Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3170.roa
File: AS3170.roa (raw, json)
Hash identifier: OIb3OJPdg6gaOtxX8P0EyvPBJMFHjMf98sPJnqzNu3g=
Subject key identifier: AB:98:31:E9:56:0E:7F:FF:4C:5E:52:33:AA:22:55:2E:F3:9B:92:D0
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4AC3C0DA3839A84773E8A7764D966DE3DCA9D87C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3170.roa
Signing time: Wed 16 Sep 2026 22:40:09 +0000
ROA not before: Wed 16 Sep 2026 22:35:09 +0000
ROA not after: Wed 15 Sep 2027 22:40:09 +0000
asID: 3170
IP address blocks: 136.148.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c3:c0:da:38:39:a8:47:73:e8:a7:76:4d:96:6d:e3:dc:a9:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 16 22:35:09 2026 GMT
Not After : Sep 15 22:40:09 2027 GMT
Subject: CN=AB9831E9560E7FFF4C5E5233AA22552EF39B92D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:d1:18:cb:e6:2f:14:98:6b:e0:ad:fa:c7:
c2:cb:25:ea:ac:b9:54:fb:71:b5:19:44:86:dc:5f:
50:49:6a:cd:21:8c:43:e1:65:df:d0:18:ee:35:5b:
e1:55:86:48:50:86:52:16:fd:1a:43:4b:e8:98:50:
6e:55:ee:2d:0c:ae:90:90:81:be:7f:6c:ca:52:eb:
5e:73:39:f5:5c:a2:d0:3e:b5:51:98:1a:15:27:6a:
8a:6a:c3:1c:16:80:23:e1:29:c2:12:43:e0:d1:31:
a3:e9:03:02:c9:54:93:0e:68:b3:0f:46:d8:66:5c:
7d:49:c3:42:a7:ff:21:63:56:96:71:77:89:8f:0a:
2b:21:14:df:b2:b3:d3:73:02:1e:4d:0c:d8:4c:a6:
78:15:1a:d3:3c:cb:bc:6e:b6:97:4b:89:8d:b8:cb:
04:40:78:fa:c9:0e:87:9b:87:8b:ce:36:88:f2:81:
9c:b7:e4:b8:01:b6:33:bd:40:f6:19:f6:26:8d:4d:
3f:f1:4e:4b:54:b5:9f:bd:ff:66:3c:2d:10:29:75:
ab:12:e2:31:ce:2f:8f:e7:b2:7e:ac:f6:27:c5:56:
35:77:aa:de:21:20:1c:16:b4:69:41:e1:33:e3:65:
3b:15:1d:30:f1:96:b3:f8:eb:a7:f2:66:11:b1:a2:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:31:E9:56:0E:7F:FF:4C:5E:52:33:AA:22:55:2E:F3:9B:92:D0
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS3170.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.73.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a6:02:2a:69:32:d8:4c:92:c9:4e:9a:7d:4a:c7:35:67:29:
05:50:ee:e1:fa:29:cd:2e:3c:2f:b9:24:d5:29:d2:a5:cb:e3:
7f:92:eb:8d:e0:d5:87:6e:a1:31:fc:a3:f3:74:79:d9:06:ed:
64:8b:1d:e6:1d:09:d6:79:bb:0c:ea:2d:85:07:d5:c6:2c:e9:
0b:f4:fa:3f:52:cd:5e:ce:ae:5b:b7:ae:75:0b:04:9c:06:63:
89:2b:c8:99:fc:e4:9c:1d:44:4e:82:85:e9:63:77:7f:02:d4:
63:0f:13:70:b4:42:20:60:40:81:b0:ba:2e:e1:7a:33:b6:24:
3a:5e:90:e1:a6:9b:20:80:2c:74:ad:67:02:eb:14:a2:4b:fb:
51:eb:5a:1a:39:e6:b5:c8:e6:5d:cb:13:84:3f:ff:a4:d4:51:
e5:ad:bb:31:41:2a:59:8a:55:5f:d7:b3:08:8e:4d:f2:36:49:
8f:11:6b:12:58:82:d3:6b:35:fb:b6:ff:db:15:f4:25:88:2e:
54:14:6d:65:10:e3:da:b0:8b:9a:ce:a8:98:95:8f:38:fe:c3:
e0:6b:ad:5a:26:b6:2d:1a:5b:d1:c7:c2:a7:7f:2a:4a:48:c9:
78:5b:06:76:40:f0:4a:b0:06:d8:0a:2c:e1:42:32:d3:8d:12:
6e:b3:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:11 2026 by rpki-client