Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS134351.roa
File: AS134351.roa (raw, json)
Hash identifier: l5aQ8Pu4Ey8F0mhxtrynTaz4btEgPcTOif+y96i6JAk=
Subject key identifier: F3:58:38:2C:2A:67:AC:7B:D3:13:49:C7:35:09:72:4B:57:1E:E1:46
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5085A9704F87EE95F30D552FB25C93E7C84A3DFD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS134351.roa
Signing time: Fri 12 Jun 2026 09:11:11 +0000
ROA not before: Fri 12 Jun 2026 09:06:11 +0000
ROA not after: Fri 11 Jun 2027 09:11:11 +0000
asID: 134351
IP address blocks: 103.254.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:85:a9:70:4f:87:ee:95:f3:0d:55:2f:b2:5c:93:e7:c8:4a:3d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 12 09:06:11 2026 GMT
Not After : Jun 11 09:11:11 2027 GMT
Subject: CN=F358382C2A67AC7BD31349C73509724B571EE146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:5c:1f:98:28:d4:a5:38:1e:6f:58:ee:94:
0d:f8:c6:0a:d0:50:bb:5b:33:f8:55:82:e1:54:d8:
28:13:c1:99:96:40:57:c8:81:e9:fc:0e:e4:46:da:
dc:52:50:18:59:5b:cf:b7:d9:20:00:9b:f6:38:ba:
40:d3:25:db:69:49:0e:0f:6d:16:a5:c2:44:1b:be:
cb:af:97:9d:aa:88:62:3a:1f:5e:4a:f9:fc:9e:d9:
65:99:69:0f:9f:b2:50:8d:d6:49:7f:37:b7:e8:ec:
62:11:22:6d:b9:73:4f:76:b6:5c:54:d3:b5:1a:55:
6f:b1:2d:0f:6e:9d:29:88:c6:08:18:a6:af:3e:2b:
7e:c6:6b:91:15:80:6c:38:6c:9d:43:26:c4:cb:05:
cb:98:fe:9b:ac:24:af:5a:1e:e5:52:18:2e:dd:0d:
ae:f8:23:ee:bd:38:06:b7:29:f1:66:e7:aa:62:7c:
43:fa:20:d0:3d:39:51:3f:82:17:68:de:25:dc:a5:
55:ae:2a:44:e9:6c:d8:c1:3c:df:9b:37:09:d8:99:
cc:2d:7a:8f:cd:c4:10:db:ee:93:a5:3f:ba:35:ea:
7a:6e:da:d2:d1:36:f0:42:ff:6c:b7:66:68:ef:58:
f1:ec:bd:f0:b1:f1:74:30:73:e9:ec:9c:f6:cb:ad:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:38:2C:2A:67:AC:7B:D3:13:49:C7:35:09:72:4B:57:1E:E1:46
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS134351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:8e:dd:cd:66:49:d9:6a:d3:25:da:e0:50:e2:10:a8:40:15:
aa:ef:00:a8:7a:71:6e:39:a9:61:3c:38:81:c1:77:72:20:9e:
ed:f3:1f:97:16:17:82:ca:e4:8c:f9:fe:ee:e2:2f:0d:09:c7:
37:59:45:31:e9:c9:1c:48:e7:90:e5:e6:6e:f9:88:86:55:e1:
ac:03:0d:b6:95:84:cc:9d:12:98:ba:13:94:e4:d4:7f:4b:dd:
5e:d3:8b:b9:f3:03:d3:16:63:d4:c6:4d:f5:8f:b1:b2:b0:ee:
0c:aa:a4:60:0b:c9:60:a8:5c:e8:fa:dc:ee:e0:84:a7:64:c5:
54:9d:35:e1:ff:c9:76:9a:26:35:0d:cf:93:26:a3:09:23:99:
e6:d1:e0:fc:bb:29:84:8f:94:52:02:67:b5:96:04:b2:be:93:
36:df:bd:81:59:ae:d4:28:53:94:76:eb:1c:f5:3c:4e:69:bc:
a9:b7:5d:8e:9c:bb:37:c9:b9:83:b8:d9:03:37:68:5a:6f:bb:
01:82:d6:91:13:ae:8e:b8:24:b2:35:8a:78:9a:93:65:90:6f:
c8:f3:08:be:cc:ff:45:6a:ca:d5:88:41:f0:37:48:34:d4:68:
86:9f:c9:84:11:db:3e:76:3b:e6:15:7b:7c:00:8b:8e:72:42:
3c:e2:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:35 2026 by rpki-client