Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215367.roa
File: AS215367.roa (raw, json)
Hash identifier: wO4oShzTfwXfBA5BOxpiQihDl1IgW0i3puGqLsaJ9ZE=
Subject key identifier: F1:E2:91:10:86:B3:83:6F:66:A7:8A:7D:9C:B9:62:64:58:E5:EC:11
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3EC595DB85B9F762FC1DDC00E01C5FE803F64646
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215367.roa
Signing time: Thu 04 Jun 2026 15:58:50 +0000
ROA not before: Thu 04 Jun 2026 15:53:50 +0000
ROA not after: Thu 03 Jun 2027 15:58:50 +0000
asID: 215367
IP address blocks: 160.202.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c5:95:db:85:b9:f7:62:fc:1d:dc:00:e0:1c:5f:e8:03:f6:46:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:50 2026 GMT
Not After : Jun 3 15:58:50 2027 GMT
Subject: CN=F1E2911086B3836F66A78A7D9CB9626458E5EC11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:13:ad:5b:88:6f:ef:e8:15:f1:18:bb:f5:
c9:be:89:8b:68:ff:94:3b:62:bc:3c:94:0b:ed:97:
9d:ca:f9:52:3a:e7:0e:75:7e:42:75:36:37:08:0f:
31:1b:b7:56:36:d5:38:d9:91:5a:52:03:f0:ab:9b:
55:c3:5b:8e:d0:5c:01:54:5f:4c:aa:80:c2:ea:6b:
20:83:89:3f:60:ef:1d:46:6a:44:46:1a:54:de:3c:
cc:7a:b6:6c:2f:ef:aa:30:c9:96:b0:50:9a:ea:a8:
42:59:01:9a:06:70:d7:84:17:78:fc:f0:20:74:b0:
4b:b7:aa:f9:bc:11:f9:5d:5b:be:b0:7a:a7:f6:d1:
c3:94:03:b5:c8:68:be:55:a8:01:67:cf:3e:f5:99:
cc:d4:5a:74:de:05:e7:21:a8:cd:7d:2f:a9:47:e9:
88:12:e9:f4:3e:d3:39:cd:32:31:eb:57:50:91:73:
19:6e:53:a6:87:7a:d3:f4:5e:63:14:d4:1c:51:b8:
64:b1:01:6e:af:5a:1c:95:01:13:89:e7:fb:1b:ab:
52:1d:04:ba:f1:f6:c8:0d:da:71:16:75:a2:0d:b1:
db:73:6e:0e:23:74:96:45:1f:f6:3e:a0:05:f5:ac:
e0:8f:91:4f:3b:de:26:5e:f4:09:e4:ff:df:59:31:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:91:10:86:B3:83:6F:66:A7:8A:7D:9C:B9:62:64:58:E5:EC:11
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.135.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d0:dd:0b:30:76:f3:70:d8:39:8d:6d:a6:ff:8f:93:6e:ae:
20:68:cf:8e:d7:68:b2:86:eb:07:cb:46:87:d1:42:3b:e7:50:
ec:f7:f7:c6:65:97:ca:0e:4d:19:21:51:ea:2a:ca:11:9c:f5:
91:d8:06:1c:c7:12:a3:fe:45:ed:26:91:6c:c2:f6:77:84:56:
94:b5:60:11:74:ab:73:0a:c2:ce:42:fa:58:95:9d:4a:ad:e3:
44:2c:d3:f7:9a:61:0f:9b:1a:34:88:1b:d0:cc:3c:2c:50:9d:
78:08:8e:b3:80:7f:34:29:9d:75:41:9a:13:e5:f4:53:e8:f9:
cc:44:7c:f0:cd:a0:61:3d:48:90:c6:1e:64:ab:29:99:8d:d7:
76:a7:6e:fe:85:8a:eb:ba:6a:8c:03:f6:f8:dc:28:f1:57:60:
c2:29:e5:89:a9:8c:18:a4:7a:83:78:0f:89:42:fe:41:b4:a1:
de:d5:03:c4:41:7e:4f:71:82:d8:dc:80:c1:44:21:a9:83:1c:
e1:9d:bc:d1:e5:8f:f8:b7:f1:d6:25:49:0d:b3:ad:1f:c1:b2:
32:32:0c:ce:ae:d0:72:a6:5c:4d:da:ae:d6:e2:6c:ab:00:0b:
57:cb:60:e2:13:54:f8:1b:d0:7c:2c:00:45:10:ea:d7:f1:d0:
7b:b3:1a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:10 2026 by rpki-client