:be:61:d2:b7:44:
c3:b1:65:04:3d:34:a1:d5:4d:48:90:8d:f3:52:e8:
50:2c:84:2a:c6:51:ad:ec:f9:30:f1:de:1c:3d:f6:
a1:00:de:d3:4a:1d:ea:97:02:34:83:60:19:14:ab:
44:11:fb:c5:6b:e0:15:32:2a:25:a7:25:26:35:89:
50:db:3c:cd:7f:54:6a:4d:98:77:a1:9a:80:c5:c9:
fc:b8:04:1a:90:17:c7:ab:c5:cc:3c:3d:23:a6:f3:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:CC:CF:50:C7:E6:B2:89:B2:5D:BE:64:AD:77:D9:CE:A1:3D:13
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS9267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:200::/44
Signature Algorithm: sha256WithRSAEncryption
14:8b:db:fa:de:98:2a:7b:8b:97:b7:47:db:07:83:3d:74:87:
be:ef:92:42:81:1a:b4:f5:3f:f5:1c:9c:0a:77:2a:56:0b:49:
b7:56:f8:1d:2f:cb:0a:96:ce:91:c6:ce:cc:9a:49:7b:b7:59:
9e:9d:be:c8:49:15:a4:70:73:2a:c1:39:13:a6:47:27:c0:08:
50:57:95:a9:02:f0:61:9e:c7:29:d1:2e:48:51:fc:02:50:d7:
55:f8:d7:4e:d6:2f:27:ea:4d:18:34:b5:42:c6:e0:88:68:55:
51:cd:8e:96:5d:3c:4f:0d:28:d3:b6:48:35:7b:3b:c3:d2:6d:
8a:05:e9:3c:6b:94:02:14:3d:e4:f8:27:80:bc:f9:3a:3f:ad:
9b:5e:e7:21:59:cc:25:4f:5d:ac:52:06:12:a3:b6:49:e1:1e:
e7:c7:76:cc:3f:e5:af:a4:94:a8:a0:ef:a0:f6:9f:a2:1b:b2:
aa:f8:89:9c:05:8b:b2:1e:2c:63:7d:b6:48:98:dc:d0:b1:b2:
fb:15:b5:57:70:71:27:43:59:e1:00:2e:fb:06:53:ee:1e:5b:
27:61:58:9c:be:b3:1e:66:ae:0e:71:09:9b:bb:05:05:25:4e:
31:25:aa:00:00:67:b0:62:62:fb:7b:1a:e3:da:cb:e8:bd:7a:
bd:dc:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:59:47 2025 by rpki-client