Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211514.roa
File: AS211514.roa (raw, json)
Hash identifier: 7SdXmDB3/1LKEXMHbwyeQHE39163voWyhwJ5ldIn5TI=
Subject key identifier: 83:83:8B:94:C8:BB:CF:17:EA:BF:0A:A5:5B:F3:BD:48:8D:17:47:8B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 067133BA2D6467385FDCA9CA5755778666FAFCCD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211514.roa
Signing time: Thu 04 Jun 2026 15:58:51 +0000
ROA not before: Thu 04 Jun 2026 15:53:51 +0000
ROA not after: Thu 03 Jun 2027 15:58:51 +0000
asID: 211514
IP address blocks: 2a06:a005:484::/48 maxlen: 48
2a06:a005:5ae::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:71:33:ba:2d:64:67:38:5f:dc:a9:ca:57:55:77:86:66:fa:fc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:51 2026 GMT
Not After : Jun 3 15:58:51 2027 GMT
Subject: CN=83838B94C8BBCF17EABF0AA55BF3BD488D17478B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:dd:87:d6:25:92:ba:b2:9b:12:56:b6:6c:
e8:f1:77:02:0e:73:34:fb:82:f2:6f:93:cd:6e:07:
2b:db:07:20:df:c9:37:9a:7b:0a:bf:5e:eb:e7:e4:
57:ee:91:81:ca:b9:fe:be:70:ca:a0:2f:b1:c4:59:
d0:e2:21:40:77:ce:e7:66:50:8f:41:53:e8:fd:4e:
f0:86:1d:85:f9:ec:3b:25:56:63:bd:44:4f:2c:59:
56:24:f1:63:c2:93:1c:27:7c:a4:26:c0:6e:b6:1a:
41:c0:ea:b7:e7:8c:ad:5a:26:91:ae:63:c8:62:43:
d1:d3:83:74:4b:08:7c:cc:0c:27:20:48:9f:bc:78:
72:4e:a1:3c:b4:5c:82:12:53:36:2e:e2:d4:a7:c5:
e9:87:23:14:61:07:13:40:73:60:7b:1d:0e:73:0a:
ce:9f:fc:e0:fb:aa:ba:1a:9f:13:03:28:13:3d:5a:
cf:fe:8e:bc:ff:8f:dd:5a:34:83:9c:02:31:00:ef:
a3:10:3b:bb:d0:bf:95:63:61:dd:20:7e:3e:bd:8d:
60:36:e0:04:70:26:dd:20:49:25:40:10:b7:ce:ad:
a9:36:e2:9d:e6:9b:17:c9:d3:f2:c9:17:2c:0a:30:
fd:12:56:b9:3a:08:21:c5:47:9a:6f:9a:84:26:c5:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:8B:94:C8:BB:CF:17:EA:BF:0A:A5:5B:F3:BD:48:8D:17:47:8B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211514.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:484::/48
2a06:a005:5ae::/48
Signature Algorithm: sha256WithRSAEncryption
5d:0c:65:9a:26:33:a8:b6:a1:da:76:05:02:6f:2a:ef:ea:c5:
f9:fb:15:e3:69:3a:cd:b8:0b:22:65:d4:30:ef:4b:18:e7:2e:
4c:a5:4a:02:da:59:c9:ef:bf:d4:8c:89:54:8a:77:1d:9a:c2:
c5:7a:a1:bf:86:a4:fa:10:7e:2a:94:a8:5d:08:6b:ae:5d:4a:
f3:b5:75:13:5f:34:1c:96:da:45:2c:27:2b:4a:78:bd:13:c9:
df:2c:97:86:e7:8f:e6:40:a3:e0:c4:6e:22:ad:f7:0a:d3:d7:
d6:85:ac:15:f7:43:19:6a:d2:97:d4:ae:d6:d1:13:2b:0e:8b:
ec:69:2a:fe:43:21:f3:d5:cc:14:e9:5a:a1:b2:ee:dc:4e:22:
0b:fa:a9:9a:ee:9b:c8:0e:03:d6:6b:4d:85:49:b1:98:09:f1:
55:b5:20:73:91:b9:80:ca:c9:53:17:33:ba:08:88:fc:85:ea:
cf:1d:dc:b6:74:dd:45:2b:9c:ec:ba:99:6b:ba:e4:1b:65:70:
e4:5c:d4:d6:cc:34:23:29:96:8b:61:6d:24:ba:8a:d4:b3:2d:
15:bb:4c:3d:21:a0:d3:77:9d:e5:62:f7:7a:47:8d:6a:5c:eb:
51:c3:73:34:da:58:9c:ce:dc:0e:1e:eb:91:c7:2f:c5:39:c9:
4b:6c:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:46 2026 by rpki-client