Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199682.roa
File: AS199682.roa (raw, json)
Hash identifier: 6m9M8UtJZtxJ2v4UjLEVTE9lmocnWUtSIFC0QjWyI4I=
Subject key identifier: 65:CA:75:37:81:4F:92:AA:22:AC:E9:93:B4:5A:2E:81:C2:72:6D:1D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 672C238E503FFF350AA9051D052718569D36CCF7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199682.roa
Signing time: Thu 04 Jun 2026 15:58:52 +0000
ROA not before: Thu 04 Jun 2026 15:53:52 +0000
ROA not after: Thu 03 Jun 2027 15:58:52 +0000
asID: 199682
IP address blocks: 2a06:a005:180c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2c:23:8e:50:3f:ff:35:0a:a9:05:1d:05:27:18:56:9d:36:cc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:52 2026 GMT
Not After : Jun 3 15:58:52 2027 GMT
Subject: CN=65CA7537814F92AA22ACE993B45A2E81C2726D1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:cd:ca:61:d8:f3:9a:ab:9c:c8:97:10:9d:
27:e9:9c:ab:28:16:87:12:1e:62:99:fb:9c:c2:07:
f5:0d:96:07:1e:19:c3:26:ba:e9:55:72:d3:fa:ea:
57:a1:22:91:98:9e:ee:c0:19:dd:d6:e1:24:da:93:
73:3c:16:31:ab:19:b9:21:e4:12:6a:b2:27:2c:d5:
1e:7b:12:5b:31:7f:fc:d0:f8:74:53:c3:27:ce:19:
56:03:0a:63:3a:6a:0f:f1:5a:5d:57:41:72:be:b1:
f6:d6:2a:06:2c:d0:7a:16:6b:b2:d2:a0:e8:7f:b5:
49:68:ca:cd:a2:6a:0e:a3:e3:db:f3:0d:69:b9:9a:
68:56:9e:81:c9:ee:83:33:56:89:57:65:46:89:13:
6b:ef:6c:2e:14:40:12:78:75:2b:20:a9:0b:6c:c2:
b5:9a:da:f2:e4:43:50:16:54:6d:34:55:62:83:f7:
cc:0f:42:1b:46:ac:eb:9a:42:61:2a:d7:9b:20:a1:
7d:fe:05:1b:29:47:a2:52:24:45:87:ba:67:6f:e6:
a3:69:5b:2f:68:0f:c2:4d:cc:e2:a1:1b:d1:ef:bf:
01:ab:a5:6a:f2:10:82:92:bf:a0:6b:e2:30:f8:9d:
84:15:28:ea:96:9d:ef:4a:71:08:83:80:cf:30:b0:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CA:75:37:81:4F:92:AA:22:AC:E9:93:B4:5A:2E:81:C2:72:6D:1D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180c::/48
Signature Algorithm: sha256WithRSAEncryption
4d:a1:14:af:e7:2a:41:0d:95:58:2a:eb:d2:b3:16:cc:f4:20:
5c:17:e3:f1:69:d5:6f:d6:3f:13:fb:cd:da:5e:f0:84:8e:8a:
b4:99:4c:b2:a3:d2:36:1f:d5:2d:92:b9:f6:86:cf:f5:c5:ed:
37:96:f7:ab:fd:30:a0:87:bd:4c:29:43:ab:21:95:6e:8c:59:
df:e4:f6:e9:81:67:01:b5:5f:26:77:b5:65:89:30:66:0a:54:
3a:64:38:8c:87:fb:a0:0e:6b:d0:a9:20:3c:09:69:c6:75:9d:
79:1c:fd:9b:66:b3:73:29:47:4c:63:80:6b:f9:5e:ef:c9:ab:
26:9e:8b:2d:6c:e5:d6:31:a6:28:81:4c:06:11:d6:8b:41:4a:
18:1f:06:97:00:dd:6a:5c:04:51:b8:6e:51:35:c1:3f:69:4b:
d3:47:b0:ad:91:ee:80:d2:13:9a:db:43:3b:ac:26:4e:22:1f:
2a:b9:55:fa:e2:f0:07:87:12:6a:ef:c7:00:b0:ca:83:0b:cc:
83:bf:e8:f1:6c:dc:13:81:7e:9a:2f:a3:ef:9c:ce:40:c3:b4:
90:e7:09:a4:a6:36:f6:9c:ff:8f:9c:f2:1b:65:ab:32:88:fd:
93:6b:c2:35:a2:db:d0:95:d4:22:6d:01:fe:38:9f:01:1a:0d:
06:2f:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:08 2026 by rpki-client