Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201341.roa
File: AS201341.roa (raw, json)
Hash identifier: 6E8RpmpGWnije3Ni/exJ3Kpkh6QDrIO0bWGsF/Emqu8=
Subject key identifier: 35:53:0B:35:D7:B6:1D:B6:98:BF:20:66:C0:C4:10:2B:E1:62:72:54
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1264D47BD1C9858375B04DB6FEC67CAE66280EE4
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201341.roa
Signing time: Thu 04 Jun 2026 15:58:50 +0000
ROA not before: Thu 04 Jun 2026 15:53:50 +0000
ROA not after: Thu 03 Jun 2027 15:58:50 +0000
asID: 201341
IP address blocks: 185.121.160.0/24 maxlen: 24
185.121.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:64:d4:7b:d1:c9:85:83:75:b0:4d:b6:fe:c6:7c:ae:66:28:0e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:50 2026 GMT
Not After : Jun 3 15:58:50 2027 GMT
Subject: CN=35530B35D7B61DB698BF2066C0C4102BE1627254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:7c:12:ea:6e:3f:63:e9:7f:aa:fd:fe:e5:
91:b2:3a:cf:c7:57:4e:dd:6c:4c:9f:a9:8a:1a:9a:
ea:73:2f:3b:5f:ab:91:ec:80:9a:97:8d:48:e8:64:
b9:f0:8f:72:c4:3b:89:a2:2a:4f:b7:67:c1:63:9f:
59:2c:e6:2b:5b:b8:ba:55:8b:c7:cc:49:c5:0c:7a:
dd:d6:3c:79:51:94:6f:e7:8d:e0:19:3b:8b:e5:f1:
96:66:29:48:d9:80:b5:e8:5e:45:a6:e7:a2:a7:6d:
c2:96:82:8e:26:00:e0:51:27:e2:d0:11:53:57:ba:
ae:96:43:81:d8:40:dc:93:c2:5e:76:52:b5:6d:c8:
e2:bb:fd:2a:f7:32:fa:ca:5c:c2:b7:bc:b4:99:ed:
52:2b:6b:76:8b:11:79:d6:8f:f5:9b:74:bc:cf:81:
ef:75:53:2e:f2:9b:e9:ec:ff:65:d6:17:d2:37:79:
74:cc:36:51:79:db:ba:46:c6:a5:2e:63:c8:fd:87:
9e:50:d3:ef:91:b8:2e:76:01:0f:33:44:c2:72:0a:
e8:63:9f:48:89:2c:6f:9e:bf:f9:33:79:37:11:ee:
09:17:91:f7:25:8e:80:b8:fc:df:0f:7d:76:63:86:
3b:b2:4a:3a:2f:4e:cf:24:5f:18:06:65:cc:09:cb:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:0B:35:D7:B6:1D:B6:98:BF:20:66:C0:C4:10:2B:E1:62:72:54
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.160.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:89:ef:66:46:39:02:bd:98:60:13:9b:e4:a9:33:20:75:b5:
21:85:c9:22:2c:15:29:d4:c2:c7:4f:81:dc:fd:20:b9:cb:17:
d9:8d:bd:bc:0e:7f:fd:f4:66:27:f2:9c:7e:67:13:a5:f2:92:
db:29:2c:12:74:3b:38:4e:12:c3:26:f0:d7:f0:75:e2:15:35:
b9:66:1d:07:ad:07:18:91:34:4d:5a:5f:b3:56:f5:a8:8e:36:
97:74:18:c6:0f:75:5f:79:a7:fd:89:24:99:02:2c:fd:ea:71:
4b:c2:30:b5:bc:8c:62:ac:4e:e4:b1:5b:4b:22:fc:2f:d8:31:
2c:24:62:65:b0:97:08:42:d0:14:bc:54:16:64:a2:ac:1a:5e:
c0:f5:34:de:be:14:10:71:8d:c7:ea:e0:61:c9:99:9b:5e:05:
8f:cd:07:98:31:6b:ed:23:48:20:42:52:7e:cc:23:0f:74:b8:
8a:25:91:b2:e5:d4:a5:ee:40:44:06:4d:e6:7c:a2:45:63:27:
d7:f2:23:32:94:c9:e2:a2:68:1e:13:a0:93:49:bd:24:29:c7:
a0:fd:fc:83:eb:d9:c4:cb:49:9a:8d:d2:cc:ea:17:0e:a2:11:
71:a2:68:2f:05:65:55:9d:79:1b:5e:c4:39:7b:cc:37:62:1a:
35:2c:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:42:46 2026 by rpki-client