Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa
File: AS216409.roa (raw, json)
Hash identifier: j/YCcVmsZtv2SgWlx+NoDspbXj03OUvLsGk0XmD72Fg=
Subject key identifier: 18:22:C8:2D:A3:09:4C:16:B2:89:41:CC:93:16:5D:D8:4C:B7:CF:62
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 53EC0D41C01635A230B958E53960F6D7305F15D3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa
Signing time: Sun 08 Jun 2025 09:38:17 +0000
ROA not before: Sun 08 Jun 2025 09:33:17 +0000
ROA not after: Sun 07 Jun 2026 09:38:17 +0000
asID: 216409
IP address blocks: 94.24.109.0/24 maxlen: 24
206.53.2.0/24 maxlen: 24
206.53.3.0/24 maxlen: 24
2a05:dfc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 15:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ec:0d:41:c0:16:35:a2:30:b9:58:e5:39:60:f6:d7:30:5f:15:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 8 09:33:17 2025 GMT
Not After : Jun 7 09:38:17 2026 GMT
Subject: CN=1822C82DA3094C16B28941CC93165DD84CB7CF62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:eb:87:dd:d3:2f:34:03:8b:5d:9c:9b:fb:
c4:40:bb:0e:6a:5c:9b:bd:46:6a:9a:ce:9a:30:2f:
48:1b:89:0c:54:51:80:b9:7b:b4:a5:86:c5:7c:f7:
da:aa:56:2a:ac:4b:b4:06:c4:31:1f:b3:55:bd:15:
76:69:b4:d9:0d:c3:05:d8:ba:94:a3:32:81:79:db:
b0:b7:51:10:31:a9:09:b4:b8:d3:b3:80:ff:4f:95:
b6:00:72:91:83:02:72:82:6b:f1:62:72:8c:ad:09:
04:3e:a2:2c:f5:f4:89:3e:0a:97:5d:25:dc:45:a4:
8c:52:46:35:a1:ec:52:73:99:48:2c:01:38:5b:a5:
73:75:8d:60:5c:f6:15:97:ab:29:8e:5f:ce:f8:ce:
93:2e:ac:ac:9e:55:5f:3a:41:f4:18:6c:d3:8c:cc:
4e:51:ec:7e:48:ab:29:5d:6a:e1:cd:22:04:10:50:
68:45:cb:5f:a9:5c:a9:51:bc:1b:80:b2:7c:dd:55:
8e:31:0a:7a:dd:29:1a:f3:05:b1:1c:62:67:56:13:
c6:e4:9e:ce:18:e6:16:e2:46:ac:dd:1a:e3:a6:30:
0c:5f:e8:13:fd:5c:99:9a:ea:64:59:21:b9:e0:a2:
9c:f1:1a:e6:50:ad:35:47:42:ff:c7:71:e1:01:6e:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:C8:2D:A3:09:4C:16:B2:89:41:CC:93:16:5D:D8:4C:B7:CF:62
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS216409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.109.0/24
206.53.2.0/23
IPv6:
2a05:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
07:e7:81:54:43:ee:e2:dd:92:33:ca:75:5b:52:03:65:d2:65:
e8:77:48:a2:b3:1f:c4:7d:1f:5f:f4:cf:37:84:66:da:8e:2b:
0c:f0:03:10:0b:40:0f:8a:08:4f:2e:29:ef:bc:c4:0c:6c:1c:
f6:40:d0:b4:ab:63:d9:06:17:4d:c1:99:b4:57:7b:4d:69:23:
41:61:f9:44:77:5c:8c:30:82:80:54:f3:19:2d:01:b7:51:ec:
ef:56:44:6b:0d:38:ab:d8:6f:91:40:77:40:bc:19:35:16:2c:
e1:6a:9a:b9:f6:52:7d:ce:50:62:5f:65:02:74:8b:cd:ea:75:
fc:57:96:b0:81:4d:38:fc:e7:9e:f2:f8:c8:55:64:b3:59:d8:
8f:8e:c2:82:94:22:79:a4:96:24:7b:1d:0f:c6:3e:28:b5:6e:
aa:ab:15:6d:16:37:86:3e:61:7d:02:0c:5a:e7:6f:48:2f:b7:
6f:00:81:4b:77:18:9a:76:bf:40:a1:87:95:e5:64:90:cb:bc:
5f:82:1c:f7:48:db:4c:d8:c3:2c:2b:62:47:25:eb:87:2a:86:
92:73:f3:45:84:0c:4e:d8:bf:1e:ee:d2:d3:8e:23:cb:38:ce:
5c:12:28:eb:88:cf:96:8c:16:5b:97:e0:e9:85:ff:7e:9c:78:
25:fd:dc:80
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUU+wNQcAWNaIwuVjlOWD21zBfFdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA2MDgwOTMzMTdaFw0yNjA2MDcwOTM4MTdaMDMxMTAvBgNV
BAMTKDE4MjJDODJEQTMwOTRDMTZCMjg5NDFDQzkzMTY1REQ4NENCN0NGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMeuH3dMvNAOLXZyb+8RAuw5q
XJu9RmqazpowL0gbiQxUUYC5e7SlhsV899qqViqsS7QGxDEfs1W9FXZptNkNwwXY
upSjMoF527C3URAxqQm0uNOzgP9PlbYAcpGDAnKCa/FicoytCQQ+oiz19Ik+Cpdd
JdxFpIxSRjWh7FJzmUgsAThbpXN1jWBc9hWXqymOX874zpMurKyeVV86QfQYbNOM
zE5R7H5IqyldauHNIgQQUGhFy1+pXKlRvBuAsnzdVY4xCnrdKRrzBbEcYmdWE8bk
ns4Y5hbiRqzdGuOmMAxf6BP9XJma6mRZIbngopzxGuZQrTVHQv/HceEBblW9AgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUGCLILaMJTBayiUHMkxZd2Ey3z2IwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjE2NDA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQAXhhtAwQBzjUCMA0EAgACMAcDBQAqBd/AMA0GCSqG
SIb3DQEBCwUAA4IBAQAH54FUQ+7i3ZIzynVbUgNl0mXod0iisx/EfR9f9M83hGba
jisM8AMQC0APighPLinvvMQMbBz2QNC0q2PZBhdNwZm0V3tNaSNBYflEd1yMMIKA
VPMZLQG3UezvVkRrDTir2G+RQHdAvBk1Fizhapq59lJ9zlBiX2UCdIvN6nX8V5aw
gU04/Oee8vjIVWSzWdiPjsKClCJ5pJYkex0Pxj4otW6qqxVtFjeGPmF9Agxa529I
L7dvAIFLdxiadr9AoYeV5WSQy7xfghz3SNtM2MMsK2JHJeuHKoaSc/NFhAxO2L8e
7tLTjiPLOM5cEijriM+WjBZbl+Dphf9+nHgl/dyA
-----END CERTIFICATE-----
Generated at Mon Jun 16 00:02:45 2025 by rpki-client