Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211843.roa
File: AS211843.roa (raw, json)
Hash identifier: uJ7Ia3aYUHi/HpozKF8VR/naT0rlZqT7JKzyvecizN4=
Subject key identifier: CD:84:A5:13:9D:77:E1:08:D4:68:90:8F:0C:EE:C3:97:90:9C:55:F1
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4DAC67C0528C307C053A78C7A4877B7ADB942423
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211843.roa
Signing time: Thu 04 Jun 2026 15:58:49 +0000
ROA not before: Thu 04 Jun 2026 15:53:49 +0000
ROA not after: Thu 03 Jun 2027 15:58:49 +0000
asID: 211843
IP address blocks: 2a06:a005:a13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ac:67:c0:52:8c:30:7c:05:3a:78:c7:a4:87:7b:7a:db:94:24:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:49 2026 GMT
Not After : Jun 3 15:58:49 2027 GMT
Subject: CN=CD84A5139D77E108D468908F0CEEC397909C55F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b9:e1:d8:49:1a:2c:06:7c:9a:56:82:68:86:
fb:c7:46:e0:93:8e:ac:2d:9f:ab:fb:2a:e0:01:79:
8c:80:ea:27:31:65:6b:9e:38:99:a2:00:fb:0d:30:
76:ff:bd:a0:e6:f6:34:0c:51:1b:a7:3c:6c:6c:27:
35:f9:ee:ad:1a:2a:24:70:12:0e:42:e3:41:fd:0a:
ef:c8:24:5b:83:6b:d2:0e:b9:5e:31:72:02:25:35:
96:2d:da:58:b8:ce:e3:a7:8d:20:c4:4b:c3:d2:6e:
fc:d1:49:d5:a4:c6:ea:37:02:f5:68:79:9c:41:26:
be:42:e3:e4:6b:54:d1:bc:b6:1b:03:1f:0a:a8:2d:
90:20:d8:9b:f7:0e:27:d2:35:c6:e8:f0:da:44:bb:
d1:a4:86:de:58:93:e7:5c:ba:78:b3:eb:4a:83:ad:
25:e6:a7:9e:f2:89:ed:ae:41:3e:58:9a:9e:83:2d:
dc:b5:4d:11:cb:e8:34:cc:1b:5e:9c:30:26:06:12:
25:29:91:6e:2e:1c:00:b5:06:27:21:5f:9d:38:23:
d3:27:2c:59:2d:33:4e:87:42:ad:33:2f:e4:4c:d2:
2f:4f:96:98:dd:94:b4:9d:af:b7:45:0a:7f:06:fc:
bd:bb:a0:10:e8:e5:fe:cd:32:2d:f1:aa:34:fe:ee:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:A5:13:9D:77:E1:08:D4:68:90:8F:0C:EE:C3:97:90:9C:55:F1
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a13::/48
Signature Algorithm: sha256WithRSAEncryption
7f:58:18:f8:ab:7a:d1:09:39:16:15:ab:1a:be:19:aa:ea:fe:
f1:4f:c7:fc:c8:23:dc:20:11:8d:65:d3:aa:6b:d0:53:58:14:
00:bf:79:c6:40:12:0c:3c:0d:7c:e9:13:b8:01:9a:a7:3a:2b:
e3:65:3b:e0:03:53:f0:43:36:b1:a4:2c:2a:06:16:7a:86:a7:
0a:33:1b:49:b2:23:7f:88:6a:a1:60:17:d6:70:12:31:7e:f7:
a0:c2:79:7a:51:a0:30:d8:56:d5:4a:b5:8a:d3:a4:63:c0:51:
a2:91:18:f7:c4:c7:d6:66:c8:13:d3:d4:71:11:14:d5:e3:a2:
7c:21:d9:2b:73:2c:96:34:0e:a2:20:bf:e8:54:0a:80:f2:96:
41:fc:e4:6b:02:4c:29:a9:cd:6c:f2:9f:74:00:e2:a3:61:4f:
ff:0e:ae:4b:45:c4:66:14:7e:7a:1d:53:0f:a4:f5:a1:7d:90:
51:ba:9e:2c:fb:e0:85:c5:f8:91:92:8f:1a:41:c0:1d:75:61:
f8:ff:80:6c:03:f7:84:ff:45:1a:f2:1b:8c:fe:ff:98:6f:14:
7e:52:84:88:07:88:5a:82:e3:a2:83:8f:2c:43:8e:9d:a5:3e:
5e:26:a8:23:7d:67:d6:b7:eb:30:b3:4b:d9:64:3f:bf:70:66:
24:d0:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:23:00 2026 by rpki-client