Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: lp4cMkToJhfLHO7xAiqOO7BzQxiYkFkhGT2sU+SAFuY=
Subject key identifier: A3:F8:13:E4:21:35:C4:36:2F:63:AE:7D:88:E0:AA:B4:FD:79:26:71
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 62139F4D418B910B3F77CFDF474327C2CC8D7BD6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS63023.roa
Signing time: Sat 31 May 2025 02:04:10 +0000
ROA not before: Sat 31 May 2025 01:59:10 +0000
ROA not after: Sat 30 May 2026 02:04:10 +0000
asID: 63023
IP address blocks: 103.151.40.0/24 maxlen: 24
103.151.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:13:9f:4d:41:8b:91:0b:3f:77:cf:df:47:43:27:c2:cc:8d:7b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: May 31 01:59:10 2025 GMT
Not After : May 30 02:04:10 2026 GMT
Subject: CN=A3F813E42135C4362F63AE7D88E0AAB4FD792671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:42:12:85:20:f8:26:28:5f:3f:89:d0:71:
d5:9c:2b:0f:e0:fd:42:1e:00:f6:5c:7b:1a:ad:55:
d0:4a:1b:62:ed:aa:f0:eb:a9:4d:f7:48:27:a0:64:
76:b4:e0:54:29:a7:50:53:36:ba:f9:03:15:a2:97:
59:e3:5d:aa:8c:4a:ad:ba:07:bd:46:31:3b:dc:9b:
25:8f:7a:f7:c6:2c:1f:52:fb:41:bd:bb:6b:fc:1e:
80:75:cf:d2:1a:51:85:38:9c:51:6c:f2:fe:18:eb:
d7:63:e9:0a:be:c4:ca:c7:55:0f:d6:e4:1e:5f:89:
41:3c:dd:df:80:76:a9:d1:25:c7:f3:d5:1a:a7:a5:
ce:9d:0e:3e:54:df:39:b7:c2:88:3a:e8:e4:2e:cc:
01:ee:ab:06:5b:69:7d:23:fe:bc:66:14:be:71:ff:
37:0c:21:2d:46:98:3b:cf:59:7e:81:55:a9:7d:2d:
12:f2:70:bc:10:91:f6:20:3e:ba:8c:16:54:77:ac:
a1:c6:82:22:e4:45:fe:27:f4:c0:73:4a:e5:d5:a2:
23:72:41:9e:ee:76:f8:4e:96:b1:a8:41:90:93:bf:
00:31:2d:f9:76:bc:49:d3:da:94:8a:36:08:50:17:
df:77:a1:20:24:0b:c2:32:8d:df:15:87:f8:79:90:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:13:E4:21:35:C4:36:2F:63:AE:7D:88:E0:AA:B4:FD:79:26:71
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.40.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:54:f8:15:d2:ac:51:40:5b:79:88:90:f8:bf:43:60:4b:5d:
62:65:27:22:22:ba:b0:5d:14:12:d2:e0:f9:50:3e:3d:0d:0f:
62:7f:36:05:90:33:9a:3a:3c:62:ee:4f:77:d7:83:6d:bc:25:
ce:95:1a:5e:7f:5e:e2:cf:fa:5e:ab:4b:83:58:f5:33:7a:da:
22:67:a1:52:b1:5f:ae:aa:16:9a:f1:ae:30:42:32:d2:5a:ad:
6d:82:a1:5c:7e:40:82:35:e1:29:63:71:2d:09:ff:f7:71:22:
da:7b:94:7b:96:76:9f:4c:34:49:e4:fe:fb:39:3e:0a:81:34:
97:f8:fb:5c:83:38:22:e7:91:68:07:3c:fd:d2:8b:8e:2d:93:
2b:36:fc:25:4b:dc:52:13:11:67:16:f5:99:4f:5e:81:6c:79:
0d:b4:59:24:cf:ee:b2:33:0b:a3:22:49:0b:1a:a5:9a:90:58:
72:5a:5c:95:b0:b3:6d:7a:ad:df:d8:3d:e0:03:01:e3:8d:4b:
9b:42:6b:4e:9f:c5:e9:1d:29:22:2e:e5:b2:c0:62:c4:47:b3:
da:e8:fc:ac:a6:3a:c1:16:05:07:27:72:46:cb:b0:e8:73:bc:
d1:3e:cf:e4:69:35:4f:46:ad:78:0b:59:53:d7:64:e4:fa:87:
e0:e6:4c:c5
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUYhOfTUGLkQs/d8/fR0MnwsyNe9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA1MzEwMTU5MTBaFw0yNjA1MzAwMjA0MTBaMDMxMTAvBgNV
BAMTKEEzRjgxM0U0MjEzNUM0MzYyRjYzQUU3RDg4RTBBQUI0RkQ3OTI2NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNEIShSD4JihfP4nQcdWcKw/g
/UIeAPZcexqtVdBKG2LtqvDrqU33SCegZHa04FQpp1BTNrr5AxWil1njXaqMSq26
B71GMTvcmyWPevfGLB9S+0G9u2v8HoB1z9IaUYU4nFFs8v4Y69dj6Qq+xMrHVQ/W
5B5fiUE83d+AdqnRJcfz1Rqnpc6dDj5U3zm3wog66OQuzAHuqwZbaX0j/rxmFL5x
/zcMIS1GmDvPWX6BVal9LRLycLwQkfYgPrqMFlR3rKHGgiLkRf4n9MBzSuXVoiNy
QZ7udvhOlrGoQZCTvwAxLfl2vEnT2pSKNghQF993oSAkC8Iyjd8Vh/h5kGYNAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUo/gT5CE1xDYvY659iOCqtP15JnEwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NjMwMjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAFnlygwDQYJKoZIhvcNAQELBQADggEBAE1U+BXSrFFA
W3mIkPi/Q2BLXWJlJyIiurBdFBLS4PlQPj0ND2J/NgWQM5o6PGLuT3fXg228Jc6V
Gl5/XuLP+l6rS4NY9TN62iJnoVKxX66qFprxrjBCMtJarW2CoVx+QII14SljcS0J
//dxItp7lHuWdp9MNEnk/vs5PgqBNJf4+1yDOCLnkWgHPP3Si44tkys2/CVL3FIT
EWcW9ZlPXoFseQ20WSTP7rIzC6MiSQsapZqQWHJaXJWws216rd/YPeADAeONS5tC
a06fxekdKSIu5bLAYsRHs9ro/KymOsEWBQcnckbLsOhzvNE+z+RpNU9GrXgLWVPX
ZOT6h+DmTMU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:39 2025 by rpki-client