Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47311.roa
File: AS47311.roa (raw, json)
Hash identifier: P/huqDpEaJ5K2lw6PcQkQmSZgE1JleH/E2n120hB50s=
Subject key identifier: B4:8A:B7:49:DD:70:11:3B:30:BF:4B:09:E4:0B:47:78:9F:AF:50:81
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 084134A6BE57ABBFBB3EDCBE4B5D9A974146EBDB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47311.roa
Signing time: Thu 04 Jun 2026 15:58:51 +0000
ROA not before: Thu 04 Jun 2026 15:53:51 +0000
ROA not after: Thu 03 Jun 2027 15:58:51 +0000
asID: 47311
IP address blocks: 2a06:9f44:f170::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:41:34:a6:be:57:ab:bf:bb:3e:dc:be:4b:5d:9a:97:41:46:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:51 2026 GMT
Not After : Jun 3 15:58:51 2027 GMT
Subject: CN=B48AB749DD70113B30BF4B09E40B47789FAF5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:63:d0:22:ed:2b:29:b2:f4:d6:f8:0f:2f:
96:78:f7:5e:8b:42:86:5f:4d:4b:e4:cf:fe:16:81:
5c:53:fd:61:b7:6d:37:ab:8c:99:08:bc:3e:18:63:
df:7d:9c:26:ae:0b:35:63:aa:f8:75:82:5b:b4:36:
ef:46:c8:6e:b1:9c:09:31:d1:6e:00:5a:ad:ae:50:
85:8d:c4:ec:38:4d:32:c7:4d:dd:65:db:24:ff:8a:
ce:24:39:0f:b9:7b:12:07:6d:50:21:af:fc:ce:4c:
ee:b1:5a:8c:e9:73:e6:cd:e2:a8:17:11:1d:79:48:
9b:df:ee:a3:d0:bf:37:55:c2:b0:6a:d5:d9:d9:73:
de:84:04:04:60:c4:54:66:d5:bf:4d:d9:95:00:2a:
a8:80:59:6e:64:70:92:66:a2:65:72:78:5d:ee:42:
6c:be:3c:16:1e:80:3d:c7:f2:2b:48:fd:da:ce:3b:
59:27:01:3b:48:c4:96:df:ec:31:35:d9:d6:a2:59:
2d:52:fd:bf:24:03:d3:86:cd:c3:5d:e2:d7:13:c9:
16:96:3c:d7:f1:e3:4d:89:c3:75:54:1d:e8:97:98:
35:88:c5:9f:e1:be:8a:a5:f1:e2:9c:80:3f:69:3e:
e9:03:92:75:7b:83:85:a4:19:a1:d2:8c:49:8c:f4:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:B7:49:DD:70:11:3B:30:BF:4B:09:E4:0B:47:78:9F:AF:50:81
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44:f170::/44
Signature Algorithm: sha256WithRSAEncryption
4e:64:42:39:f6:05:87:e3:48:e4:42:52:41:f6:97:54:ef:8e:
0e:29:d0:1b:dc:1e:6f:f4:bd:da:60:4d:af:85:dd:26:de:d7:
79:a9:28:f4:7b:5f:bb:49:ad:46:b6:5f:de:a5:23:dc:3b:b6:
e3:e1:99:4a:a9:6a:ae:96:03:c0:0f:3c:ad:c9:d2:79:49:44:
37:2f:dd:bc:cb:47:b8:0e:14:c7:86:a0:28:7b:f0:0d:e0:2f:
03:df:90:14:9d:70:25:73:5b:aa:f7:56:65:5b:d0:d9:09:46:
db:73:69:48:e3:2f:41:72:51:02:18:f3:e5:bd:28:83:15:7d:
51:00:97:e8:49:28:e9:96:a2:f0:02:49:40:08:33:a2:4e:4b:
26:7b:13:49:0b:9f:fd:3d:66:f0:22:fa:d6:af:91:8d:3e:fd:
c9:4c:7c:cd:93:19:c6:24:5f:a9:97:fa:38:b2:c9:7d:07:99:
64:93:fc:eb:19:da:ae:25:90:1a:53:aa:ca:30:ea:13:6a:8b:
d9:1c:6a:85:2b:57:a6:f0:e2:71:6e:43:9c:83:a0:3f:c6:6f:
a1:0c:5a:fa:37:68:d5:72:f2:e6:f2:c8:ee:d3:a2:4e:76:a7:
50:82:ae:d4:c5:07:4e:62:f7:8b:7c:a3:0f:83:79:ad:35:85:
dc:70:9d:63
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUCEE0pr5Xq7+7Pty+S12al0FG69swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNTFaFw0yNzA2MDMxNTU4NTFaMDMxMTAvBgNV
BAMTKEI0OEFCNzQ5REQ3MDExM0IzMEJGNEIwOUU0MEI0Nzc4OUZBRjUwODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+mPQIu0rKbL01vgPL5Z4916L
QoZfTUvkz/4WgVxT/WG3bTerjJkIvD4YY999nCauCzVjqvh1glu0Nu9GyG6xnAkx
0W4AWq2uUIWNxOw4TTLHTd1l2yT/is4kOQ+5exIHbVAhr/zOTO6xWozpc+bN4qgX
ER15SJvf7qPQvzdVwrBq1dnZc96EBARgxFRm1b9N2ZUAKqiAWW5kcJJmomVyeF3u
Qmy+PBYegD3H8itI/drOO1knATtIxJbf7DE12daiWS1S/b8kA9OGzcNd4tcTyRaW
PNfx402Jw3VUHeiXmDWIxZ/hvoql8eKcgD9pPukDknV7g4WkGaHSjEmM9Aw1AgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUtIq3Sd1wETswv0sJ5AtHeJ+vUIEwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NDczMTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwQqBp9E8XAwDQYJKoZIhvcNAQELBQADggEBAE5kQjn2
BYfjSORCUkH2l1Tvjg4p0BvcHm/0vdpgTa+F3Sbe13mpKPR7X7tJrUa2X96lI9w7
tuPhmUqpaq6WA8APPK3J0nlJRDcv3bzLR7gOFMeGoCh78A3gLwPfkBSdcCVzW6r3
VmVb0NkJRttzaUjjL0FyUQIY8+W9KIMVfVEAl+hJKOmWovACSUAIM6JOSyZ7E0kL
n/09ZvAi+tavkY0+/clMfM2TGcYkX6mX+jiyyX0HmWST/OsZ2q4lkBpTqsow6hNq
i9kcaoUrV6bw4nFuQ5yDoD/Gb6EMWvo3aNVy8ubyyO7Tok52p1CCrtTFB05i94t8
ow+Dea01hdxwnWM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:15 2026 by rpki-client