Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206569.roa
File: AS206569.roa (raw, json)
Hash identifier: 9Nz376f29uwf7s9L76S7uNy7drmHXEgvx6bWBs7Fq8o=
Subject key identifier: C2:99:71:78:29:FE:D6:78:82:A6:C0:92:D1:F1:2F:51:F8:AF:C9:A0
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 65024C2CBC1AEDCA4F90565A916C491229BCDF72
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206569.roa
Signing time: Thu 04 Jun 2026 15:58:48 +0000
ROA not before: Thu 04 Jun 2026 15:53:48 +0000
ROA not after: Thu 03 Jun 2027 15:58:48 +0000
asID: 206569
IP address blocks: 2a06:a005:2000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:02:4c:2c:bc:1a:ed:ca:4f:90:56:5a:91:6c:49:12:29:bc:df:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:48 2026 GMT
Not After : Jun 3 15:58:48 2027 GMT
Subject: CN=C299717829FED67882A6C092D1F12F51F8AFC9A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:4e:4e:a3:e9:2b:f4:4b:a0:77:46:59:c3:
b5:48:76:7c:26:0a:da:c8:8c:02:49:67:06:bb:25:
26:00:a3:c4:90:48:ca:af:8d:30:a7:a2:96:67:52:
10:77:75:e2:c9:3a:1d:d5:9a:3b:11:b8:91:40:66:
b6:b9:64:5c:fd:a8:ca:e6:f6:13:94:12:70:f9:d4:
af:99:07:94:6b:e6:2d:d8:88:87:0f:9d:fb:bb:8f:
08:b9:3d:62:c3:f3:cd:fa:04:72:ac:dc:29:51:57:
84:92:32:59:53:05:14:01:05:c3:e1:a4:29:39:a8:
0d:a3:af:e7:58:6e:fc:8b:b7:32:0f:4a:cc:9d:77:
33:3b:8d:ba:77:7e:ac:3a:98:fb:1f:74:5a:56:d4:
85:43:89:b4:d0:d7:3d:c6:23:89:6f:e7:49:33:75:
e7:90:11:59:25:84:5d:29:72:98:e4:1b:84:d0:9e:
f6:ee:d1:a5:63:4a:30:34:1c:69:6f:9c:fa:c0:fc:
24:d3:ea:57:b8:4d:79:1b:7f:76:b9:52:b4:27:84:
e7:3c:69:01:47:ed:17:b9:7a:4d:7d:80:02:68:98:
7f:7e:68:12:f4:34:c8:00:9e:d0:3b:f8:9c:30:9d:
a2:b3:4e:51:67:b1:69:45:f2:a0:99:9e:c1:c3:cb:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:99:71:78:29:FE:D6:78:82:A6:C0:92:D1:F1:2F:51:F8:AF:C9:A0
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206569.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2000::/44
Signature Algorithm: sha256WithRSAEncryption
4a:5c:21:cd:79:3b:01:3e:08:7d:8d:f1:83:97:39:71:d6:be:
5a:5f:ce:0e:6b:31:20:7d:42:04:4a:14:b2:08:bc:a2:a7:43:
26:a3:c0:f9:48:80:02:81:ef:bb:51:1c:7d:2f:a6:af:17:3b:
2c:1f:d7:2b:78:ba:61:92:25:50:08:95:07:4c:d5:2a:90:d8:
a1:d2:0b:05:d6:e7:41:85:34:3a:ef:da:83:bc:55:3f:a8:31:
1c:c9:c0:20:23:c8:f8:87:c3:45:f4:4e:08:62:d8:cc:1b:e6:
8e:f1:f0:42:33:39:a7:45:1c:3e:c9:4c:a8:c9:ce:7b:80:ef:
43:0f:85:5d:32:7c:b4:b0:4c:dd:e6:30:bd:54:b2:f6:b7:02:
7c:e4:4c:60:0d:36:67:e0:45:59:4c:75:b5:7b:fe:ff:67:18:
32:0b:25:59:b6:3a:34:6f:cf:0b:90:bc:5a:1d:2b:e1:cf:d4:
20:5b:24:d8:af:07:6e:da:b1:03:f1:63:68:27:c1:f5:80:98:
f1:40:e5:78:f5:b1:ed:d2:c2:a2:f9:1a:03:4b:10:52:ec:d1:
ac:59:22:5d:73:68:d1:09:2d:a7:05:4a:0b:94:90:51:fb:48:
c7:d9:f0:45:2b:4d:53:83:33:61:6b:9a:35:ec:e5:49:5c:09:
8b:bb:76:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:00 2026 by rpki-client