Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa
File: AS199414.roa (raw, json)
Hash identifier: TsX0Ak3xLaxrUVkLfOtKeH+DYt07vhzaDiLv95Qd0AU=
Subject key identifier: 22:6E:6C:EA:0B:35:26:95:E2:5A:F1:BF:E4:40:93:54:58:2C:20:CE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2159061F3505622E2DDAB46FD65EF88253030054
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa
Signing time: Fri 06 Jun 2025 09:10:00 +0000
ROA not before: Fri 06 Jun 2025 09:05:00 +0000
ROA not after: Fri 05 Jun 2026 09:10:00 +0000
asID: 199414
IP address blocks: 118.91.185.0/24 maxlen: 24
206.53.0.0/24 maxlen: 24
206.245.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:59:06:1f:35:05:62:2e:2d:da:b4:6f:d6:5e:f8:82:53:03:00:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 6 09:05:00 2025 GMT
Not After : Jun 5 09:10:00 2026 GMT
Subject: CN=226E6CEA0B352695E25AF1BFE4409354582C20CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:de:90:a8:3b:bc:b9:76:6c:62:c1:9e:fa:
94:71:0d:ef:b8:1b:fe:f2:8d:88:06:fc:05:30:6a:
18:f0:d8:5e:26:80:fb:d9:c4:72:92:3b:b2:d3:c4:
18:75:9c:54:3d:e9:40:10:5d:f5:c1:e6:49:0c:3e:
5d:bc:3e:95:83:35:3a:20:e3:18:f6:1b:da:12:44:
0e:2c:93:01:c6:8d:7f:6d:42:42:c6:e0:c8:59:47:
f0:46:78:c9:7d:7b:0a:3a:ae:6f:68:67:f8:84:5a:
d0:15:a8:10:2f:bb:c8:09:25:88:46:62:ba:63:0c:
82:7e:45:e0:1a:42:22:f1:0d:7c:84:c8:a7:3e:95:
7a:2e:15:ac:fc:15:35:be:c2:bd:c3:21:01:7a:c8:
a2:78:77:31:b0:83:de:84:88:3f:95:3e:25:82:ef:
d3:8a:a4:43:53:30:6b:64:8a:51:74:b7:ed:f8:99:
a2:39:1c:7b:9e:86:1f:1b:95:0b:c0:de:74:8c:66:
33:80:69:a3:e1:af:27:b4:bf:aa:50:40:6e:d7:d6:
55:97:79:f3:d7:29:b1:88:ff:ab:86:c0:b7:c3:58:
22:ec:bc:22:67:64:02:f4:16:8e:9e:7d:c8:15:8a:
85:08:9d:f9:e2:6c:bf:51:85:b3:8f:3c:6d:f9:f4:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6E:6C:EA:0B:35:26:95:E2:5A:F1:BF:E4:40:93:54:58:2C:20:CE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.185.0/24
206.53.0.0/24
206.245.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:61:f2:91:88:af:d3:42:17:d8:1e:8e:8d:d7:08:c9:df:94:
95:ba:30:44:14:2e:86:78:11:49:2a:49:ea:a7:67:85:d3:29:
41:56:42:1b:fa:24:fa:c2:b3:6a:da:c6:76:11:08:74:b7:9e:
c5:4d:b1:45:0f:18:2a:68:14:f9:b6:77:c5:30:b3:9b:db:82:
a1:37:e7:19:7c:db:8c:48:04:83:ea:be:7a:f3:47:cb:48:0c:
77:67:e6:ff:db:b2:fb:c9:d0:2c:a7:68:2a:4f:68:55:0f:0d:
72:55:08:8d:47:f0:89:e0:5d:63:4c:a7:a2:5c:ae:d6:f4:17:
5b:4f:13:21:0a:1c:37:f8:f0:16:88:94:60:a7:9a:5a:28:a9:
7d:9c:88:83:e2:52:c0:81:41:0d:9e:31:4e:ee:6a:fb:4b:92:
5d:dd:5e:80:13:90:8a:db:60:49:f7:93:6f:fd:80:c3:71:e0:
b4:8f:e4:3c:f1:6a:09:71:c8:8c:79:f1:1d:ec:10:40:c4:68:
78:7b:54:cc:41:6e:0a:8b:db:eb:8b:1c:85:ac:5e:64:b5:87:
f1:6a:b2:98:e0:73:af:d8:47:aa:f7:a7:1a:4e:d9:07:cd:8c:
4d:a7:30:2d:12:53:33:fe:e8:e1:76:6d:9b:92:a5:b6:10:36:
c4:8c:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:26:25 2025 by rpki-client