Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: K5kq/6G/8BJ/hGXasfX+zUzwguDYgpzaWVhSuptftP4=
Subject key identifier: EA:C7:C5:70:73:4C:43:F3:CC:02:8A:F7:67:61:8C:65:AA:EC:E4:97
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5DEB67D30B139DED28D43C550CA71B6AB2F5D1EF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa
Signing time: Sat 26 Jul 2025 06:09:16 +0000
ROA not before: Sat 26 Jul 2025 06:04:16 +0000
ROA not after: Sat 25 Jul 2026 06:09:16 +0000
asID: 20473
IP address blocks: 2a06:1287::/32 maxlen: 48
2a06:a000:170::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:eb:67:d3:0b:13:9d:ed:28:d4:3c:55:0c:a7:1b:6a:b2:f5:d1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 26 06:04:16 2025 GMT
Not After : Jul 25 06:09:16 2026 GMT
Subject: CN=EAC7C570734C43F3CC028AF767618C65AAECE497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:45:05:da:42:83:f2:39:b2:22:c7:48:c2:
bf:6c:01:6b:d6:0f:07:01:25:e1:c4:fd:c4:4c:84:
1e:ad:19:39:53:39:e8:40:ed:fe:16:2a:e9:02:f5:
48:f6:ef:3f:f7:6d:03:60:d7:95:fb:19:63:19:13:
16:95:42:df:73:9d:e5:2b:ed:55:31:5c:5b:da:50:
75:27:23:68:e5:ce:c7:f5:a7:b6:55:d9:9d:a8:f2:
91:cd:d0:7b:8d:a0:dd:06:6b:1d:f4:7b:a6:e0:26:
e5:a5:91:4d:60:fd:c9:31:c1:1f:94:96:18:61:14:
66:a1:08:39:fc:77:52:71:f1:4a:d7:dc:4f:27:ec:
1f:21:00:0f:5a:e2:5e:5b:bf:ef:de:50:94:69:68:
7c:a0:bf:7e:6d:83:68:0d:c8:9a:89:ff:8a:e4:f0:
ea:75:21:7f:1f:53:7d:3d:55:f5:62:36:ce:8f:b5:
50:73:50:b2:bd:80:ee:f1:2f:0e:3b:2c:c1:32:6c:
56:9b:a7:ba:d7:28:31:67:3c:a9:bb:42:9d:03:63:
39:52:34:6a:df:df:93:ba:4f:8e:3d:8d:3b:6b:4b:
21:69:c4:78:d6:c5:19:3d:45:9c:54:be:80:48:2f:
84:5c:26:fd:5b:3d:05:02:38:0c:de:66:4d:ad:8e:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:C5:70:73:4C:43:F3:CC:02:8A:F7:67:61:8C:65:AA:EC:E4:97
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287::/32
2a06:a000:170::/48
Signature Algorithm: sha256WithRSAEncryption
a6:b5:70:d4:86:14:ef:9a:75:89:71:df:4c:41:99:50:4c:17:
a1:63:a2:8e:0d:0d:ae:79:d7:24:9e:8f:bf:70:e1:86:ce:b6:
0c:b5:23:af:72:23:65:71:c6:43:72:80:74:71:99:31:13:e1:
84:7b:57:91:d7:aa:80:3b:26:25:83:d6:99:75:55:ae:5e:3a:
d8:7d:ba:62:f1:27:1c:0d:8a:66:4e:aa:71:e2:cd:5b:55:50:
76:21:3b:40:92:ab:a2:ce:51:3f:0a:6e:7b:28:55:9e:db:b2:
30:fc:a4:3a:ee:99:74:a7:cd:42:f9:e4:bc:89:5c:b8:ef:20:
87:e3:2f:ea:b0:97:03:d0:51:71:fa:ed:63:47:15:79:82:aa:
29:21:f8:bb:77:f4:21:a8:66:f9:06:b0:45:8a:8e:37:d7:6e:
3f:12:3c:91:f7:09:1b:09:f1:24:d1:ea:21:28:08:44:5e:53:
7b:e8:bc:81:4d:d7:f0:5f:ad:dc:6b:45:45:44:73:40:d3:e7:
c3:3f:17:69:0c:cc:d8:64:f8:df:e9:ab:a9:2f:ae:44:27:2a:
c3:f2:ba:4d:7e:54:9e:55:8b:3c:6b:c7:9b:ac:1f:be:4d:2d:
9d:e4:0d:54:30:81:17:d1:95:f5:38:86:27:2e:6a:b4:a7:e9:
45:49:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:57:36 2025 by rpki-client