Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50917.roa
File: AS50917.roa (raw, json)
Hash identifier: ZVPwiF+KYIPhnN3mLr2WbUomcLP3ek5yMARhAKZSJ4Q=
Subject key identifier: 82:AF:0C:64:49:2D:92:E8:E6:B0:F6:7D:55:E9:B1:AB:3C:80:0C:4C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 11C69648882FB02CA4C12D6EA605373AFB83D69A
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50917.roa
Signing time: Thu 04 Jun 2026 15:58:50 +0000
ROA not before: Thu 04 Jun 2026 15:53:50 +0000
ROA not after: Thu 03 Jun 2027 15:58:50 +0000
asID: 50917
IP address blocks: 103.141.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c6:96:48:88:2f:b0:2c:a4:c1:2d:6e:a6:05:37:3a:fb:83:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:50 2026 GMT
Not After : Jun 3 15:58:50 2027 GMT
Subject: CN=82AF0C64492D92E8E6B0F67D55E9B1AB3C800C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:2e:20:10:93:15:9d:60:63:86:d3:c2:43:
5f:c2:66:3c:d1:c9:54:29:bb:69:60:31:28:4d:6d:
0e:c6:94:45:00:b9:11:92:0b:26:8f:2b:45:14:0a:
66:12:ca:47:f5:b6:4e:eb:ea:9f:9a:45:63:3b:73:
4d:75:4b:32:d6:c2:78:b3:62:6f:0f:2d:a1:d1:a2:
b4:88:52:72:42:fc:55:0c:ba:43:8e:25:d9:bb:da:
d7:8b:bd:85:69:61:75:12:2f:a6:7f:9e:9d:a1:ca:
89:47:54:2a:04:63:d3:08:2a:ec:a6:fe:e7:26:11:
0a:5e:74:4e:99:73:5e:ab:17:78:71:26:53:d6:c8:
e4:8a:a8:c0:f8:f1:a2:02:0a:10:b0:7b:5b:6c:70:
cc:50:8a:d1:40:be:97:dd:7c:7a:b7:4e:ef:1a:bd:
b5:46:3c:5e:6a:33:bf:f0:77:bf:ed:20:dc:0e:30:
c2:33:d3:f3:ce:72:4b:34:21:88:bf:5c:8f:2e:86:
9c:75:f7:c4:1d:fc:aa:1e:ed:d1:f1:f3:3d:5a:25:
ac:18:49:8d:23:64:dd:d9:37:b4:f5:c8:f3:8b:1e:
69:b0:e4:2b:5c:b4:33:3d:41:bb:e6:8d:99:bd:df:
5c:7e:c1:b8:df:41:a5:d8:d4:36:ee:64:cc:19:22:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AF:0C:64:49:2D:92:E8:E6:B0:F6:7D:55:E9:B1:AB:3C:80:0C:4C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c1:d3:2d:c5:da:49:d2:ff:d1:1c:5d:a2:d8:66:a8:9b:ee:
53:44:4b:e8:b1:fa:ec:f5:08:dc:36:bb:f3:1f:2c:3f:e9:f2:
21:74:d5:d9:81:2e:b8:29:c1:9d:93:c7:e4:f9:f4:ea:99:da:
cc:d9:a5:4e:ee:61:ab:55:42:2a:85:cc:fc:26:00:cf:7e:22:
fb:18:52:f3:2d:48:8f:ab:32:a0:b5:aa:0c:11:4c:d5:b5:85:
b3:2c:77:85:11:f1:d8:d8:9b:a5:a2:5f:63:3d:c8:3a:be:de:
60:0b:b1:60:9d:6e:3c:8e:04:36:8f:bc:b1:9a:5d:4b:2e:05:
ea:55:ce:00:a6:17:bd:05:ab:ae:93:76:6a:66:66:d1:d1:c6:
b7:a9:1a:43:e2:e1:48:8c:c2:a6:8e:0b:1b:01:0a:3c:dc:3d:
13:a7:59:b5:09:a2:a6:f2:94:ba:da:84:f4:0c:52:17:95:30:
1d:8b:5e:a3:07:13:36:8f:50:cd:7e:71:ac:d6:d0:cf:dc:93:
c6:e6:88:c6:80:b6:49:82:e3:f4:87:c4:1c:27:79:53:cc:5f:
5d:52:ff:d4:ee:7f:66:8e:ec:78:49:a8:d1:03:3c:91:e3:b8:
47:b8:70:49:e9:27:55:45:4d:9b:f5:f0:49:18:29:cc:fe:26:
67:0f:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:24 2026 by rpki-client