Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
File: AS16909.roa (raw, json)
Hash identifier: HXrOzbwl1ANlNswGoVlJLmm9UsMhPc78hGsf7jDtdjw=
Subject key identifier: A4:1E:42:75:B4:F9:00:D3:24:F8:B8:23:2E:4E:8C:A4:F0:B9:4E:00
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 168F72F7FAC67D9121A6C38DCAD2D93969C23325
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
Signing time: Sat 07 Jun 2025 18:30:04 +0000
ROA not before: Sat 07 Jun 2025 18:25:04 +0000
ROA not after: Sat 06 Jun 2026 18:30:04 +0000
asID: 16909
IP address blocks: 2a14:7584:6000::/36 maxlen: 48
2a14:7584:61da::/48 maxlen: 48
2a14:7584:61db::/48 maxlen: 48
2a14:7584:61f1::/48 maxlen: 48
2a14:7584:61f2::/48 maxlen: 48
2a14:7584:6203::/48 maxlen: 48
2a14:7584:6208::/48 maxlen: 48
2a14:7584:6209::/48 maxlen: 48
2a14:7584:621a::/48 maxlen: 48
2a14:7584:621c::/48 maxlen: 48
2a14:7584:621d::/48 maxlen: 48
2a14:7584:6256::/48 maxlen: 48
2a14:7584:6257::/48 maxlen: 48
2a14:7584:637f::/48 maxlen: 48
2a14:7584:63b9::/48 maxlen: 48
2a14:7584:63e3::/48 maxlen: 48
2a14:7584:6405::/48 maxlen: 48
2a14:7584:647d::/48 maxlen: 48
2a14:7584:6489::/48 maxlen: 48
2a14:7584:64a1::/48 maxlen: 48
2a14:7584:64db::/48 maxlen: 48
2a14:7584:6507::/48 maxlen: 48
2a14:7584:6552::/48 maxlen: 48
2a14:7584:659d::/48 maxlen: 48
2a14:7584:65b6::/48 maxlen: 48
2a14:7584:65c1::/48 maxlen: 48
2a14:7584:65f3::/48 maxlen: 48
2a14:7584:65fa::/48 maxlen: 48
2a14:7584:6651::/48 maxlen: 48
2a14:7584:665c::/48 maxlen: 48
2a14:7584:6675::/48 maxlen: 48
2a14:7584:66de::/48 maxlen: 48
2a14:7584:670f::/48 maxlen: 48
2a14:7584:671d::/48 maxlen: 48
2a14:7584:673c::/48 maxlen: 48
2a14:7584:6759::/48 maxlen: 48
2a14:7584:6786::/48 maxlen: 48
2a14:7584:67bf::/48 maxlen: 48
2a14:7584:67c4::/48 maxlen: 48
2a14:7584:684b::/48 maxlen: 48
2a14:7584:689f::/48 maxlen: 48
2a14:7584:68fc::/48 maxlen: 48
2a14:7584:696f::/48 maxlen: 48
2a14:7584:6995::/48 maxlen: 48
2a14:7584:6999::/48 maxlen: 48
2a14:7584:69e6::/48 maxlen: 48
2a14:7584:6a5b::/48 maxlen: 48
2a14:7584:6a82::/48 maxlen: 48
2a14:7584:6aa6::/48 maxlen: 48
2a14:7584:6aa9::/48 maxlen: 48
2a14:7584:6ac4::/48 maxlen: 48
2a14:7584:6b05::/48 maxlen: 48
2a14:7584:6b3b::/48 maxlen: 48
2a14:7584:6b79::/48 maxlen: 48
2a14:7584:6ceb::/48 maxlen: 48
2a14:7584:6d77::/48 maxlen: 48
2a14:7584:6e2e::/48 maxlen: 48
2a14:7584:6e35::/48 maxlen: 48
2a14:7584:6e5a::/48 maxlen: 48
2a14:7584:6e89::/48 maxlen: 48
2a14:7584:6ea6::/48 maxlen: 48
2a14:7584:6f36::/48 maxlen: 48
2a14:7584:6f49::/48 maxlen: 48
2a14:7584:6fab::/48 maxlen: 48
2a14:7584:6fc8::/48 maxlen: 48
2a14:7584:6fe8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8f:72:f7:fa:c6:7d:91:21:a6:c3:8d:ca:d2:d9:39:69:c2:33:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Jun 7 18:25:04 2025 GMT
Not After : Jun 6 18:30:04 2026 GMT
Subject: CN=A41E4275B4F900D324F8B8232E4E8CA4F0B94E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:8d:30:7a:a0:34:ff:3b:6c:3e:42:da:ae:
5f:7d:3b:c9:cc:e8:e4:ef:63:d0:71:6d:28:fe:bc:
