Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: knkLuj5SG0wOX5FHECZAWbyEun9TXfAni4kjKk+c+Vg=
Subject key identifier: 0C:9A:8D:79:35:E4:18:A2:91:FB:03:11:B4:32:79:F4:18:84:42:51
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 31F30B23F3060DF80189411552840629FC3D38AF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa
Signing time: Fri 03 Apr 2026 20:31:32 +0000
ROA not before: Fri 03 Apr 2026 20:26:32 +0000
ROA not after: Fri 02 Apr 2027 20:31:32 +0000
asID: 20473
IP address blocks: 2a06:1287::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f3:0b:23:f3:06:0d:f8:01:89:41:15:52:84:06:29:fc:3d:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Apr 3 20:26:32 2026 GMT
Not After : Apr 2 20:31:32 2027 GMT
Subject: CN=0C9A8D7935E418A291FB0311B43279F418844251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:96:ee:da:7f:ef:50:37:53:e7:91:18:0c:
4b:14:88:15:eb:59:79:6f:d3:7d:5e:53:2f:bb:44:
6b:e4:94:a3:d3:fb:40:28:a5:eb:db:ac:49:8a:5b:
f8:ed:f2:8b:3e:06:5a:67:b0:74:9c:23:a6:cd:9f:
a0:0e:81:18:32:96:49:23:f3:5a:6a:97:e8:d1:63:
6b:87:d4:fb:f3:5a:53:1e:18:8d:fa:09:30:38:2d:
c5:e7:5f:e0:6c:18:fc:76:71:63:dd:c6:9a:ea:37:
9f:78:ac:df:51:91:ef:76:d3:b8:1a:07:a6:4e:20:
18:87:62:a8:83:e7:56:28:d5:cc:12:ba:10:06:12:
09:09:d4:3f:ac:ba:39:fa:16:69:9a:22:d1:33:2e:
f9:51:1a:e4:4e:83:05:be:e4:79:49:1a:d9:2c:0e:
6d:9c:ec:da:54:3b:15:a4:3b:aa:d3:0e:e9:a8:4b:
46:6c:36:9f:02:31:d3:fb:2b:4f:42:8e:d6:70:2e:
e8:40:cd:a9:6e:d1:c4:ae:93:1b:d7:7a:c3:f3:72:
ae:37:75:cb:a3:3d:25:5c:49:82:02:95:cd:4e:e5:
2b:c0:81:53:c6:1a:10:44:81:5d:c2:79:d9:df:bf:
6c:53:25:26:a9:7e:ad:c0:3f:ca:39:5a:53:b6:b6:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:8D:79:35:E4:18:A2:91:FB:03:11:B4:32:79:F4:18:84:42:51
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287::/32
Signature Algorithm: sha256WithRSAEncryption
ab:89:a1:76:b1:af:f9:08:96:88:d1:b0:30:d0:02:e6:c7:d8:
ef:ad:08:60:d0:78:d9:03:ee:06:64:2f:eb:76:7b:de:9f:01:
b3:86:81:60:62:b8:9a:3f:62:c5:4f:3e:65:15:0b:8d:45:50:
e6:8e:2a:4f:7a:32:d2:01:c2:24:cd:a7:c5:31:63:32:71:5b:
e4:a7:2b:83:9e:dd:ca:b0:4b:0f:ca:c7:21:18:d3:a8:1a:9f:
88:85:50:57:53:79:77:4e:ca:40:c5:2a:c8:4e:52:1d:fb:87:
2e:54:b0:d0:38:2a:3e:68:d4:7a:72:40:b8:fa:bf:9a:bb:d8:
71:2d:9e:7b:47:3b:a1:34:ce:b8:8c:31:dc:2c:10:65:84:0f:
bd:ab:a4:f6:c1:cd:8c:30:1f:23:b8:cb:1b:b4:fa:67:14:1f:
2f:bf:7b:09:d4:70:de:d9:bb:6f:e9:2c:8b:94:0f:7b:f7:97:
d0:3c:da:7e:c8:56:cb:7d:24:72:47:3c:3a:23:47:35:d1:1b:
e3:b6:ab:7b:3f:0a:4b:a7:11:82:fd:02:ec:4f:1f:f2:f6:04:
cc:53:38:13:d7:27:a8:de:b0:86:42:e9:79:57:4b:6a:70:3a:
34:2c:2f:7f:01:d1:a7:35:b2:4a:c8:64:fa:e7:ac:08:ff:73:
41:80:43:a0
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUMfMLI/MGDfgBiUEVUoQGKfw9OK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA0MDMyMDI2MzJaFw0yNzA0MDIyMDMxMzJaMDMxMTAvBgNV
BAMTKDBDOUE4RDc5MzVFNDE4QTI5MUZCMDMxMUI0MzI3OUY0MTg4NDQyNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9iZbu2n/vUDdT55EYDEsUiBXr
WXlv031eUy+7RGvklKPT+0AopevbrEmKW/jt8os+BlpnsHScI6bNn6AOgRgylkkj
81pql+jRY2uH1PvzWlMeGI36CTA4LcXnX+BsGPx2cWPdxprqN594rN9Rke9207ga
B6ZOIBiHYqiD51Yo1cwSuhAGEgkJ1D+sujn6FmmaItEzLvlRGuROgwW+5HlJGtks
Dm2c7NpUOxWkO6rTDumoS0ZsNp8CMdP7K09CjtZwLuhAzalu0cSukxvXesPzcq43
dcujPSVcSYIClc1O5SvAgVPGGhBEgV3Cednfv2xTJSapfq3AP8o5WlO2tpGbAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUDJqNeTXkGKKR+wMRtDJ59BiEQlEwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjA0NzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAqBhKHMA0GCSqGSIb3DQEBCwUAA4IBAQCriaF2sa/5
CJaI0bAw0ALmx9jvrQhg0HjZA+4GZC/rdnvenwGzhoFgYriaP2LFTz5lFQuNRVDm
jipPejLSAcIkzafFMWMycVvkpyuDnt3KsEsPyschGNOoGp+IhVBXU3l3TspAxSrI
TlId+4cuVLDQOCo+aNR6ckC4+r+au9hxLZ57RzuhNM64jDHcLBBlhA+9q6T2wc2M
MB8juMsbtPpnFB8vv3sJ1HDe2btv6SyLlA9795fQPNp+yFbLfSRyRzw6I0c10Rvj
tqt7PwpLpxGC/QLsTx/y9gTMUzgT1yeo3rCGQul5V0tqcDo0LC9/AdGnNbJKyGT6
56wI/3NBgEOg
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:21:51 2026 by rpki-client