Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58132.roa
File: AS58132.roa (raw, json)
Hash identifier: wuqK5KNEmoMu/UPJ5/JzuMl1hg5Q1cWRjVffIsUXkhQ=
Subject key identifier: E0:F1:CF:15:BD:8B:46:A2:72:A7:43:8D:B1:5D:4A:37:17:11:73:FF
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 162A19F440DF5FA70D27DC5D5518E01B4044B794
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58132.roa
Signing time: Thu 04 Jun 2026 15:58:51 +0000
ROA not before: Thu 04 Jun 2026 15:53:51 +0000
ROA not after: Thu 03 Jun 2027 15:58:51 +0000
asID: 58132
IP address blocks: 2a06:a005:2d9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2a:19:f4:40:df:5f:a7:0d:27:dc:5d:55:18:e0:1b:40:44:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:51 2026 GMT
Not After : Jun 3 15:58:51 2027 GMT
Subject: CN=E0F1CF15BD8B46A272A7438DB15D4A37171173FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:87:b0:45:a1:09:7b:65:13:c3:45:ef:3a:
5f:fd:51:95:ca:db:f4:69:26:68:2b:8e:6b:99:ca:
68:8b:a6:72:f3:78:4c:76:e0:95:20:5e:7d:d0:84:
1f:4e:54:4b:6f:b0:32:06:ff:24:16:0f:5c:c5:95:
9b:67:6f:c5:f8:4c:9d:9b:f3:cd:28:a6:bc:d8:9e:
a1:68:2c:8f:be:74:90:f7:69:8d:42:ac:d2:73:9a:
8d:4d:d7:23:ce:ac:06:0a:1d:97:62:80:bb:ad:3f:
93:5d:11:1d:80:1e:86:90:4c:9a:21:83:8d:d5:dd:
2a:85:28:18:7c:e6:2c:96:70:6d:20:d4:21:5f:e4:
5a:ff:71:95:f2:a9:dd:13:ba:4c:9b:b1:c9:8a:8b:
d5:48:0c:0b:3c:6a:c6:bf:ff:90:12:10:93:30:46:
33:61:38:9f:5b:82:17:ff:4f:e3:49:42:33:ea:d8:
6a:21:64:b4:39:5c:35:02:fe:20:eb:48:a4:63:30:
49:ac:f8:44:c9:50:2b:13:0b:a7:f2:56:3e:af:bc:
25:b3:63:a5:7b:49:68:c1:81:7e:8f:20:f8:6b:2e:
9a:74:6f:ff:76:1f:4c:26:7d:50:d3:c6:eb:6f:c5:
a8:af:df:58:0e:ec:15:7d:03:51:bb:49:b1:f0:0d:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F1:CF:15:BD:8B:46:A2:72:A7:43:8D:B1:5D:4A:37:17:11:73:FF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d9::/48
Signature Algorithm: sha256WithRSAEncryption
11:29:da:18:e5:8a:15:f9:b4:a1:4a:b3:0a:9a:3e:2f:35:b9:
33:b8:35:e3:3d:23:7a:c4:9e:2c:9e:28:c0:b0:13:4a:48:5b:
be:aa:33:3e:a8:6b:aa:a7:22:a5:db:5a:34:02:85:b8:b2:57:
ad:47:4d:81:3e:91:f6:3a:ff:67:97:6d:dd:a0:ed:1b:31:6f:
37:25:6b:43:5a:89:0b:26:91:b5:0b:71:cb:5b:59:0f:df:25:
65:8a:e9:bc:78:f8:85:e1:6a:0c:2e:9b:b9:80:f2:25:5e:d2:
d5:b1:75:85:17:c6:e0:6c:c6:ae:eb:27:65:de:13:9e:da:35:
a9:44:27:8a:88:66:c5:81:3a:16:e2:e0:ed:01:19:da:6c:53:
c4:aa:4c:3f:e4:28:2a:cf:44:5e:43:23:7e:f7:f6:a0:56:a4:
61:d0:e3:3c:63:12:4c:77:49:10:94:5d:0a:ec:49:bb:52:5f:
90:b1:82:0a:f4:50:a3:91:94:fb:75:a6:6c:7d:ee:67:42:07:
7c:6e:a5:79:76:ac:e2:2e:ed:0b:dd:8f:06:02:53:4b:ba:ae:
19:68:84:77:dc:fe:1c:67:b2:14:6d:02:a2:9f:cb:3f:dd:7b:
e6:9a:78:b0:23:89:bb:e3:66:34:c9:ce:97:3f:06:de:2b:94:
99:e6:7d:65
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUFioZ9EDfX6cNJ9xdVRjgG0BEt5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNTFaFw0yNzA2MDMxNTU4NTFaMDMxMTAvBgNV
BAMTKEUwRjFDRjE1QkQ4QjQ2QTI3MkE3NDM4REIxNUQ0QTM3MTcxMTczRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUIewRaEJe2UTw0XvOl/9UZXK
2/RpJmgrjmuZymiLpnLzeEx24JUgXn3QhB9OVEtvsDIG/yQWD1zFlZtnb8X4TJ2b
880oprzYnqFoLI++dJD3aY1CrNJzmo1N1yPOrAYKHZdigLutP5NdER2AHoaQTJoh
g43V3SqFKBh85iyWcG0g1CFf5Fr/cZXyqd0TukybscmKi9VIDAs8asa//5ASEJMw
RjNhOJ9bghf/T+NJQjPq2GohZLQ5XDUC/iDrSKRjMEms+ETJUCsTC6fyVj6vvCWz
Y6V7SWjBgX6PIPhrLpp0b/92H0wmfVDTxutvxaiv31gO7BV9A1G7SbHwDS2rAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU4PHPFb2LRqJyp0ONsV1KNxcRc/8wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NTgxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqBqAFAtkwDQYJKoZIhvcNAQELBQADggEBABEp2hjl
ihX5tKFKswqaPi81uTO4NeM9I3rEniyeKMCwE0pIW76qMz6oa6qnIqXbWjQChbiy
V61HTYE+kfY6/2eXbd2g7Rsxbzcla0NaiQsmkbULcctbWQ/fJWWK6bx4+IXhagwu
m7mA8iVe0tWxdYUXxuBsxq7rJ2XeE57aNalEJ4qIZsWBOhbi4O0BGdpsU8SqTD/k
KCrPRF5DI3739qBWpGHQ4zxjEkx3SRCUXQrsSbtSX5Cxggr0UKORlPt1pmx97mdC
B3xupXl2rOIu7QvdjwYCU0u6rhlohHfc/hxnshRtAqKfyz/de+aaeLAjibvjZjTJ
zpc/Bt4rlJnmfWU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:12 2026 by rpki-client