Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218810.roa
File: AS218810.roa (raw, json)
Hash identifier: N7b/VnJfDQwoWIOErDMX+dN2R4Vvj5mLqtHWGjdpb6s=
Subject key identifier: 48:5C:F8:53:E7:96:E9:AD:17:6B:95:6E:5A:61:EB:F6:2C:7F:ED:31
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 530B90B0881BCFF23372C7ECA24232225110E26C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218810.roa
Signing time: Tue 15 Sep 2026 13:49:49 +0000
ROA not before: Tue 15 Sep 2026 13:44:49 +0000
ROA not after: Tue 14 Sep 2027 13:49:49 +0000
asID: 218810
IP address blocks: 136.148.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:0b:90:b0:88:1b:cf:f2:33:72:c7:ec:a2:42:32:22:51:10:e2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 15 13:44:49 2026 GMT
Not After : Sep 14 13:49:49 2027 GMT
Subject: CN=485CF853E796E9AD176B956E5A61EBF62C7FED31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:bb:cb:91:51:be:c5:b7:79:28:ba:5b:27:
be:e7:8d:38:52:df:57:9b:18:6c:12:2e:83:9e:dd:
bd:49:79:f0:0d:4a:3b:3e:62:ea:ec:e5:8b:43:1f:
2e:18:21:c5:83:00:19:8e:86:c6:a0:dc:69:b5:e4:
19:f6:61:81:6f:8e:50:68:d4:75:a8:ef:d6:99:a4:
38:0c:8d:b9:f1:55:f7:ab:64:46:b2:58:5d:e8:be:
56:ed:be:5f:3b:93:58:5b:9f:68:ed:a4:30:9a:45:
ae:14:90:de:18:b9:e8:68:c9:cf:c7:1b:b9:97:cb:
e8:52:b5:8e:c1:f7:1f:ec:ef:a6:fc:60:ce:86:d0:
b5:ef:04:bb:06:bc:59:4d:a0:e4:54:54:68:87:11:
d2:18:04:03:cc:aa:95:55:67:62:54:eb:bd:c5:73:
e7:2a:c4:af:16:a3:ec:b1:c8:76:8e:32:51:71:65:
30:8d:54:c2:b1:6b:28:86:3e:d7:7c:8d:20:ce:f0:
b3:c1:ef:31:d8:4e:0d:ca:ee:80:bc:5e:b1:94:f7:
00:25:24:a8:48:24:11:03:5a:1d:9a:f2:d5:36:ac:
3a:ec:38:d7:a0:b1:3d:12:dc:53:52:e4:f3:9a:d1:
9c:42:2a:77:aa:05:9e:a9:e2:0a:00:e0:85:e5:5a:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5C:F8:53:E7:96:E9:AD:17:6B:95:6E:5A:61:EB:F6:2C:7F:ED:31
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.78.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9e:5d:0b:6e:22:3a:a7:48:c9:5e:31:f7:bc:48:c9:0e:c3:
fa:af:d8:71:bc:af:78:bb:bc:0a:b1:56:f7:17:bc:2b:0c:13:
a2:4a:f4:ca:53:4c:af:ea:c0:d4:27:07:a6:e8:d5:b7:b2:ce:
87:32:a5:ba:b2:e7:42:5b:f2:46:3f:c5:b2:91:9d:2f:1b:95:
38:0c:a6:6f:e4:a8:e3:97:19:6d:a4:89:fe:fd:c8:b7:89:5e:
c2:d4:17:1a:90:3d:de:85:d5:30:e2:35:f9:49:e1:ed:02:6b:
2b:e7:11:44:e9:f3:04:8d:f8:3c:88:e1:29:3d:01:ba:ad:1d:
4d:4f:6a:4c:c5:45:79:04:1a:11:ee:71:11:a3:0a:39:1e:2b:
ef:42:88:dc:43:f1:f3:83:6b:d6:d3:b7:4d:b4:71:c1:48:f6:
61:55:41:b7:00:0c:a1:20:f4:16:42:38:ab:a7:bf:b2:a6:ea:
b3:4d:a8:41:94:f6:a1:6c:6f:b2:30:98:0f:fc:46:f6:54:91:
5b:fc:c7:81:e3:17:b5:b7:55:83:e6:3f:ea:56:78:e3:93:ca:
17:e5:6e:1c:72:a1:39:31:35:8a:72:fb:cd:c9:a2:1f:7a:67:
dc:10:2a:93:37:a4:af:f4:50:17:7a:4b:2f:c8:a1:48:79:55:
29:de:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:22:21 2026 by rpki-client