Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213124.roa
File: AS213124.roa (raw, json)
Hash identifier: 3N4b1J90JoGvySldA91aQOkqDf2Vs0gtE7L8ORSr7Do=
Subject key identifier: 2A:26:ED:EA:F2:B3:85:97:D3:C5:FC:6A:B4:69:2C:7B:21:E2:08:01
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 44D98DD6222F02919AE1A250F704FBEBB8BCB251
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213124.roa
Signing time: Thu 03 Sep 2026 11:59:09 +0000
ROA not before: Thu 03 Sep 2026 11:54:09 +0000
ROA not after: Thu 02 Sep 2027 11:59:09 +0000
asID: 213124
IP address blocks: 2a09:54c1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d9:8d:d6:22:2f:02:91:9a:e1:a2:50:f7:04:fb:eb:b8:bc:b2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 3 11:54:09 2026 GMT
Not After : Sep 2 11:59:09 2027 GMT
Subject: CN=2A26EDEAF2B38597D3C5FC6AB4692C7B21E20801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6f:e2:94:a7:cc:3e:6f:01:3b:9e:23:8d:0c:
a1:73:58:5a:e3:fc:40:0a:da:b6:17:6f:9b:4f:59:
7e:ee:5c:58:7c:12:84:30:3d:ac:43:47:d7:72:1e:
78:6f:56:a8:e3:8c:36:a2:a7:10:00:2a:71:7d:4d:
f7:c7:fa:c5:d0:ec:54:8a:31:50:f0:2c:4b:79:20:
d0:4f:ce:c2:4e:93:f2:e0:75:67:59:0e:e7:6d:f8:
75:26:d9:a7:af:de:73:ca:f0:cb:6a:70:4d:59:52:
a1:ca:17:48:d4:a4:3d:d7:e9:95:a7:99:dd:71:58:
4c:cb:dd:fe:71:1f:e0:0c:e5:0b:66:a5:44:c3:61:
63:1c:b8:0a:5c:56:30:a3:6e:82:0a:c5:a3:cd:35:
a6:5c:cf:86:a1:c7:4c:4c:e3:72:12:f9:3e:86:42:
94:c7:6b:50:00:f8:c3:8f:85:cd:7e:ab:61:63:05:
dc:c6:80:63:75:b3:ab:af:65:69:91:b7:49:b7:e4:
35:17:91:3a:2f:aa:ee:ca:5c:ab:06:fc:5d:58:c8:
5c:e4:4d:01:ac:8d:aa:cf:4f:37:8d:9e:eb:5d:3a:
b8:68:71:8e:b1:56:46:c5:62:01:ab:44:de:6f:30:
a1:8f:1b:a5:65:b1:78:15:32:83:8a:a1:2c:df:08:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:ED:EA:F2:B3:85:97:D3:C5:FC:6A:B4:69:2C:7B:21:E2:08:01
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213124.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c1::/32
Signature Algorithm: sha256WithRSAEncryption
71:b6:81:f7:b2:82:e4:55:49:f8:34:c5:38:b7:e6:30:a7:70:
71:02:5d:8e:d7:de:d0:9a:b9:04:b4:97:67:9f:63:dd:14:51:
fc:5a:39:82:e3:ae:2d:68:37:a2:d7:ab:ef:2d:8e:94:fc:0b:
71:30:96:ed:c0:f9:f6:a1:b2:a8:4a:6a:15:16:96:48:f4:43:
6a:06:43:00:62:bc:0d:cd:be:1d:48:5b:b7:fe:01:92:db:78:
26:b1:89:4f:de:41:4c:b1:46:d9:73:6c:8a:b8:84:30:5d:06:
7f:b1:13:96:06:ef:be:99:08:99:1a:10:58:3e:72:f9:59:14:
c4:82:14:3b:ae:0c:1c:bd:72:aa:20:b7:ee:a8:4b:2f:f5:41:
ff:68:3d:b0:4d:fa:9d:38:5b:05:84:7a:a6:0f:ce:29:f6:8a:
8a:71:3a:e3:f2:32:bb:a9:5d:ea:f9:84:c2:6a:7e:bd:2f:8a:
6c:8a:24:d2:36:11:63:0e:0c:78:6c:c6:c4:3f:78:46:35:90:
1f:5f:ca:80:6c:70:34:02:84:f1:c1:c9:50:d1:5f:fe:47:7f:
ec:82:3b:ea:a6:56:da:07:17:df:ba:5d:a5:49:2c:d7:46:3f:
77:33:57:e4:d8:8c:5e:5f:65:88:8a:f9:f6:37:d4:66:d7:64:
24:b1:76:98
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIURNmN1iIvApGa4aJQ9wT767i8slEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA5MDMxMTU0MDlaFw0yNzA5MDIxMTU5MDlaMDMxMTAvBgNV
BAMTKDJBMjZFREVBRjJCMzg1OTdEM0M1RkM2QUI0NjkyQzdCMjFFMjA4MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIb+KUp8w+bwE7niONDKFzWFrj
/EAK2rYXb5tPWX7uXFh8EoQwPaxDR9dyHnhvVqjjjDaipxAAKnF9TffH+sXQ7FSK
MVDwLEt5INBPzsJOk/LgdWdZDudt+HUm2aev3nPK8MtqcE1ZUqHKF0jUpD3X6ZWn
md1xWEzL3f5xH+AM5QtmpUTDYWMcuApcVjCjboIKxaPNNaZcz4ahx0xM43IS+T6G
QpTHa1AA+MOPhc1+q2FjBdzGgGN1s6uvZWmRt0m35DUXkTovqu7KXKsG/F1YyFzk
TQGsjarPTzeNnutdOrhocY6xVkbFYgGrRN5vMKGPG6VlsXgVMoOKoSzfCP7JAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUKibt6vKzhZfTxfxqtGkseyHiCAEwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEzMTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKglUwTANBgkqhkiG9w0BAQsFAAOCAQEAcbaB97KC
5FVJ+DTFOLfmMKdwcQJdjtfe0Jq5BLSXZ59j3RRR/Fo5guOuLWg3oter7y2OlPwL
cTCW7cD59qGyqEpqFRaWSPRDagZDAGK8Dc2+HUhbt/4Bktt4JrGJT95BTLFG2XNs
iriEMF0Gf7ETlgbvvpkImRoQWD5y+VkUxIIUO64MHL1yqiC37qhLL/VB/2g9sE36
nThbBYR6pg/OKfaKinE64/Iyu6ld6vmEwmp+vS+KbIok0jYRYw4MeGzGxD94RjWQ
H1/KgGxwNAKE8cHJUNFf/kd/7II76qZW2gcX37pdpUks10Y/dzNX5NiMXl9liIr5
9jfUZtdkJLF2mA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:44:18 2026 by rpki-client