Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203873.roa
File: AS203873.roa (raw, json)
Hash identifier: 13/kBk4hRXFkDXnntXKwN2CJoQCoHLgP2pLkqOc3PnY=
Subject key identifier: 41:37:2C:EF:B2:89:70:6B:5F:68:72:CE:8B:65:C8:E5:99:AF:AA:FC
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 40C8F9B2EACBB68B68391DF5D3267A85D84B9DB6
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203873.roa
Signing time: Thu 04 Jun 2026 15:58:52 +0000
ROA not before: Thu 04 Jun 2026 15:53:52 +0000
ROA not after: Thu 03 Jun 2027 15:58:52 +0000
asID: 203873
IP address blocks: 2a06:a005:1280::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c8:f9:b2:ea:cb:b6:8b:68:39:1d:f5:d3:26:7a:85:d8:4b:9d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:52 2026 GMT
Not After : Jun 3 15:58:52 2027 GMT
Subject: CN=41372CEFB289706B5F6872CE8B65C8E599AFAAFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:02:f2:7c:e9:0c:2c:13:6b:3f:fe:89:82:
2f:7d:40:9d:1f:c3:94:b8:a0:d8:a8:80:a0:af:3f:
4f:dc:5e:30:cc:ae:f4:0b:b0:e1:00:76:ac:a8:da:
39:df:67:93:a6:a1:52:ba:09:d7:b5:e8:2d:a6:ea:
ce:4f:b5:36:33:26:e8:63:c0:c3:e9:13:67:64:2d:
99:aa:8b:ff:15:11:ea:9c:76:0a:4c:23:b3:4f:5d:
8b:f1:a5:f8:ed:1b:80:77:d1:5c:91:83:69:63:b7:
e7:b7:d3:16:78:0e:5b:0d:16:be:6c:f2:83:ca:9b:
3c:bb:6a:61:d5:7e:b2:7b:26:bb:58:53:3e:bf:f3:
cf:0c:c4:5e:77:55:3a:16:37:8b:69:e4:72:bb:55:
3b:f1:4f:35:1e:07:6e:ce:06:10:1b:fd:20:3d:77:
96:f5:cf:67:bb:df:22:27:e1:e4:20:99:bb:41:ed:
43:69:61:26:b8:0d:7e:ec:a1:6f:90:1d:f2:45:00:
8b:a0:0b:6e:42:1d:9c:90:3a:56:c8:2e:20:37:7a:
91:b6:90:88:9d:94:01:02:79:20:8b:99:48:f5:2b:
ed:b2:1e:cb:61:99:78:42:e7:9d:ec:47:9e:9a:c2:
94:b1:a5:e3:c8:62:6f:b4:50:30:d8:c3:b3:8b:9b:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:2C:EF:B2:89:70:6B:5F:68:72:CE:8B:65:C8:E5:99:AF:AA:FC
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203873.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1280::/44
Signature Algorithm: sha256WithRSAEncryption
5c:e1:89:f2:96:0d:8f:32:7b:71:5f:c4:f1:0d:61:0d:54:75:
46:6e:bb:18:05:5d:1f:0e:35:fb:50:e8:98:0d:e7:38:22:75:
19:ed:ab:c4:a8:69:2b:9a:f5:94:3c:a8:8f:98:0c:a9:09:b5:
54:d2:f8:35:b7:4a:10:4e:a0:de:f7:5f:68:51:98:dd:5f:0a:
b3:ba:81:f2:a6:54:3e:65:54:6c:3e:86:d1:94:53:ec:1a:18:
31:fb:55:d6:e5:a0:dd:62:d4:56:67:cd:49:e2:67:5e:f2:be:
0e:03:00:7d:22:dd:dd:be:5a:af:3e:ad:59:51:5c:44:e0:8d:
cd:4c:f3:b1:9c:05:b3:01:60:62:9d:83:ad:87:ee:c3:f5:cc:
e5:fc:76:81:7d:01:f3:de:59:28:49:4a:2b:f5:e3:0c:59:f8:
29:c5:ec:48:7f:26:11:a8:fd:a9:be:44:0c:8a:f9:27:0e:c5:
dc:32:4f:bd:91:d9:d2:82:ec:34:61:a6:fc:76:b9:41:08:a7:
42:76:75:82:c0:53:bf:d0:42:bf:d6:2e:80:38:46:dc:57:9c:
ef:87:3e:f7:3a:3c:2d:b3:b2:93:92:34:88:38:62:f6:b5:58:
03:1d:90:52:d0:4f:f9:bc:bf:9d:eb:60:d3:b9:9c:b6:40:6b:
6a:98:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:42 2026 by rpki-client