Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54309.roa
File: AS54309.roa (raw, json)
Hash identifier: SqifGEL8FTFzq3uCz/eaz9XwZxaJ7zDdcZhKhcPpt4E=
Subject key identifier: 25:F5:9F:75:98:19:AA:74:35:BA:B1:F7:CF:12:1D:5B:24:68:08:D3
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 18FBE904BA79E10647F07D5FC84A99282E86B21F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54309.roa
Signing time: Thu 04 Jun 2026 15:58:47 +0000
ROA not before: Thu 04 Jun 2026 15:53:47 +0000
ROA not after: Thu 03 Jun 2027 15:58:47 +0000
asID: 54309
IP address blocks: 85.90.220.0/24 maxlen: 24
85.90.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fb:e9:04:ba:79:e1:06:47:f0:7d:5f:c8:4a:99:28:2e:86:b2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:47 2026 GMT
Not After : Jun 3 15:58:47 2027 GMT
Subject: CN=25F59F759819AA7435BAB1F7CF121D5B246808D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:44:da:ae:aa:f5:7d:eb:88:39:f3:d0:db:
b4:76:ef:4c:80:47:e6:83:d4:79:23:77:6e:8d:18:
21:ad:62:79:8b:1d:48:ad:e7:08:1f:22:b8:ac:7d:
6f:6b:3a:a3:e9:ad:bc:eb:a5:10:02:31:ef:67:44:
46:9d:57:2e:e4:48:f5:89:f9:fc:d0:80:53:5d:e5:
59:a2:9c:4b:9e:6c:95:bc:14:fe:f0:d8:ae:e2:1e:
69:f4:6e:37:2f:a0:09:60:8f:21:0a:60:91:76:7b:
ac:96:50:6b:6d:07:41:b8:c1:80:fa:39:e8:be:e3:
f7:80:7d:27:7b:1c:21:b5:c2:7e:19:a7:b9:97:3c:
ca:ef:22:27:05:5f:0e:a0:ab:f5:90:94:74:b1:32:
86:87:93:1c:3d:87:15:a8:6a:83:23:ed:e7:59:a6:
07:15:2e:40:db:fa:84:dc:eb:84:4c:d2:d4:b0:24:
40:ab:2f:70:a3:46:ce:99:c2:50:98:cf:d5:df:c4:
b3:1e:06:fe:e1:49:11:58:e3:76:3d:b7:0d:8f:f9:
52:2d:14:d2:f8:8d:08:29:97:8b:d3:d1:89:35:66:
2f:76:8a:67:75:cf:95:8b:30:2a:a1:a4:24:5c:b6:
fa:e4:98:86:49:28:a6:e1:af:d2:88:67:90:e2:10:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:9F:75:98:19:AA:74:35:BA:B1:F7:CF:12:1D:5B:24:68:08:D3
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54309.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.90.220.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:1a:72:23:72:6d:2b:fc:a9:fc:b3:ed:f5:dd:2e:35:73:f8:
05:af:5f:e7:e5:05:f3:e3:b9:ee:6e:e4:c9:2c:53:49:9a:ce:
a2:07:b3:b3:99:e5:1d:c7:3e:85:10:e8:33:cb:d4:d2:25:ab:
23:5e:ca:e7:7b:00:45:74:df:1f:b3:bc:f8:e0:6d:06:dd:9e:
a3:64:bc:d1:07:29:87:41:7f:af:31:e9:14:11:9a:f1:5d:f0:
4a:0e:42:46:a2:26:38:25:21:b3:64:f6:5f:5f:f8:24:98:02:
46:ae:28:b4:64:d3:13:90:7b:18:b7:4b:b3:f8:9d:3e:d7:37:
f7:4c:91:77:bb:90:85:e2:8e:c8:20:80:d9:18:e9:fc:d9:12:
ac:3b:50:61:8d:b4:53:b1:a7:16:78:aa:6e:88:66:bd:20:02:
03:70:41:17:c8:08:d4:1b:6f:56:5d:12:a2:84:ec:49:89:81:
b8:0b:43:a1:3a:47:ee:dd:91:b5:1a:38:8d:1c:ac:6f:aa:83:
73:29:13:82:7b:16:1b:de:58:fc:75:cf:f7:77:c2:d5:a9:b8:
46:1e:ca:22:e5:d7:bb:b9:4d:e4:3f:83:1f:9b:c5:fb:1d:99:
2d:a3:dd:09:56:07:15:e5:05:71:e2:df:8a:fa:0f:50:cf:a7:
f8:f0:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:06 2026 by rpki-client