Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa
File: AS203199.roa (raw, json)
Hash identifier: c1Mq9nOYEJZzzQXEMMjxQb9eLQHYIF+DRfzsAaFc+6Y=
Subject key identifier: D0:F1:E6:5E:AF:DD:8E:A0:F8:5A:B8:8D:EC:E9:F2:00:4A:75:6F:1F
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1D6E4733B1EAE029AD69A0489F934F0D58E75159
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa
Signing time: Thu 04 Jun 2026 15:58:52 +0000
ROA not before: Thu 04 Jun 2026 15:53:52 +0000
ROA not after: Thu 03 Jun 2027 15:58:52 +0000
asID: 203199
IP address blocks: 2a06:a005:19d0::/44 maxlen: 48
2a06:a005:2d90::/44 maxlen: 48
2a06:a005:2da0::/44 maxlen: 48
2a06:a005:2db0::/44 maxlen: 48
2a06:a005:2dc0::/44 maxlen: 48
2a06:a005:2dd0::/44 maxlen: 48
2a06:a005:2de0::/44 maxlen: 48
2a06:a005:2df0::/44 maxlen: 48
2a06:a005:2e00::/44 maxlen: 48
2a06:a005:2e10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6e:47:33:b1:ea:e0:29:ad:69:a0:48:9f:93:4f:0d:58:e7:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:52 2026 GMT
Not After : Jun 3 15:58:52 2027 GMT
Subject: CN=D0F1E65EAFDD8EA0F85AB88DECE9F2004A756F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:7f:47:7a:2f:71:9b:8c:4c:07:fc:7e:fa:
a2:79:e6:e5:40:aa:23:7e:11:f1:51:50:e9:a7:30:
b9:9f:c8:1f:97:ba:1f:dd:48:43:88:96:63:a8:bd:
12:90:be:a6:2d:c6:36:98:d5:3f:63:89:ec:f2:a3:
1f:e4:58:cd:ab:d8:5a:12:9c:33:5b:e0:a6:52:f5:
81:e6:9b:5e:8d:68:41:18:39:ed:9b:e6:ac:6a:d4:
00:71:8b:4d:5b:ed:e3:cb:e3:18:9a:52:67:93:84:
98:11:83:40:3e:2a:68:b5:23:94:9c:4b:6a:aa:94:
26:a9:74:c4:22:01:31:18:f9:6d:15:9b:9c:f0:12:
87:a8:06:02:e3:36:81:26:75:79:99:3c:5d:6a:1f:
66:c6:a4:ad:8c:0d:f0:86:d5:d0:8e:9f:60:46:f9:
f0:04:24:04:47:24:f6:e1:c6:84:12:d9:9e:a0:7d:
e5:42:b8:b2:ae:ce:ef:cc:48:0d:b0:d4:86:7e:58:
95:19:01:51:2f:12:7e:4f:4e:c1:f5:61:b2:3a:66:
e4:f5:4a:49:e3:e0:07:ab:06:ce:02:f4:f3:66:55:
d8:b7:f7:a8:ca:2f:1c:c7:49:66:f9:89:58:57:0f:
97:b8:7f:ff:60:d5:7f:ef:70:87:e1:ce:f1:ff:ca:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:E6:5E:AF:DD:8E:A0:F8:5A:B8:8D:EC:E9:F2:00:4A:75:6F:1F
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19d0::/44
2a06:a005:2d90::-2a06:a005:2e1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:da:0b:c7:18:fa:03:71:98:c7:57:01:cf:90:cb:49:4d:8f:
eb:c6:05:01:c7:51:67:9b:cb:6a:3c:73:47:a1:60:43:0a:ae:
3f:02:ff:3c:b6:d8:e9:f1:f4:3d:88:da:e6:10:03:a0:2c:aa:
ba:8c:5e:f2:c7:be:9b:d3:dc:79:92:00:7a:05:bf:9b:64:93:
93:4d:ce:46:76:e8:a3:6f:24:bf:f1:88:d4:e6:cd:2c:d2:28:
8c:fe:3d:5f:8e:ca:3c:3a:e3:00:ec:82:13:eb:09:be:a6:8b:
4b:ce:00:6b:88:b1:7c:5e:e8:6d:82:24:a6:24:79:24:ac:df:
df:69:40:31:00:01:ab:d5:14:d8:3d:24:5a:eb:87:2d:d6:66:
9a:e8:c5:1a:10:bb:6c:9d:1d:bc:da:d1:5c:48:15:1c:1f:ee:
e7:68:08:37:e9:67:cf:4e:4a:d7:0f:31:65:a0:f2:97:a7:5b:
86:b0:39:31:41:52:03:92:87:de:86:ac:d4:39:04:ac:8e:1b:
e1:c1:1b:b2:40:08:2b:e6:7f:aa:bb:85:f2:ef:14:52:d9:cf:
3c:4b:ed:e8:40:95:5d:48:8d:e4:2f:47:51:31:85:a5:49:7f:
fe:1e:f4:1f:3d:e2:34:16:00:1c:8d:1b:f9:11:ca:f9:fb:7d:
83:80:5e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:17 2026 by rpki-client