Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149020.roa
File: AS149020.roa (raw, json)
Hash identifier: K4gJ2CS2KXUiLs8wAIe1l/xE/sGFV0/suG5srD4dHr4=
Subject key identifier: AB:61:42:C2:75:77:8F:12:BB:1E:E3:AC:BD:09:3B:EE:B6:C2:5F:31
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5708B157128AC02C31D14207758463EDD8752F29
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149020.roa
Signing time: Wed 11 Jun 2025 17:52:09 +0000
ROA not before: Wed 11 Jun 2025 17:47:09 +0000
ROA not after: Wed 10 Jun 2026 17:52:09 +0000
asID: 149020
IP address blocks: 27.0.234.0/24 maxlen: 24
103.68.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 20:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:08:b1:57:12:8a:c0:2c:31:d1:42:07:75:84:63:ed:d8:75:2f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 11 17:47:09 2025 GMT
Not After : Jun 10 17:52:09 2026 GMT
Subject: CN=AB6142C275778F12BB1EE3ACBD093BEEB6C25F31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b8:72:76:80:eb:01:06:6d:ed:8c:dc:ad:e1:
91:0e:c3:f9:11:dd:fd:dc:99:55:57:71:23:47:ed:
5f:37:90:c7:89:73:6f:0d:ae:94:ab:d3:5b:7e:84:
f7:91:9b:96:55:71:f4:bf:dc:b0:c1:07:b8:02:ae:
53:7e:03:d2:5b:fb:04:6c:24:3f:59:3e:b3:76:ac:
f5:17:4a:a1:28:83:af:d4:17:bd:5a:89:53:e8:2c:
b5:60:3b:67:be:a8:a8:9f:f1:8c:cb:08:b8:1f:34:
c2:3d:19:dd:10:06:f2:bf:ac:2c:8d:c8:34:a0:b6:
69:62:85:de:70:a0:fe:f1:b7:fb:55:db:2b:81:03:
2a:2e:6f:d8:ef:c7:74:ae:64:8f:b8:1c:3b:fb:1b:
9d:97:ee:8c:0c:99:83:78:8b:26:2e:0b:14:44:5f:
c0:4b:fa:c2:4a:dc:dd:14:23:41:d4:85:f3:b1:0f:
cd:68:56:4f:d2:98:8c:91:58:f2:c1:82:21:ef:7a:
15:9b:a1:14:f7:7e:a5:cc:12:45:8e:72:eb:f0:0b:
57:c4:28:46:eb:48:65:93:27:0c:1e:a8:ae:07:eb:
5b:58:53:e6:c2:a1:66:cc:3e:57:03:cf:04:4e:40:
e0:ed:cb:3d:3c:47:4f:44:d9:8e:4b:61:73:2c:3b:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:42:C2:75:77:8F:12:BB:1E:E3:AC:BD:09:3B:EE:B6:C2:5F:31
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.234.0/24
103.68.108.0/24
Signature Algorithm: sha256WithRSAEncryption
72:de:70:6f:6c:a9:ed:9a:b0:05:fd:f1:8d:ae:96:90:12:54:
9e:46:8f:b0:1a:ab:83:0b:a2:20:84:5e:39:6f:cb:9e:ee:fe:
10:6d:66:b4:f4:5c:c1:e0:48:a5:0d:68:87:58:b2:be:b6:9a:
fa:09:6d:aa:c8:00:de:c1:29:38:4c:37:00:50:04:ef:fd:08:
95:11:a4:c2:b2:60:56:8c:a0:a8:c0:e4:4f:98:67:b7:1f:4d:
f0:1a:8b:b0:98:41:f8:a3:f3:d1:68:1f:af:f4:80:6c:26:2f:
34:8f:28:a2:3d:23:99:74:13:11:e8:a9:61:6f:ee:70:e5:fa:
fa:ca:13:e5:7a:dd:f7:44:29:88:ea:ea:87:49:5e:99:2f:04:
de:ab:8d:16:8c:7f:a6:f4:9d:f4:ca:03:69:f5:2d:d0:32:cb:
18:c7:48:29:44:eb:34:bd:57:85:f8:7d:76:89:5e:79:ef:71:
f3:46:2a:57:3c:ca:d9:7a:66:49:2f:6d:2d:99:0b:b2:76:b5:
3d:23:2c:1e:ab:9d:67:0d:fa:de:67:e0:e0:36:c4:65:e6:fe:
d3:2a:46:88:8c:05:b6:7e:eb:fb:bd:ea:9a:f2:c7:a2:62:a4:
9a:ff:6f:2f:78:2d:aa:7c:50:e2:ad:1c:da:27:6c:b9:f1:00:
2a:84:0d:49
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUVwixVxKKwCwx0UIHdYRj7dh1LykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA2MTExNzQ3MDlaFw0yNjA2MTAxNzUyMDlaMDMxMTAvBgNV
BAMTKEFCNjE0MkMyNzU3NzhGMTJCQjFFRTNBQ0JEMDkzQkVFQjZDMjVGMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDuHJ2gOsBBm3tjNyt4ZEOw/kR
3f3cmVVXcSNH7V83kMeJc28NrpSr01t+hPeRm5ZVcfS/3LDBB7gCrlN+A9Jb+wRs
JD9ZPrN2rPUXSqEog6/UF71aiVPoLLVgO2e+qKif8YzLCLgfNMI9Gd0QBvK/rCyN
yDSgtmlihd5woP7xt/tV2yuBAyoub9jvx3SuZI+4HDv7G52X7owMmYN4iyYuCxRE
X8BL+sJK3N0UI0HUhfOxD81oVk/SmIyRWPLBgiHvehWboRT3fqXMEkWOcuvwC1fE
KEbrSGWTJwweqK4H61tYU+bCoWbMPlcDzwROQODtyz08R09E2Y5LYXMsO8nVAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUq2FCwnV3jxK7HuOsvQk77rbCXzEwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTQ5MDIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH
AQH/BBYwFDASBAIAATAMAwQAGwDqAwQAZ0RsMA0GCSqGSIb3DQEBCwUAA4IBAQBy
3nBvbKntmrAF/fGNrpaQElSeRo+wGquDC6IghF45b8ue7v4QbWa09FzB4EilDWiH
WLK+tpr6CW2qyADewSk4TDcAUATv/QiVEaTCsmBWjKCowORPmGe3H03wGouwmEH4
o/PRaB+v9IBsJi80jyiiPSOZdBMR6Klhb+5w5fr6yhPlet33RCmI6uqHSV6ZLwTe
q40WjH+m9J30ygNp9S3QMssYx0gpROs0vVeF+H12iV5573HzRipXPMrZemZJL20t
mQuydrU9Iyweq51nDfreZ+DgNsRl5v7TKkaIjAW2fuv7veqa8seiYqSa/28veC2q
fFDirRzaJ2y58QAqhA1J
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:27:46 2025 by rpki-client