Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204841.roa
File: AS204841.roa (raw, json)
Hash identifier: iVMxpPeka6pDjuMq3Syz4tbF6XhK8x3XiZ/9E+/rLEw=
Subject key identifier: B7:E1:51:DE:F7:72:BC:99:88:29:84:71:CF:19:75:56:A1:B5:19:96
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2BA6059DB0DE0EEADA1C9C531CEE0B06D24441AF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204841.roa
Signing time: Thu 04 Jun 2026 15:58:52 +0000
ROA not before: Thu 04 Jun 2026 15:53:52 +0000
ROA not after: Thu 03 Jun 2027 15:58:52 +0000
asID: 204841
IP address blocks: 2a06:a005:434::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a6:05:9d:b0:de:0e:ea:da:1c:9c:53:1c:ee:0b:06:d2:44:41:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:52 2026 GMT
Not After : Jun 3 15:58:52 2027 GMT
Subject: CN=B7E151DEF772BC9988298471CF197556A1B51996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:66:91:72:01:97:22:43:33:01:4e:fc:a9:55:
0e:3f:ad:98:d9:21:b0:c9:d6:7f:80:c7:79:fe:ef:
83:dd:ed:65:ab:23:8d:7e:50:00:d1:a9:4f:7b:1c:
88:78:43:08:5f:2f:78:bf:7c:c9:52:02:3c:23:34:
66:2b:d8:81:4f:7e:80:16:47:55:6e:58:72:96:45:
a2:47:25:fb:fe:79:0f:75:2d:79:4b:33:0a:ab:9b:
ba:a4:68:75:c6:db:ad:33:ee:f4:31:25:7a:73:a4:
52:bf:8f:a6:67:02:9c:4d:76:1a:b6:7e:2c:f2:89:
a2:49:c2:96:08:1f:ee:36:e8:0d:1e:6f:0d:d4:34:
08:f8:57:32:bb:51:05:a2:96:17:a7:51:c6:c9:ab:
d7:9f:4b:3e:f2:07:14:52:a7:e9:b4:e3:d9:f0:d8:
f9:0e:c5:16:d9:f0:87:ea:27:91:4a:c2:1e:41:61:
1b:8f:27:aa:bb:ad:97:30:19:a5:88:4f:ca:23:f1:
6a:af:e2:00:5f:39:0b:c8:0a:dd:d6:05:2c:d3:aa:
dd:5f:0d:3c:9c:40:d3:40:7d:a5:fb:e1:1e:b9:f3:
ed:40:a7:d4:cb:56:37:e7:e4:7d:dc:0a:5e:67:b7:
fc:97:3b:85:3b:e7:dd:b3:9d:55:e3:23:6f:ea:67:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:51:DE:F7:72:BC:99:88:29:84:71:CF:19:75:56:A1:B5:19:96
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:434::/48
Signature Algorithm: sha256WithRSAEncryption
44:21:25:7c:cf:f8:c3:b0:08:60:6f:f8:4a:d6:1a:fe:50:06:
a6:5e:6f:7e:3b:d9:4a:10:91:9c:66:59:11:9e:a0:cc:e1:cf:
5f:3d:84:90:cf:75:af:b7:68:17:44:12:f7:42:c7:99:27:59:
01:47:85:9a:9f:9f:e1:52:77:15:d5:66:07:43:05:6d:45:cd:
ee:16:1f:4f:7d:ba:f2:f5:18:ec:14:58:c9:49:8c:8a:9a:3f:
58:30:e6:25:80:5b:52:dd:0b:7f:8a:dc:81:be:83:d4:68:74:
d9:33:2f:c8:29:a6:e5:9a:38:ad:b8:c6:e5:5d:f0:0f:fb:b5:
db:ed:f6:c0:f9:6e:df:c8:f8:28:f3:3d:a7:3d:9c:e0:98:c8:
d2:cd:81:60:7e:08:7f:63:30:af:71:e3:e8:a7:a7:02:59:73:
33:de:9f:f4:fa:8c:41:e1:f4:95:be:cc:b1:a2:a2:85:98:f7:
45:ab:aa:97:53:06:cc:56:59:fc:dd:7f:74:13:0a:aa:a5:91:
39:9c:56:a1:b0:bd:55:a5:89:9e:5d:02:1f:90:87:a2:96:b8:
b8:70:51:70:5a:8e:51:ce:4a:0a:7f:74:bd:1e:0c:f6:2d:50:
2a:3b:dc:3d:bc:e9:e3:04:09:d0:8b:9b:de:45:75:f0:5c:9a:
86:06:3a:85
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUK6YFnbDeDuraHJxTHO4LBtJEQa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNTJaFw0yNzA2MDMxNTU4NTJaMDMxMTAvBgNV
BAMTKEI3RTE1MURFRjc3MkJDOTk4ODI5ODQ3MUNGMTk3NTU2QTFCNTE5OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFZpFyAZciQzMBTvypVQ4/rZjZ
IbDJ1n+Ax3n+74Pd7WWrI41+UADRqU97HIh4QwhfL3i/fMlSAjwjNGYr2IFPfoAW
R1VuWHKWRaJHJfv+eQ91LXlLMwqrm7qkaHXG260z7vQxJXpzpFK/j6ZnApxNdhq2
fizyiaJJwpYIH+426A0ebw3UNAj4VzK7UQWilhenUcbJq9efSz7yBxRSp+m049nw
2PkOxRbZ8IfqJ5FKwh5BYRuPJ6q7rZcwGaWIT8oj8Wqv4gBfOQvICt3WBSzTqt1f
DTycQNNAfaX74R658+1Ap9TLVjfn5H3cCl5nt/yXO4U7592znVXjI2/qZzGhAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUt+FR3vdyvJmIKYRxzxl1VqG1GZYwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjA0ODQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQQ0MA0GCSqGSIb3DQEBCwUAA4IBAQBEISV8
z/jDsAhgb/hK1hr+UAamXm9+O9lKEJGcZlkRnqDM4c9fPYSQz3Wvt2gXRBL3QseZ
J1kBR4Wan5/hUncV1WYHQwVtRc3uFh9Pfbry9RjsFFjJSYyKmj9YMOYlgFtS3Qt/
ityBvoPUaHTZMy/IKablmjituMblXfAP+7Xb7fbA+W7fyPgo8z2nPZzgmMjSzYFg
fgh/YzCvcePop6cCWXMz3p/0+oxB4fSVvsyxoqKFmPdFq6qXUwbMVln83X90Ewqq
pZE5nFahsL1VpYmeXQIfkIeilri4cFFwWo5RzkoKf3S9Hgz2LVAqO9w9vOnjBAnQ
i5veRXXwXJqGBjqF
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:17 2026 by rpki-client