Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215039.roa
File: AS215039.roa (raw, json)
Hash identifier: Tlcy5GWaSJe05UivMLNmZ0uxvTYvF7WsaPJd6SzZ0hY=
Subject key identifier: 6E:7E:92:45:39:85:01:15:6C:A3:4B:BC:00:C4:F8:44:7E:11:70:01
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2E1337FDE0F1D3AC00676BD0A99BADA20267BE54
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215039.roa
Signing time: Fri 25 Jul 2025 21:54:41 +0000
ROA not before: Fri 25 Jul 2025 21:49:41 +0000
ROA not after: Fri 24 Jul 2026 21:54:41 +0000
asID: 215039
IP address blocks: 144.48.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:13:37:fd:e0:f1:d3:ac:00:67:6b:d0:a9:9b:ad:a2:02:67:be:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 25 21:49:41 2025 GMT
Not After : Jul 24 21:54:41 2026 GMT
Subject: CN=6E7E9245398501156CA34BBC00C4F8447E117001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:4a:3b:c3:ec:77:57:d3:a6:bb:d6:8e:e6:
f2:a7:12:47:7a:59:bd:aa:40:ed:b7:07:5e:27:c4:
46:41:60:c4:01:6f:76:af:68:9e:de:47:a7:02:2b:
9d:fb:37:18:29:2a:b7:aa:2b:4f:8d:40:f7:3a:81:
e7:4e:30:fe:36:95:0d:4b:53:3e:29:05:ab:e3:5e:
e4:c4:de:a8:94:4c:d7:9b:2f:c6:35:1f:d8:4a:cf:
f4:28:d3:c2:52:87:32:cd:4a:81:68:4d:36:76:b6:
a8:5d:e6:31:5f:24:8c:c8:23:98:f2:13:fa:0c:ea:
9e:bb:70:73:5b:f0:1b:6c:a7:e2:28:c8:07:06:00:
0e:8f:9a:b4:57:f9:23:58:cd:35:27:61:7a:ac:53:
dc:b3:b8:ba:f2:25:e4:3d:8d:48:ca:8b:95:86:a5:
b4:91:41:34:cc:59:d5:0a:d4:af:b3:57:82:d6:1c:
51:f4:18:ad:ee:36:55:f6:57:f8:35:2e:23:60:c0:
e3:30:b2:d8:5c:42:88:19:83:8b:3b:c2:89:6e:e2:
30:83:d2:94:a1:84:36:f9:53:e2:9e:2f:bd:bb:fb:
2b:68:38:5b:7c:db:09:4c:c6:c2:b9:eb:d8:14:cf:
60:67:29:7e:14:bd:14:fd:a1:da:f2:af:cd:01:88:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7E:92:45:39:85:01:15:6C:A3:4B:BC:00:C4:F8:44:7E:11:70:01
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.83.0/24
Signature Algorithm: sha256WithRSAEncryption
31:56:f1:9a:b6:74:55:5a:32:52:51:8d:d8:6e:23:bd:b1:28:
a3:0c:d6:fc:3a:5f:7d:6d:a9:03:c7:7f:e2:b0:4e:7e:df:e8:
ef:17:56:87:72:4d:08:af:52:f3:9e:4c:c5:68:f5:99:ee:18:
aa:48:0e:e3:22:5b:b5:aa:d2:6b:d0:37:4b:de:4f:ed:39:1b:
79:df:ab:45:de:0e:a0:e1:97:6a:be:21:21:17:07:90:11:06:
f9:88:92:05:b0:db:fa:1a:fc:3a:ae:ff:f0:46:27:d8:d7:50:
d9:9c:93:d6:52:00:b1:d8:87:a3:49:b3:bc:03:f1:15:e8:f2:
72:cc:17:55:af:37:95:57:7f:43:0f:de:44:79:06:b6:14:60:
b1:9a:c6:b7:9f:c1:a0:38:4e:94:ac:de:37:4f:5d:ff:f9:76:
70:9a:35:63:72:87:b0:aa:b3:a5:21:31:ab:8e:82:cf:dd:ce:
65:75:08:25:62:3d:76:6e:78:dd:3f:79:7f:aa:d0:69:25:b7:
19:d1:4c:30:cc:bb:bc:ed:f6:1d:7a:8e:ae:5c:7a:ad:57:40:
54:55:5c:5d:49:42:a8:9e:a0:00:dc:56:26:e5:ee:10:73:a6:
2c:96:7a:8e:15:82:43:4a:7c:ab:ab:3c:30:2c:ea:09:4b:a3:
30:02:e8:fa
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIULhM3/eDx06wAZ2vQqZutogJnvlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MjUyMTQ5NDFaFw0yNjA3MjQyMTU0NDFaMDMxMTAvBgNV
BAMTKDZFN0U5MjQ1Mzk4NTAxMTU2Q0EzNEJCQzAwQzRGODQ0N0UxMTcwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uUo7w+x3V9Omu9aO5vKnEkd6
Wb2qQO23B14nxEZBYMQBb3avaJ7eR6cCK537NxgpKreqK0+NQPc6gedOMP42lQ1L
Uz4pBavjXuTE3qiUTNebL8Y1H9hKz/Qo08JShzLNSoFoTTZ2tqhd5jFfJIzII5jy
E/oM6p67cHNb8Btsp+IoyAcGAA6PmrRX+SNYzTUnYXqsU9yzuLryJeQ9jUjKi5WG
pbSRQTTMWdUK1K+zV4LWHFH0GK3uNlX2V/g1LiNgwOMwsthcQogZg4s7wolu4jCD
0pShhDb5U+KeL727+ytoOFt82wlMxsK569gUz2BnKX4UvRT9odryr80BiDZDAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUbn6SRTmFARVso0u8AMT4RH4RcAEwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjE1MDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAkDBTMA0GCSqGSIb3DQEBCwUAA4IBAQAxVvGatnRV
WjJSUY3YbiO9sSijDNb8Ol99bakDx3/isE5+3+jvF1aHck0Ir1LznkzFaPWZ7hiq
SA7jIlu1qtJr0DdL3k/tORt536tF3g6g4ZdqviEhFweQEQb5iJIFsNv6Gvw6rv/w
RifY11DZnJPWUgCx2IejSbO8A/EV6PJyzBdVrzeVV39DD95EeQa2FGCxmsa3n8Gg
OE6UrN43T13/+XZwmjVjcoewqrOlITGrjoLP3c5ldQglYj12bnjdP3l/qtBpJbcZ
0UwwzLu87fYdeo6uXHqtV0BUVVxdSUKonqAA3FYm5e4Qc6YslnqOFYJDSnyrqzww
LOoJS6MwAuj6
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:44 2025 by rpki-client