Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211562.roa
File: AS211562.roa (raw, json)
Hash identifier: Q9i8S2G2EDY8al3vPzOASse9cNX7QAEVKm35rePxjT4=
Subject key identifier: D5:1A:FD:29:49:70:75:85:B0:DF:ED:A2:DE:74:CF:8D:94:9F:58:A5
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 40B89949395555DE750447F53169C81E7031C14F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211562.roa
Signing time: Thu 04 Jun 2026 15:58:49 +0000
ROA not before: Thu 04 Jun 2026 15:53:49 +0000
ROA not after: Thu 03 Jun 2027 15:58:49 +0000
asID: 211562
IP address blocks: 2a06:a005:180b::/48 maxlen: 48
2a06:a005:187b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b8:99:49:39:55:55:de:75:04:47:f5:31:69:c8:1e:70:31:c1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:49 2026 GMT
Not After : Jun 3 15:58:49 2027 GMT
Subject: CN=D51AFD2949707585B0DFEDA2DE74CF8D949F58A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:31:6f:a4:9c:1c:71:25:d0:2e:44:74:68:
41:f3:e1:94:4b:fd:e5:6b:95:0c:36:c0:a5:c6:d0:
78:8a:28:b4:e3:d0:55:c4:82:d1:cc:5e:d3:24:04:
f8:1d:d5:20:95:a1:15:5b:d4:74:ed:68:63:ab:1a:
4e:bd:bd:ae:1d:aa:46:bc:3c:90:a7:e8:d0:6a:f1:
49:b2:dc:9e:e4:03:11:5c:0b:18:fe:28:b7:07:ee:
f5:8c:89:8f:c2:a8:c3:85:32:77:6b:a9:2e:33:a7:
df:e9:02:e1:50:79:3e:89:57:a1:f9:2c:58:11:4c:
27:cb:4a:2d:5c:59:59:df:ff:bf:f6:a1:c9:aa:c8:
c6:7d:a8:72:89:55:24:56:97:06:f6:32:99:81:49:
f5:bb:0d:e9:13:7d:23:50:e3:9d:aa:34:d3:79:47:
39:ed:57:cf:42:b2:18:69:9f:28:ce:14:e4:84:cb:
e8:d7:dd:f7:34:e4:75:83:10:47:40:0b:07:4f:16:
a6:ae:d3:fe:fe:e4:a2:81:55:9d:d5:48:13:dd:6c:
22:f9:3a:a9:13:d3:81:70:57:5d:ee:89:27:d8:ca:
2c:69:f0:5a:4b:cc:82:a1:b5:ee:04:6d:83:59:d6:
0f:bf:f9:99:1b:62:49:00:ca:be:95:d1:a8:0d:21:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:FD:29:49:70:75:85:B0:DF:ED:A2:DE:74:CF:8D:94:9F:58:A5
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180b::/48
2a06:a005:187b::/48
Signature Algorithm: sha256WithRSAEncryption
b7:5d:6b:b3:03:0c:01:83:63:c8:49:bd:ee:6a:c4:7c:c2:86:
e8:b4:05:2e:7a:3c:b6:e2:07:73:ce:ac:f5:74:3f:77:ef:0a:
42:64:8a:aa:9b:6f:76:ea:10:06:b6:8f:33:83:74:d4:b0:2b:
ae:b7:26:96:fc:1f:5a:48:37:f1:d2:e6:2c:0b:4c:89:c3:bd:
af:fc:3c:f5:58:ed:4d:ca:c9:16:da:ee:da:32:3d:0f:6b:34:
62:74:1d:1a:20:b4:29:8f:ad:4f:7c:be:eb:1b:f6:33:90:90:
d4:2e:96:c3:13:33:df:df:f4:d2:a0:33:f1:78:9d:cf:10:d8:
14:37:cf:99:c6:f2:12:9f:1d:33:3c:f7:07:34:c4:b5:83:93:
72:45:12:f7:26:61:de:94:4d:c7:ff:c4:88:95:da:ac:b3:9f:
8e:a4:c0:49:14:43:e9:3a:2c:7f:e1:ff:14:71:74:97:15:13:
25:3d:a8:0c:62:ad:5d:28:d6:27:29:84:c2:43:f1:27:5a:e1:
66:d1:be:0a:89:e5:10:47:89:ec:af:6e:f2:e1:24:76:4e:d0:
ab:12:3a:17:6e:b1:35:9c:d5:75:62:90:4a:47:74:88:05:e7:
60:42:16:90:2b:7c:5e:83:94:60:90:68:98:a4:d9:48:43:ef:
46:62:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:01 2026 by rpki-client