Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213768.roa
File: AS213768.roa (raw, json)
Hash identifier: vRlh7WPf4bmfUdEwSJ51KK13QLRtqE1Q1zWFeCY9S1U=
Subject key identifier: C8:F2:69:61:57:98:85:4D:66:4F:AE:37:69:A1:84:04:DA:4E:96:95
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7706FFCCEF9936D57F88A1C482AE7017232F3CD6
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213768.roa
Signing time: Sun 20 Jul 2025 19:47:58 +0000
ROA not before: Sun 20 Jul 2025 19:42:58 +0000
ROA not after: Sun 19 Jul 2026 19:47:58 +0000
asID: 213768
IP address blocks: 202.50.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:06:ff:cc:ef:99:36:d5:7f:88:a1:c4:82:ae:70:17:23:2f:3c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 20 19:42:58 2025 GMT
Not After : Jul 19 19:47:58 2026 GMT
Subject: CN=C8F269615798854D664FAE3769A18404DA4E9695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:48:c6:00:79:63:23:f1:90:a3:28:8b:3c:b9:
8a:45:43:a4:0f:e1:90:95:cb:e4:18:74:40:3f:ff:
94:83:c4:62:55:6b:58:27:ec:ea:b5:ad:6b:15:ba:
39:c9:d5:97:d9:37:30:56:92:0b:5b:a8:00:64:29:
72:fb:80:df:a0:ce:73:22:b4:29:e7:27:c8:76:ed:
2b:dc:43:11:a0:f6:a9:4c:9d:ad:5c:5c:44:45:1c:
ff:79:b6:6e:e8:97:0e:13:42:e3:be:e6:22:bc:c9:
cc:cb:38:db:8c:e6:21:42:f0:ee:fa:b5:b8:b9:04:
92:74:5e:72:b4:b6:82:1d:82:29:4a:e8:82:0c:d5:
ec:af:e2:a4:20:c6:14:4d:f3:52:b0:5e:0f:d0:a2:
67:f9:b6:02:bf:dc:55:6c:57:ae:07:90:7a:49:04:
67:db:ff:60:e4:0f:c8:53:ed:27:f0:9d:bf:4d:6b:
64:4a:d2:ce:71:6b:83:27:b9:3c:b6:c6:ef:ec:0d:
87:76:e5:f2:81:40:85:e3:e1:a4:90:fa:e4:50:bc:
6c:80:af:2c:3f:3b:45:b2:30:90:1e:d5:38:11:b7:
58:fe:67:fb:74:af:aa:d7:20:e4:b1:95:45:ea:77:
92:a7:0f:ca:2e:86:ee:c9:83:9f:62:33:44:cc:0f:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:69:61:57:98:85:4D:66:4F:AE:37:69:A1:84:04:DA:4E:96:95
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.53.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:55:77:a3:c8:d0:46:58:48:e9:fc:b2:25:66:d7:23:fc:4c:
65:fd:ed:54:9b:34:5a:cf:fe:62:a6:92:c5:03:f3:f9:7b:d4:
fb:07:12:86:f3:4c:21:f6:86:f0:c5:61:73:e1:9f:b5:c6:eb:
bf:e6:bb:df:db:8e:24:5c:41:e3:0d:de:66:63:fa:d9:cc:23:
5c:ce:69:81:1d:3c:96:3d:d2:ca:f6:10:48:b5:5c:de:ab:9c:
b5:6b:2c:85:08:57:51:99:a8:69:7e:7a:06:50:3d:01:5e:39:
b8:44:9a:a2:3a:91:14:a9:fd:9e:48:63:3d:25:50:9a:f9:a8:
f3:06:81:b7:c2:97:89:f8:ad:a4:54:5c:3d:f5:b5:f3:15:c6:
10:6d:90:0d:7d:cf:ef:21:92:f7:b4:0c:3e:82:0f:61:b7:57:
bc:29:01:3b:7f:f9:44:5a:ab:55:bb:ce:b7:44:e1:3f:d8:31:
92:12:8a:5a:62:29:48:ed:7b:0e:07:6f:d0:90:b1:67:08:96:
8b:b9:79:3e:ea:32:e3:14:d0:e3:86:5c:4f:69:da:33:d7:6d:
ac:5f:51:0a:6f:5f:d3:af:10:ac:dc:0d:2c:69:8a:cd:04:14:
f1:85:d8:0e:55:b0:24:0a:e5:6a:c9:e9:c5:f5:f9:db:65:da:
fb:7e:22:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:57:37 2025 by rpki-client