Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47152.roa
File: AS47152.roa (raw, json)
Hash identifier: 4LcE1lBn4sQV1BlRdsokOP54mwHUQfzcqwsKGmcGNvM=
Subject key identifier: A8:ED:BB:5A:92:56:99:24:DA:79:DF:70:03:EB:ED:6D:E5:05:0F:DA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4691B3398D521BFA462926F5C17F27691947CA7F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47152.roa
Signing time: Thu 04 Jun 2026 15:58:51 +0000
ROA not before: Thu 04 Jun 2026 15:53:51 +0000
ROA not after: Thu 03 Jun 2027 15:58:51 +0000
asID: 47152
IP address blocks: 103.230.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:91:b3:39:8d:52:1b:fa:46:29:26:f5:c1:7f:27:69:19:47:ca:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:51 2026 GMT
Not After : Jun 3 15:58:51 2027 GMT
Subject: CN=A8EDBB5A92569924DA79DF7003EBED6DE5050FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:d9:41:8b:20:08:32:7d:75:36:00:f4:26:
37:2b:dd:51:3e:13:cf:4c:15:57:d6:34:e1:cb:1f:
5f:64:1a:30:29:0f:c8:d4:00:5c:dc:a2:f9:fe:01:
29:e9:7d:8b:d4:db:32:f7:b7:c1:21:87:23:33:0b:
f3:2d:d2:04:47:f9:8d:73:e7:3e:17:5e:39:d9:e2:
4b:ff:ef:b7:04:b4:e3:77:75:84:89:da:3c:22:fa:
8f:fc:7b:00:f7:6e:8b:93:38:72:2c:0d:e3:e0:c9:
6c:e7:e8:9d:e6:bb:16:1f:df:08:c6:9c:33:07:3d:
f0:b1:ac:04:a7:47:93:58:b1:95:20:7a:94:b6:10:
4e:4c:ac:bf:78:c8:68:e1:e1:a6:6f:99:a6:89:30:
8a:54:13:4b:02:35:13:33:ca:ae:14:9a:0e:c8:3c:
09:48:94:4d:c2:12:01:23:bc:7b:47:07:a8:a9:ed:
0a:69:d6:67:b4:13:13:30:c7:ce:e5:c9:5b:a7:c6:
36:37:2f:94:f9:00:73:d4:8f:91:cc:f6:7b:0c:6f:
44:fc:d9:ac:af:c9:e2:9d:02:d6:61:09:8f:8e:7a:
e9:51:e8:f1:5b:c1:6f:35:d1:35:c4:80:a6:2f:73:
c7:16:e6:72:f8:bf:7c:7f:17:9f:c0:7f:3b:50:54:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:BB:5A:92:56:99:24:DA:79:DF:70:03:EB:ED:6D:E5:05:0F:DA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:6b:a2:57:cb:28:40:e0:e2:a0:75:9b:b2:41:cb:c4:9a:e6:
b5:a2:81:1f:b2:00:41:20:d5:32:69:74:21:29:1d:7e:f0:2f:
41:d4:99:47:4c:ed:21:c9:83:1e:5d:ab:40:ba:9a:a6:d0:a6:
ff:2e:e9:da:a6:87:b4:e7:9d:8e:1d:ef:7d:be:99:97:e7:b3:
3d:41:72:97:8d:06:78:49:29:f6:0a:75:8f:77:7d:bb:49:c7:
ea:2c:0b:0d:e5:75:a3:21:cc:85:94:43:3b:73:b0:80:39:62:
0e:41:5e:33:5a:8d:16:22:08:d1:12:3e:3f:01:3f:2b:7e:2d:
69:0e:b3:94:8e:fd:c5:82:56:c7:70:cd:f2:2c:38:9a:69:53:
0f:b9:de:67:80:d6:18:b4:d4:07:7c:b6:83:37:10:68:e3:8c:
62:b1:9c:2a:07:4a:f5:26:63:ae:be:26:d0:17:b2:45:e6:9e:
81:b9:7f:2f:e3:f1:db:67:4a:e4:e3:28:de:00:72:3b:01:42:
33:a0:c7:6c:1d:79:af:4b:b6:48:27:df:0b:c0:a4:9c:a2:b5:
8d:93:f3:ea:c3:f9:7f:e9:61:98:b0:96:2a:37:bc:b6:81:2c:
b1:ea:3d:f4:16:9b:22:09:5e:04:2b:16:76:ce:27:40:a2:5a:
9d:7e:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:12 2026 by rpki-client