Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200306.roa
File:                     AS200306.roa (raw, json)
Hash identifier:          W79w0Gr4LWbi/ySKvV/InAYRafY0B9SZ22LgWh2VyHs=
Subject key identifier:   D3:F4:92:77:C0:34:01:A7:A5:FB:05:B8:BD:6E:19:DD:F6:40:24:8C
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       34C38CF6FDEFCA64F51376092E45E332697C7ADF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200306.roa
Signing time:             Thu 04 Jun 2026 15:58:50 +0000
ROA not before:           Thu 04 Jun 2026 15:53:50 +0000
ROA not after:            Thu 03 Jun 2027 15:58:50 +0000
asID:                     200306
IP address blocks:        2a06:a005:af0::/44 maxlen: 48
                          2a06:a005:b00::/44 maxlen: 48
                          2a06:a005:c00::/44 maxlen: 48
                          2a06:a005:c10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c3:8c:f6:fd:ef:ca:64:f5:13:76:09:2e:45:e3:32:69:7c:7a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun  4 15:53:50 2026 GMT
            Not After : Jun  3 15:58:50 2027 GMT
        Subject: CN=D3F49277C03401A7A5FB05B8BD6E19DDF640248C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:b1:29:ae:3a:7f:f1:d2:e7:6a:1c:28:b8:
                    53:ba:76:ea:8d:54:5d:f0:6c:bc:07:ce:61:38:00:
                    6e:02:3b:1c:60:30:1e:37:24:f0:7f:69:83:1e:e7:
                    b7:86:9f:24:2a:4d:32:38:cc:6a:39:f3:3b:ba:f2:
                    19:2e:2e:38:3d:1c:bf:b7:27:b9:81:50:c8:e9:bc:
                    dc:8e:c7:2a:0b:5d:d5:37:57:35:8c:93:ab:2b:6f:
                    8c:df:a6:32:cc:bd:5d:8a:5e:0a:59:c4:e8:24:c5:
                    79:d7:e1:19:01:2c:83:1d:3e:10:37:b8:8c:a4:73:
                    9d:1c:19:0a:ed:26:5a:f5:24:6a:14:99:15:de:ec:
                    d1:ec:14:fa:06:0a:49:99:15:cf:03:cd:09:37:08:
                    e2:06:a2:5a:cb:22:3a:58:7b:61:4e:d8:60:93:43:
                    88:0e:17:17:49:ad:35:be:5a:9f:eb:01:65:56:f6:
                    1c:87:e1:4f:25:9a:ca:10:dc:9b:3a:46:bd:6e:6a:
                    90:c5:f6:62:67:9e:a5:72:22:3d:c6:2f:a5:57:c0:
                    6d:94:5e:0b:cf:32:91:5c:84:f2:f8:9b:94:1d:7c:
                    fa:29:7c:fa:b6:80:9a:26:fa:f6:c0:ff:8b:11:62:
                    5a:20:ed:0e:d6:bc:4d:2e:4f:45:ee:b9:cb:1a:5d:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F4:92:77:C0:34:01:A7:A5:FB:05:B8:BD:6E:19:DD:F6:40:24:8C
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200306.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:af0::-2a06:a005:b0f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:c00::/43

    Signature Algorithm: sha256WithRSAEncryption
         b3:6c:7a:c4:e9:8c:5e:23:d0:b2:0c:7a:5b:49:78:42:14:b2:
         92:c3:dd:db:e1:06:82:c4:82:ba:a7:da:7e:e2:36:d7:88:9f:
         68:6c:38:91:8e:ab:52:7b:00:1a:26:c1:55:45:84:c6:c7:f1:
         f9:9d:1e:f0:32:c6:03:78:14:ca:fc:68:b6:8d:7c:eb:36:e3:
         f0:b6:79:4d:e2:fe:07:c8:bc:75:b1:54:85:eb:6e:6f:32:71:
         3b:18:60:29:ea:09:b7:e0:a4:9b:b7:eb:7a:79:0a:75:90:e1:
         f0:fc:9a:ef:99:15:50:f4:e7:3c:9b:17:7b:5a:26:e4:69:98:
         9d:56:24:f6:c7:89:42:29:a9:85:04:42:86:28:9a:fc:bf:e3:
         01:e5:c5:e3:14:f2:d6:74:67:25:04:f6:95:8e:44:c6:b1:b6:
         47:ff:73:c6:ef:84:63:63:dc:18:5c:30:f0:44:d8:16:77:90:
         e3:9a:c4:ab:c0:e3:ac:75:3b:a7:43:07:78:90:d4:74:f2:58:
         f8:37:20:ff:03:cb:22:3c:80:07:00:04:01:47:31:96:92:70:
         81:57:37:52:8e:1d:01:a7:1f:7a:fa:37:d1:99:e0:71:dd:4f:
         8d:8b:7f:e6:4f:1f:7c:11:9f:1a:46:f1:89:bc:07:11:ae:1c:
         90:85:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:24:46 2026 by rpki-client