Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210445.roa
File: AS210445.roa (raw, json)
Hash identifier: mNVBLRNBdcTPBj3GWR9WhaDEFps8T7D1k05EmqSgcBw=
Subject key identifier: 4A:94:63:8E:E5:09:6C:E1:08:4D:EF:86:D9:0D:1D:5D:08:93:FD:6D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4DE6BFD6AF84D8E3498520E20DE8C7A6972DD3B4
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210445.roa
Signing time: Thu 04 Jun 2026 15:58:52 +0000
ROA not before: Thu 04 Jun 2026 15:53:52 +0000
ROA not after: Thu 03 Jun 2027 15:58:52 +0000
asID: 210445
IP address blocks: 2a06:a005:f60::/44 maxlen: 48
2a06:a005:16f0::/44 maxlen: 48
2a06:a005:2180::/44 maxlen: 48
2a06:a005:29b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e6:bf:d6:af:84:d8:e3:49:85:20:e2:0d:e8:c7:a6:97:2d:d3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:52 2026 GMT
Not After : Jun 3 15:58:52 2027 GMT
Subject: CN=4A94638EE5096CE1084DEF86D90D1D5D0893FD6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:27:9b:8a:5d:c0:02:14:f4:4b:f5:1f:3f:
85:0e:4e:6c:42:b8:5d:dd:b9:ee:53:4f:3e:8c:1e:
10:95:1c:69:8b:92:6d:28:8e:40:cc:17:eb:b3:a7:
6d:68:5b:35:25:89:e8:b4:31:ff:ae:f5:10:01:4e:
4c:4b:af:47:cb:30:74:61:44:5a:bf:77:63:8d:9b:
f1:d5:a9:96:5d:5c:66:18:1a:a7:9e:47:ac:e2:65:
88:21:70:ae:82:95:83:25:67:27:0c:52:5f:83:a6:
63:b8:e5:ec:d5:c1:ba:a3:91:da:fc:77:ba:5b:9c:
54:0d:1a:b3:43:aa:58:99:ad:a7:fe:9b:69:63:cb:
f6:3f:31:a1:eb:06:97:b7:c1:ea:d6:8f:b2:b2:7e:
2e:f8:09:35:40:7f:78:cb:9d:94:d2:18:d7:1b:d7:
f4:2a:ad:46:27:c9:c8:f5:81:a1:85:b9:15:0f:26:
84:60:12:20:a2:05:0d:47:77:6b:e5:47:95:41:03:
b3:35:40:84:47:ec:fa:6c:e2:34:16:d9:76:94:16:
bf:ce:10:8d:8f:0a:ae:34:a5:a9:92:1d:4f:fc:fa:
0b:97:b2:54:3f:2d:02:44:ad:6f:fe:37:60:eb:be:
16:7c:f7:9d:e9:bc:f2:39:95:a9:2f:3e:5c:49:a2:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:63:8E:E5:09:6C:E1:08:4D:EF:86:D9:0D:1D:5D:08:93:FD:6D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f60::/44
2a06:a005:16f0::/44
2a06:a005:2180::/44
2a06:a005:29b0::/44
Signature Algorithm: sha256WithRSAEncryption
80:d7:aa:3c:8c:c0:83:fb:ba:8a:93:76:e0:44:a8:48:9d:77:
87:74:2f:35:c2:9e:33:4d:d7:d8:b4:a1:70:cf:7a:5c:a5:fd:
06:68:e4:7a:ff:7f:ef:f9:eb:67:53:9a:7c:be:eb:7b:ae:11:
9d:c0:25:ae:58:58:b2:b6:03:99:d7:e4:a3:ff:fc:30:d6:b5:
64:d9:4e:b1:7d:bd:01:8e:e7:0d:76:52:97:fa:56:d8:ea:67:
42:6a:7b:00:a5:86:3a:12:89:7f:6c:4b:5a:90:16:38:8b:30:
cb:32:bb:87:c8:c9:3c:65:01:bb:4f:e4:d9:c8:ce:8f:a2:77:
c8:a4:30:00:2b:c5:ee:28:69:8b:53:11:90:e8:fd:52:51:06:
10:39:bd:78:10:96:3c:d2:f6:a4:c4:e5:09:c0:c8:d5:c7:3b:
86:0d:54:e3:05:e1:ac:6b:e9:42:90:a6:6a:34:1c:85:50:70:
f4:7e:ae:5b:b3:79:95:84:33:e9:3f:93:cb:0a:ab:70:65:b7:
7a:2f:26:b9:5a:9b:9e:a9:52:f9:c5:92:19:6d:1a:52:46:22:
8e:91:fe:a4:b5:48:e3:24:42:c7:bc:5e:24:ad:4e:ad:5d:6a:
e3:2b:87:88:16:20:24:0b:6b:9a:47:30:53:80:8b:e5:90:74:
8e:54:b6:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUTea/1q+E2ONJhSDiDejHppct07QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNTJaFw0yNzA2MDMxNTU4NTJaMDMxMTAvBgNV
BAMTKDRBOTQ2MzhFRTUwOTZDRTEwODRERUY4NkQ5MEQxRDVEMDg5M0ZENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQQyebil3AAhT0S/UfP4UOTmxC
uF3due5TTz6MHhCVHGmLkm0ojkDMF+uzp21oWzUliei0Mf+u9RABTkxLr0fLMHRh
RFq/d2ONm/HVqZZdXGYYGqeeR6ziZYghcK6ClYMlZycMUl+DpmO45ezVwbqjkdr8
d7pbnFQNGrNDqliZraf+m2ljy/Y/MaHrBpe3werWj7Kyfi74CTVAf3jLnZTSGNcb
1/QqrUYnycj1gaGFuRUPJoRgEiCiBQ1Hd2vlR5VBA7M1QIRH7Pps4jQW2XaUFr/O
EI2PCq40pamSHU/8+guXslQ/LQJErW/+N2DrvhZ8953pvPI5lakvPlxJou37AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUSpRjjuUJbOEITe+G2Q0dXQiT/W0wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEwNDQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEH
AQH/BC4wLDAqBAIAAjAkAwcEKgagBQ9gAwcEKgagBRbwAwcEKgagBSGAAwcEKgag
BSmwMA0GCSqGSIb3DQEBCwUAA4IBAQCA16o8jMCD+7qKk3bgRKhInXeHdC81wp4z
TdfYtKFwz3pcpf0GaOR6/3/v+etnU5p8vut7rhGdwCWuWFiytgOZ1+Sj//ww1rVk
2U6xfb0BjucNdlKX+lbY6mdCansApYY6Eol/bEtakBY4izDLMruHyMk8ZQG7T+TZ
yM6PonfIpDAAK8XuKGmLUxGQ6P1SUQYQOb14EJY80vakxOUJwMjVxzuGDVTjBeGs
a+lCkKZqNByFUHD0fq5bs3mVhDPpP5PLCqtwZbd6Lya5WpueqVL5xZIZbRpSRiKO
kf6ktUjjJELHvF4krU6tXWrjK4eIFiAkC2uaRzBTgIvlkHSOVLYG
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:12 2026 by rpki-client