Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23033.roa
File: AS23033.roa (raw, json)
Hash identifier: Wo+FP7sVMIYNKOeIisosex9X8avllHS4Wug0/giAtyQ=
Subject key identifier: B9:DD:3A:E6:8A:D2:32:94:44:30:AD:B8:FB:18:6A:68:39:A1:62:5D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 666AB55F0441436327235D15C42C6F8D0889835B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23033.roa
Signing time: Thu 04 Jun 2026 15:58:54 +0000
ROA not before: Thu 04 Jun 2026 15:53:54 +0000
ROA not after: Thu 03 Jun 2027 15:58:54 +0000
asID: 23033
IP address blocks: 160.202.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6a:b5:5f:04:41:43:63:27:23:5d:15:c4:2c:6f:8d:08:89:83:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:54 2026 GMT
Not After : Jun 3 15:58:54 2027 GMT
Subject: CN=B9DD3AE68AD232944430ADB8FB186A6839A1625D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:7c:8b:35:8b:e9:bb:42:d8:8b:7f:3a:34:
79:f9:eb:c9:fa:93:a0:9c:01:f9:bf:71:9d:ac:59:
8d:5e:88:4f:e2:ec:8a:68:19:5c:0b:10:8d:f4:1e:
80:eb:0c:7d:4e:07:72:c4:63:ce:68:2f:d0:26:0a:
23:c6:23:7a:3c:57:44:4d:82:4f:5f:c0:68:8d:18:
33:0d:39:73:1b:3a:9c:11:b8:52:15:62:b4:5e:cf:
85:be:0a:a0:6b:49:2a:cd:59:bb:4e:cf:78:e8:c1:
39:ae:b0:b9:62:a6:ad:61:c9:1d:5f:8d:d5:10:b8:
bc:3f:c8:3e:64:6f:40:43:30:9d:26:83:a4:43:82:
3e:df:c5:58:15:f0:a8:d4:2b:e4:c2:d0:3e:30:f4:
fe:60:45:83:30:45:45:9e:bb:7f:1a:a7:b6:0d:d7:
f0:05:a5:20:0c:6e:ce:25:a8:c1:9b:05:80:60:40:
1d:0d:ea:6a:d9:b7:dd:ee:f8:bb:71:12:51:93:ac:
55:d1:bd:dd:1f:cc:61:8a:76:ac:84:f0:30:17:10:
44:1c:41:a0:e3:4b:fc:2d:0f:39:1e:9a:99:2d:31:
5a:20:13:81:80:b4:08:f3:c7:b1:50:a8:9a:40:e4:
3a:84:0c:55:39:71:18:fb:06:7c:91:13:66:5f:6b:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DD:3A:E6:8A:D2:32:94:44:30:AD:B8:FB:18:6A:68:39:A1:62:5D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS23033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:59:f9:a0:e3:6c:70:5a:9c:10:f6:e2:98:84:15:b7:5e:23:
0d:72:00:c4:36:7b:8c:86:4b:26:79:d8:81:ca:4e:c3:0e:97:
3d:8f:88:de:8b:30:a4:6a:d3:59:15:63:2f:4b:92:88:1f:d6:
42:14:a1:67:69:99:ff:1e:03:a9:d0:c3:ef:c7:d5:b6:e4:c4:
4d:6f:70:2d:7f:4f:85:d0:88:84:77:21:68:03:aa:f1:ea:04:
2a:47:e2:dd:bf:2d:27:3e:ca:25:00:0f:0f:65:dd:0c:1c:2e:
66:d6:f8:8a:57:5b:c7:38:71:f6:61:c0:a5:37:38:c2:a4:06:
29:5b:d5:c4:0e:06:24:7d:ec:06:ca:c1:30:54:b4:eb:ef:f8:
e3:46:d9:c5:2a:bf:5e:6c:b6:90:d3:1e:36:d1:46:f2:ca:1c:
6d:77:c2:b2:d2:46:0d:da:8d:08:08:48:3a:31:83:32:66:e8:
a1:cf:c8:4b:85:a9:33:d1:66:e6:33:95:fa:5f:c4:1b:3d:87:
15:d5:89:09:05:e0:7b:12:30:75:04:7a:8c:27:26:b0:b3:92:
9f:05:1d:ff:13:92:57:b7:8e:6d:67:3d:ed:d5:af:84:95:b3:
46:e0:ba:1f:bf:cc:7f:e7:04:80:79:e1:e4:ec:51:ab:4d:cd:
43:f7:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:07 2026 by rpki-client