Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54728.roa
File: AS54728.roa (raw, json)
Hash identifier: zIsm2PhdAi1H6NzUtwxRcHVbC3x/hH+S4EXhVCXqJ6s=
Subject key identifier: 69:84:E4:39:C7:AB:F7:66:E8:83:51:2E:7B:D5:2C:41:B6:E5:BE:EA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3E69C31E5A4FC7ACB5E3930EDCB2EC4AE0399F67
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54728.roa
Signing time: Sat 31 Oct 2026 09:59:12 +0000
ROA not before: Sat 31 Oct 2026 09:54:12 +0000
ROA not after: Sat 30 Oct 2027 09:59:12 +0000
asID: 54728
IP address blocks: 118.91.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 13:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:69:c3:1e:5a:4f:c7:ac:b5:e3:93:0e:dc:b2:ec:4a:e0:39:9f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 31 09:54:12 2026 GMT
Not After : Oct 30 09:59:12 2027 GMT
Subject: CN=6984E439C7ABF766E883512E7BD52C41B6E5BEEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:ae:0b:10:b4:14:4d:31:cc:15:20:d2:ae:
21:9a:cd:e3:ae:d1:7f:38:99:e8:07:e5:76:a4:44:
40:3e:0c:4b:c2:83:69:30:87:e3:32:14:e9:89:16:
cf:e7:3f:99:92:d6:4d:82:fd:b6:47:33:07:c9:be:
6b:80:8a:80:b1:36:42:0f:a9:ae:fa:d7:95:e9:a3:
58:ec:a7:7d:2a:a4:93:9e:19:38:d4:2b:7a:b2:12:
46:f2:bd:29:25:b3:d2:f5:06:0a:23:4c:f7:4e:be:
f5:54:fb:c6:d7:4d:53:8a:5a:b0:66:65:10:88:67:
f9:94:e5:0e:79:67:28:4b:e1:d9:fb:00:96:05:f1:
d6:94:de:29:01:52:66:74:eb:b7:17:13:29:6e:6e:
93:30:b6:d3:12:15:5a:37:5c:b3:37:44:c1:47:2e:
53:0b:ed:55:10:30:ff:53:2a:5f:56:a2:b2:db:46:
69:50:bd:6a:39:71:82:87:2a:35:cc:dc:a2:ad:69:
d4:cb:14:7c:8e:fd:b2:e4:c4:35:a4:aa:2d:39:51:
d0:f7:ab:33:0e:89:be:c6:2d:49:1e:59:76:3f:ad:
76:99:fb:c6:9b:29:4d:28:24:12:62:2b:1b:b4:6b:
d3:ef:76:7e:1d:65:b7:a8:e8:bd:53:e4:da:a6:c6:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:84:E4:39:C7:AB:F7:66:E8:83:51:2E:7B:D5:2C:41:B6:E5:BE:EA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.185.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bc:66:eb:f3:1a:8b:23:0a:3d:48:b5:53:f2:06:2c:fa:24:
8c:aa:d6:73:c0:8b:3b:95:b6:2f:6e:da:59:ef:60:10:3e:0f:
a9:32:d3:5b:ad:9d:ec:8c:4d:9c:f8:92:f6:44:21:8c:f9:02:
9b:d2:c6:99:81:1c:3b:91:77:2d:bc:86:38:9e:d0:06:b5:56:
63:d5:b9:6b:3e:bd:fb:fa:41:9d:01:cf:46:b6:81:9c:ea:39:
6c:35:40:23:38:a9:90:8e:85:09:a2:60:78:42:4a:12:66:03:
3e:c9:2e:cb:ab:ea:5a:ce:5b:68:3a:fa:1a:cc:1c:47:35:df:
a7:8b:69:f8:48:4d:b7:09:e4:01:ce:d7:57:5d:1c:e2:84:0d:
1d:a5:11:29:77:e4:be:94:7a:66:9c:80:c1:10:75:f9:61:b0:
ba:b0:90:cf:1b:c8:5d:e1:dc:8b:74:8f:6f:67:ff:ac:f1:7c:
15:b4:d1:11:60:c0:1a:c7:13:f6:52:fc:63:05:52:d8:87:7b:
a9:c7:33:15:9e:54:a5:d6:99:98:88:4b:9b:3a:a4:1c:cc:b5:
df:bc:33:ff:7c:59:db:1e:be:1d:41:f3:25:6d:85:f5:2d:93:
7e:2a:bb:23:ec:17:a0:77:ca:83:50:aa:e6:e5:51:2f:0e:eb:
46:f8:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:29:34 2026 by rpki-client