Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208913.roa
File: AS208913.roa (raw, json)
Hash identifier: fgwjkeSpKTrgOwxN2PWc1nn2CTNjc+pJ+KZBbezxNvQ=
Subject key identifier: EE:C0:B7:6A:E0:AE:3B:0F:79:6C:05:AC:E0:B3:C3:B4:5A:54:B2:19
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0A24791DF4BBFB77C0C49EB7790808D1CB2F6141
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208913.roa
Signing time: Thu 04 Jun 2026 15:58:49 +0000
ROA not before: Thu 04 Jun 2026 15:53:49 +0000
ROA not after: Thu 03 Jun 2027 15:58:49 +0000
asID: 208913
IP address blocks: 111.235.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:24:79:1d:f4:bb:fb:77:c0:c4:9e:b7:79:08:08:d1:cb:2f:61:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:49 2026 GMT
Not After : Jun 3 15:58:49 2027 GMT
Subject: CN=EEC0B76AE0AE3B0F796C05ACE0B3C3B45A54B219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:7d:26:61:7a:0d:fd:16:d0:e0:28:d8:ee:
ab:54:73:02:a9:24:65:48:75:15:3a:57:da:57:1d:
b5:e4:c3:02:9b:e7:c3:45:54:4c:be:c2:1d:ed:45:
6e:45:bd:d0:4a:21:09:f3:76:a3:ca:e8:5d:50:1b:
2f:5b:ae:df:a6:7d:5e:22:48:f9:dd:01:b7:c5:5a:
2f:0a:a0:c0:ea:03:2f:af:70:b7:38:f6:27:76:f0:
d7:ae:4f:3b:fc:1d:08:c6:cf:04:76:d3:75:67:c6:
4d:b0:b2:97:1b:24:36:e7:32:c0:8d:4c:67:3c:51:
b6:0f:c3:46:20:2d:25:63:84:2f:9e:ce:3f:40:ed:
65:80:ec:85:af:39:86:3a:64:48:ed:df:75:82:04:
70:fa:08:ad:7b:18:d3:6c:bc:49:14:55:bf:27:f3:
26:bc:2c:17:62:45:84:27:50:ae:8e:0e:40:30:0e:
38:34:f8:0c:75:2f:7b:ac:ea:4f:e1:b2:94:30:d1:
cd:a1:eb:7c:62:78:77:bd:3c:00:a6:b2:ac:0c:78:
24:d5:83:12:59:36:ba:12:6c:94:a4:d6:2e:a4:26:
08:82:81:dc:e1:7b:33:bf:60:47:d2:0f:c4:bd:94:
71:43:97:98:eb:77:f2:96:00:0d:90:19:08:41:94:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:B7:6A:E0:AE:3B:0F:79:6C:05:AC:E0:B3:C3:B4:5A:54:B2:19
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.235.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e6:f0:a5:aa:ab:a7:06:01:03:4e:fb:b1:f5:bb:eb:6f:2e:
3f:32:04:1b:d3:b8:1e:28:84:6a:8a:0f:25:ac:f8:51:53:18:
68:cd:e5:8f:35:e6:28:16:dc:f6:ca:81:9e:e7:b3:ba:7a:1d:
a8:19:c0:f0:49:84:f3:03:a2:28:92:47:4a:30:62:67:f2:d4:
fb:b8:04:b3:9e:60:c6:54:29:04:80:94:85:24:28:f2:dd:2a:
cf:5d:f0:4f:eb:d9:fe:43:bd:5b:c0:69:18:c0:34:06:be:19:
f6:b0:af:59:67:06:f3:95:29:0c:a3:fb:91:da:72:5f:d1:55:
6a:a8:ee:da:4c:c9:44:3a:4f:fc:4b:b2:7a:5a:31:e8:31:e9:
6b:81:35:b7:97:47:37:4f:1f:e8:96:fb:61:1a:14:6a:fc:0d:
b0:d6:19:be:d7:12:99:51:96:b1:77:0d:f3:05:a6:98:77:f4:
a1:dc:75:b6:b4:f8:65:39:e0:ef:65:5f:a9:e2:41:8a:ef:27:
70:fa:99:3d:0b:31:a3:50:dc:ee:11:46:39:4b:8c:fd:64:56:
10:2b:9b:99:5c:02:97:85:1a:29:7f:78:46:73:bb:38:5f:5d:
08:62:15:de:1b:53:88:db:9a:05:0c:a0:4d:3e:1c:e5:81:c6:
8b:93:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:27 2026 by rpki-client