Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa
File: AS207567.roa (raw, json)
Hash identifier: obEqPXU+B4Z8/pKwE9eZ3FM6NiwU8bPsc8pRPKuQygk=
Subject key identifier: EE:54:E6:C2:11:5E:07:C9:8B:79:16:F2:B7:EB:72:F0:8F:AD:52:F3
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 32CFCE9C7415306CAFDEDCB0B209DADF1F0C78EA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa
Signing time: Sun 26 Jul 2026 21:35:12 +0000
ROA not before: Sun 26 Jul 2026 21:30:12 +0000
ROA not after: Sun 25 Jul 2027 21:35:12 +0000
asID: 207567
IP address blocks: 103.214.69.0/24 maxlen: 24
153.76.122.0/24 maxlen: 24
2a0d:d904::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cf:ce:9c:74:15:30:6c:af:de:dc:b0:b2:09:da:df:1f:0c:78:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 26 21:30:12 2026 GMT
Not After : Jul 25 21:35:12 2027 GMT
Subject: CN=EE54E6C2115E07C98B7916F2B7EB72F08FAD52F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:22:96:1b:b0:46:22:c5:2b:1e:b6:46:10:
88:27:d6:7e:d7:e1:e8:79:df:15:4c:73:e3:88:b3:
9f:3f:c3:f2:b8:80:9c:22:a4:2a:1b:dd:f4:49:5b:
c8:1d:fe:ca:76:c6:88:8c:27:7e:26:c2:d2:a3:b4:
f2:16:86:5e:87:ef:28:a8:a8:12:17:70:82:4f:eb:
22:f5:6e:e1:db:b3:8d:85:50:79:f2:dc:3c:18:1f:
0a:91:5b:da:ee:a0:3e:92:6f:ea:31:2c:e5:16:83:
df:24:f3:6b:87:8d:d1:81:f1:64:81:53:ec:14:64:
3e:12:08:68:8b:b1:a9:69:80:75:fe:fc:7c:04:c9:
16:b8:aa:18:96:ca:aa:3f:43:b5:d5:a8:f6:b0:c1:
1c:c9:0c:83:6a:37:5d:96:08:24:13:03:4a:be:c9:
2b:ce:d1:9b:e1:50:89:eb:86:dc:23:ed:b6:f8:87:
1b:7d:91:2f:38:81:5c:57:81:db:ea:c3:7e:78:70:
39:fa:b5:0b:02:8e:a4:a1:12:74:4f:ee:cf:ed:bb:
fe:c9:b9:64:62:51:f2:59:23:3f:f6:f4:bd:4a:1f:
41:9c:58:93:c9:89:e7:32:2f:07:5e:0e:32:2c:c9:
5f:cd:eb:89:56:3f:9c:39:c9:8c:07:f9:3e:e2:65:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:54:E6:C2:11:5E:07:C9:8B:79:16:F2:B7:EB:72:F0:8F:AD:52:F3
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.214.69.0/24
153.76.122.0/24
IPv6:
2a0d:d904::/32
Signature Algorithm: sha256WithRSAEncryption
4d:5e:94:a9:3e:f0:08:5c:70:b8:24:d2:b5:60:34:f9:7b:6b:
c2:2d:9b:bc:65:64:01:fd:ec:3a:32:d9:a5:5c:67:1e:05:e9:
ec:b8:ac:90:d4:04:10:52:59:26:0c:b1:0c:be:2a:b3:53:46:
86:cf:c6:4c:a6:48:2c:6e:82:72:8a:27:aa:62:7b:9b:ee:12:
42:98:61:ac:22:03:5e:80:4e:bc:e0:f8:bf:69:b7:cb:c7:a8:
a6:e3:fc:0f:40:41:a1:cb:25:e4:57:01:8e:01:3e:a7:4c:97:
70:6e:03:4d:1a:a1:30:06:f2:4c:2c:62:06:34:82:5d:ff:c5:
07:a8:cc:3b:f9:c0:12:bb:80:92:ec:5e:ca:63:0a:14:7f:03:
ec:0b:a4:66:c7:b1:97:00:34:18:8e:93:70:63:eb:93:c3:8e:
fd:5a:d6:0a:37:83:f0:56:73:18:6c:26:55:96:ed:43:0d:0e:
ad:9b:2a:90:5e:cc:33:01:09:d2:40:cb:88:4f:27:63:cd:4e:
fc:d9:41:b2:5e:ab:33:62:b3:94:ce:bf:c3:ef:00:8e:a7:ab:
c4:a2:5c:4d:e6:42:0c:0a:a1:52:29:d1:c8:cb:a4:25:64:7c:
8a:b9:36:db:ed:45:59:c0:76:7d:2b:b7:8f:de:78:91:61:f5:
bb:0d:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:55:33 2026 by rpki-client