Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
File: AS151817.roa (raw, json)
Hash identifier: 1ctc/eSw49fPR0BqDgZwuwjrmwsHw0SGxkEjmeCVWE8=
Subject key identifier: 33:CB:F0:79:88:5B:87:10:A1:71:DC:3E:FB:54:00:BE:4D:5D:02:6D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2AC6A4F57561AA9609C6B0E45D64005E66A4CD96
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
Signing time: Wed 10 Jun 2026 15:01:22 +0000
ROA not before: Wed 10 Jun 2026 14:56:22 +0000
ROA not after: Wed 09 Jun 2027 15:01:22 +0000
asID: 151817
IP address blocks: 103.208.84.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c6:a4:f5:75:61:aa:96:09:c6:b0:e4:5d:64:00:5e:66:a4:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 10 14:56:22 2026 GMT
Not After : Jun 9 15:01:22 2027 GMT
Subject: CN=33CBF079885B8710A171DC3EFB5400BE4D5D026D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:8e:63:0a:41:9a:a0:9e:49:e7:28:0d:f1:
7a:ce:32:5b:ab:7c:b7:2d:96:8e:fd:d6:21:0e:60:
38:33:cf:e8:0d:f1:1b:34:3a:99:17:e1:d5:ad:da:
9f:41:c7:4c:1c:a3:74:1c:ac:0e:28:76:23:24:f5:
bc:df:8b:ba:de:1b:80:4b:1b:a9:aa:47:94:57:43:
ee:e6:19:67:73:9c:19:20:da:f7:59:27:9c:d2:c6:
01:91:e9:2e:f1:07:c4:5f:ff:95:27:06:ad:1e:37:
c9:51:42:7f:16:9d:9f:35:cb:7a:c2:a3:2e:65:19:
c4:86:30:57:6a:d5:04:9f:86:f0:56:54:81:bb:c9:
7c:8a:30:aa:59:b2:51:5e:b5:94:05:b8:95:13:1d:
f4:8d:3d:42:e1:2a:30:8c:2f:e4:a6:81:5b:72:4c:
c9:2e:74:9b:4c:a6:4c:3c:8a:d2:d7:85:7e:0a:16:
ef:d2:e6:db:be:2a:ce:2c:d4:f3:66:2e:47:1e:d7:
31:78:dc:9f:9b:78:ba:32:a4:51:f0:08:7d:22:a3:
de:74:5c:8a:4a:93:18:4d:1e:29:9c:32:de:ba:d6:
04:dc:62:b2:a7:a1:ff:71:9a:fa:ac:7f:c9:33:79:
b5:76:cd:23:49:3c:be:98:eb:84:63:05:e3:f0:1f:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CB:F0:79:88:5B:87:10:A1:71:DC:3E:FB:54:00:BE:4D:5D:02:6D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.84.0/22
Signature Algorithm: sha256WithRSAEncryption
95:c4:c1:c9:6c:bb:24:a6:72:a8:19:ca:b3:25:41:41:a0:09:
12:63:76:54:58:05:e5:30:89:82:f0:11:2c:44:31:86:be:61:
7e:34:66:48:94:c1:4e:be:50:b6:8c:ed:c2:94:dc:f7:83:04:
95:3e:e8:45:2d:bd:67:60:80:16:ef:40:69:ad:3f:3e:1b:3b:
bc:0e:05:a2:c2:59:bb:ca:ae:7c:57:34:99:e6:b7:1f:84:8d:
25:be:bf:7f:2b:87:c4:61:88:1c:7a:8c:24:10:f5:e6:32:29:
3a:77:99:32:58:49:4d:88:e0:62:86:9a:f8:d8:11:1c:35:c1:
bb:a0:08:c2:39:00:ad:f2:8f:7f:9c:44:c4:aa:5a:b6:b0:f5:
ae:40:84:4f:60:04:e0:65:0a:7c:f2:4f:10:6b:3c:4e:d4:a2:
6d:de:f8:66:42:0c:d4:00:44:c7:37:94:46:2f:14:3b:63:4f:
a9:41:3b:4e:06:a9:54:70:88:d9:85:92:b8:6b:59:db:b7:4d:
c2:ab:fa:13:2b:3e:33:e4:97:9f:70:f0:a2:20:8d:8e:4c:7d:
a8:0d:dc:a3:73:73:c1:0b:1f:18:d3:d9:2d:6e:0e:f5:08:11:
ce:9e:e3:9b:bf:7a:ec:9d:9f:4c:15:3d:cd:28:5d:f4:64:25:
a3:e8:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:29 2026 by rpki-client