20:a0:ac:12:4e:e4:6d:86:1c:fa:ad:c2:4e:4b:d0:
d8:83:fc:49:61:94:0b:df:bd:c4:f9:b8:f9:44:da:
ef:90:67:d5:df:92:cd:88:fc:d9:7b:54:71:a3:b0:
b8:d5:b2:86:c7:03:3a:b2:04:a0:9b:e9:bc:9d:a1:
e1:0d:69:ae:62:3b:31:d7:b3:2e:e8:d1:09:46:13:
94:aa:4c:9f:61:02:5b:ca:51:f4:20:01:68:4e:60:
37:df:7b:6a:71:38:6b:30:82:54:67:e1:c4:1c:f0:
f1:ab:e2:57:88:c4:04:13:1c:56:60:33:3d:4a:b7:
05:4d:c0:6b:4a:3d:e3:db:5c:23:9d:77:e9:e8:c4:
48:eb:14:d6:d7:72:c2:d4:3e:71:48:31:dc:54:43:
f1:cb:48:62:47:90:7a:1b:25:d5:ae:45:ed:97:97:
ca:a7:e5:90:1f:a0:60:64:03:fd:bf:a3:93:26:6d:
68:df:02:63:ef:b6:34:c4:1a:bb:64:0f:0b:f6:f5:
58:ca:4b:70:3e:8f:a0:fa:c5:a5:91:65:ab:0d:9a:
6c:1c:41:ef:ba:39:a9:8b:9f:4d:96:b4:c8:81:c3:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:42:75:B4:F9:00:D3:24:F8:B8:23:2E:4E:8C:A4:F0:B9:4E:00
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:34:60:3f:10:ac:5c:b7:e7:32:f1:77:4c:82:b1:42:af:8a:
e8:f1:00:17:49:af:a9:bb:fc:c4:c1:f9:2f:09:97:40:7b:bf:
30:4e:35:03:d0:42:2c:f5:52:d7:c3:c6:84:c5:47:33:0f:78:
95:5d:91:55:be:02:26:79:3f:92:8e:d1:e5:d3:38:70:66:90:
d8:94:87:c0:ab:80:e2:5c:46:a5:21:54:ef:72:a8:67:bd:70:
2b:6f:22:60:4d:34:5d:f9:6c:80:1a:e4:d2:90:20:a7:3b:95:
8f:3e:65:44:63:52:f6:0d:61:31:7a:ea:4b:5f:90:cc:88:2d:
c2:ee:84:ba:fd:61:16:1f:df:c4:85:7b:b0:b5:b7:1e:08:70:
9e:53:1f:5f:2c:fd:11:af:fe:85:11:72:7f:27:7f:ff:7c:dc:
eb:ad:7a:26:52:0a:30:bd:5e:4a:9e:f9:0d:95:90:74:f7:52:
3b:4b:34:4a:ed:82:0e:cd:f7:1e:15:7b:d1:42:e8:3e:44:0e:
41:50:01:b8:eb:16:f2:2e:1a:b8:0a:18:fd:b9:63:9c:a7:f6:
30:5d:b9:57:b8:79:90:c0:02:b8:b4:2a:02:1e:92:1e:0e:69:
c3:91:96:46:d5:ff:91:7e:5a:b2:9b:7b:0b:0f:79:88:49:fc:
79:88:22:67
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUFo9y9/rGfZEhpsONytLZOWnCMyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA2MDcxODI1MDRaFw0yNjA2MDYxODMwMDRaMDMxMTAvBgNV
BAMTKEE0MUU0Mjc1QjRGOTAwRDMyNEY4QjgyMzJFNEU4Q0E0RjBCOTRFMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNy40weqA0/ztsPkLarl99O8nM
6OTvY9BxbSj+vCCgrBJO5G2GHPqtwk5L0NiD/ElhlAvfvcT5uPlE2u+QZ9Xfks2I
/Nl7VHGjsLjVsobHAzqyBKCb6bydoeENaa5iOzHXsy7o0QlGE5SqTJ9hAlvKUfQg
AWhOYDffe2pxOGswglRn4cQc8PGr4leIxAQTHFZgMz1KtwVNwGtKPePbXCOdd+no
xEjrFNbXcsLUPnFIMdxUQ/HLSGJHkHobJdWuRe2Xl8qn5ZAfoGBkA/2/o5MmbWjf
AmPvtjTEGrtkDwv29VjKS3A+j6D6xaWRZasNmmwcQe+6OamLn02WtMiBw9UNAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUpB5CdbT5ANMk+LgjLk6MpPC5TgAwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw
cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEw
ZWE2Njg3LzEvQVMxNjkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoUdYRgMA0GCSqGSIb3DQEBCwUA
A4IBAQCLNGA/EKxct+cy8XdMgrFCr4ro8QAXSa+pu/zEwfkvCZdAe78wTjUD0EIs
9VLXw8aExUczD3iVXZFVvgImeT+SjtHl0zhwZpDYlIfAq4DiXEalIVTvcqhnvXAr
byJgTTRd+WyAGuTSkCCnO5WPPmVEY1L2DWExeupLX5DMiC3C7oS6/WEWH9/EhXuw
tbceCHCeUx9fLP0Rr/6FEXJ/J3//fNzrrXomUgowvV5KnvkNlZB091I7SzRK7YIO
zfceFXvRQug+RA5BUAG46xbyLhq4Chj9uWOcp/YwXblXuHmQwAK4tCoCHpIeDmnD
kZZG1f+Rflqym3sLD3mISfx5iCJn
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:09:14 2025 by rpki-client