Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: DEGUbmUhaNTLZuAPaWJdWF+LtNL0DjdDY+o21lZE/TA=
Subject key identifier: 17:37:49:23:C5:B1:BF:E4:4E:0C:C8:04:C6:95:74:A5:5D:9F:95:07
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2D11E8CB9929C94B3FA4FC1D5A4DDA214395019A
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
Signing time: Fri 04 Sep 2026 12:32:53 +0000
ROA not before: Fri 04 Sep 2026 12:27:53 +0000
ROA not after: Fri 03 Sep 2027 12:32:53 +0000
asID: 0
IP address blocks: 2a09:54c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:11:e8:cb:99:29:c9:4b:3f:a4:fc:1d:5a:4d:da:21:43:95:01:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 4 12:27:53 2026 GMT
Not After : Sep 3 12:32:53 2027 GMT
Subject: CN=17374923C5B1BFE44E0CC804C69574A55D9F9507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:e3:0e:95:3c:15:70:f8:36:e6:38:d1:60:
15:85:00:0a:ad:b0:4b:d5:35:66:3d:b7:49:94:2b:
45:2c:4a:7d:e6:92:7d:6e:9c:f4:9d:5d:6c:ca:53:
5b:04:3d:db:b9:5a:e2:42:3c:f7:8c:d4:65:f5:bf:
a6:57:d3:5e:db:1a:33:47:d1:0e:95:d9:47:49:a1:
5a:bc:14:8e:22:14:6c:4f:ed:78:11:22:e4:5e:ad:
d1:a1:75:81:62:d4:48:09:97:56:16:47:c0:78:d5:
ca:9c:c1:21:65:84:50:7f:a5:87:db:9a:31:69:59:
cc:43:b8:14:39:af:b0:e3:40:05:f0:ff:68:5a:1d:
85:07:70:b6:9e:68:df:56:01:b0:27:d5:d1:b7:b4:
be:bd:56:62:f0:c8:a8:f1:1e:eb:e4:bf:e8:18:f7:
5d:74:97:9a:c6:b1:3e:59:a1:14:44:03:1d:27:e7:
70:85:a4:ec:a1:78:88:a1:02:84:8d:8d:e7:cc:f2:
61:4b:a2:a4:6d:73:43:d4:4d:af:ad:a9:b5:e3:3e:
8c:74:ff:18:d5:ed:6f:f7:ad:6d:65:94:b8:75:0e:
03:7b:65:19:f3:af:e3:b9:f1:9d:95:f5:ff:0e:02:
06:17:ce:e3:85:8f:28:ee:67:aa:24:64:83:95:b9:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:37:49:23:C5:B1:BF:E4:4E:0C:C8:04:C6:95:74:A5:5D:9F:95:07
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c4::/32
Signature Algorithm: sha256WithRSAEncryption
5a:7e:5b:c8:a5:55:a7:03:7e:13:90:b1:49:54:e7:3f:bc:ed:
18:9a:0c:71:18:b3:f1:0b:f0:4c:a5:4e:b3:d6:e0:ce:be:b7:
0c:46:6b:b1:fe:bc:89:41:75:fa:1c:73:ac:fa:33:02:1d:52:
09:6c:41:6d:96:1f:e2:6d:69:46:78:09:c3:ec:e0:f2:af:54:
97:69:5c:fa:9f:ed:b0:11:ea:9d:bd:15:1b:cf:bc:db:f2:a0:
bb:86:49:12:91:b4:0b:44:76:88:22:8a:20:70:53:74:63:11:
ca:af:15:59:c8:bb:70:87:7f:22:e9:de:57:b2:cd:fc:c6:99:
aa:22:24:14:7f:71:dd:86:94:2a:c3:49:a6:6b:0d:00:ee:de:
5e:31:70:ec:2b:73:eb:9d:d7:5b:6c:11:c3:ca:8b:3f:67:5d:
59:aa:b6:a6:08:ef:29:da:74:68:f0:1f:b4:47:d5:1b:4f:e0:
04:74:bd:b6:9b:12:98:e8:af:d5:92:f1:53:bd:85:db:64:88:
80:bf:c0:50:fb:05:16:cc:27:08:67:47:c8:77:b8:65:3b:2a:
77:df:5b:bb:f9:35:53:97:8c:46:88:49:bc:2b:e4:c3:43:16:
3e:10:1f:4a:22:48:0f:c1:1a:e3:64:bf:14:73:c0:1f:83:b1:
94:61:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:34 2026 by rpki-client