Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: AJgxXRfbu6QPHZSgeVGV/Z5DIvYOeaktvE3yFw6FI2c=
Subject key identifier: 44:A8:65:FA:CA:8D:C7:FB:C9:3A:F5:37:3E:4E:39:F0:A9:59:16:52
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7BFF79D65E1A860D3BD8CE73832DE9785EEBC88B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63023.roa
Signing time: Fri 18 Sep 2026 09:38:01 +0000
ROA not before: Fri 18 Sep 2026 09:33:01 +0000
ROA not after: Fri 17 Sep 2027 09:38:01 +0000
asID: 63023
IP address blocks: 103.151.41.0/24 maxlen: 24
103.208.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ff:79:d6:5e:1a:86:0d:3b:d8:ce:73:83:2d:e9:78:5e:eb:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 18 09:33:01 2026 GMT
Not After : Sep 17 09:38:01 2027 GMT
Subject: CN=44A865FACA8DC7FBC93AF5373E4E39F0A9591652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:69:9b:44:d1:7a:a5:5a:b2:59:5b:9e:54:
d7:ee:27:dd:cb:7f:eb:9e:1e:d3:af:e3:cf:62:c1:
0c:e7:4d:ec:59:19:5f:4e:2a:85:a2:7e:7f:30:6b:
a5:fb:b3:7b:b1:ad:a9:ad:de:7e:85:0d:2c:93:af:
ff:9a:f2:42:9b:14:89:3b:00:94:bd:01:f3:f9:61:
7b:59:0d:2a:d5:50:62:2a:f9:0c:cc:29:df:36:1b:
6b:80:cb:39:e7:99:45:e3:92:c7:d0:9e:9a:9f:4a:
02:57:3e:3a:28:82:4d:f2:fc:4c:3f:55:a7:06:30:
55:ee:f1:4a:53:6f:df:bb:13:82:41:e2:33:39:60:
0f:25:d9:3a:62:4b:2a:9d:f1:5f:ab:c5:5a:54:1a:
26:2c:f3:41:fa:70:02:13:e4:c4:17:09:18:53:8c:
48:a0:ca:5b:26:02:25:af:99:67:6a:52:df:b6:3e:
3e:3c:4e:f4:77:27:14:12:e7:5b:06:7a:4d:49:2a:
4e:5f:c4:e3:41:a8:87:4e:d8:1c:e1:f7:29:aa:64:
ce:1b:82:39:ee:a4:13:7d:3c:56:d1:47:d3:c4:28:
40:5b:f8:00:0d:64:bb:b7:31:c1:a9:c6:09:35:19:
e4:61:aa:cc:49:a8:e1:92:fc:73:f3:5c:4c:52:c6:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:65:FA:CA:8D:C7:FB:C9:3A:F5:37:3E:4E:39:F0:A9:59:16:52
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.41.0/24
103.208.84.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fc:bd:72:62:8c:cf:fb:a6:86:d2:18:38:61:35:8b:fe:0b:
a6:c9:dc:48:a9:d3:f1:8f:bd:19:5d:ff:f2:04:01:6d:56:1a:
67:e7:a9:f4:db:3a:e5:1a:0e:83:52:38:f8:ba:0b:4c:e5:a5:
3e:a8:af:58:e1:28:30:19:6a:df:ba:7d:c4:f8:70:ae:e8:c5:
84:e3:d2:f4:bf:b6:cc:f4:d5:e9:ad:ef:7f:e5:59:b8:5c:89:
c7:29:fe:48:3f:26:0e:99:a5:4b:c9:86:ab:f4:a3:1b:f1:d7:
6c:c5:26:1c:e1:e4:03:4f:10:d9:11:8b:09:c5:7b:c1:97:39:
29:17:c0:b2:37:73:29:ae:bc:a5:f1:bc:ee:b4:7f:f2:ab:71:
57:76:f6:5d:b1:84:de:6a:86:1d:a9:af:04:4e:0c:68:16:a7:
5c:66:f9:8b:5a:f7:76:6f:4b:82:34:4c:c0:a5:4f:aa:09:f3:
26:bd:3f:73:08:f5:70:04:d2:73:5c:be:48:cb:56:76:42:f7:
99:f9:18:6c:cf:ed:0f:9e:48:c9:e1:2d:6e:ed:84:fb:72:de:
e6:0c:5f:60:ba:d3:bd:b8:4f:cb:79:da:6b:c1:2c:b7:c2:4e:
f8:08:35:f7:5e:cf:ce:48:ff:fd:8d:31:d3:49:cd:20:1a:56:
ed:a9:0c:24
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUe/951l4ahg072M5zgy3peF7ryIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA5MTgwOTMzMDFaFw0yNzA5MTcwOTM4MDFaMDMxMTAvBgNV
BAMTKDQ0QTg2NUZBQ0E4REM3RkJDOTNBRjUzNzNFNEUzOUYwQTk1OTE2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3mmbRNF6pVqyWVueVNfuJ93L
f+ueHtOv489iwQznTexZGV9OKoWifn8wa6X7s3uxramt3n6FDSyTr/+a8kKbFIk7
AJS9AfP5YXtZDSrVUGIq+QzMKd82G2uAyznnmUXjksfQnpqfSgJXPjoogk3y/Ew/
VacGMFXu8UpTb9+7E4JB4jM5YA8l2TpiSyqd8V+rxVpUGiYs80H6cAIT5MQXCRhT
jEigylsmAiWvmWdqUt+2Pj48TvR3JxQS51sGek1JKk5fxONBqIdO2Bzh9ymqZM4b
gjnupBN9PFbRR9PEKEBb+AANZLu3McGpxgk1GeRhqsxJqOGS/HPzXExSxvvLAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQURKhl+sqNx/vJOvU3Pk458KlZFlIwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NjMwMjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcB
Af8EFjAUMBIEAgABMAwDBABnlykDBABn0FQwDQYJKoZIhvcNAQELBQADggEBAGT8
vXJijM/7pobSGDhhNYv+C6bJ3Eip0/GPvRld//IEAW1WGmfnqfTbOuUaDoNSOPi6
C0zlpT6or1jhKDAZat+6fcT4cK7oxYTj0vS/tsz01emt73/lWbhciccp/kg/Jg6Z
pUvJhqv0oxvx12zFJhzh5ANPENkRiwnFe8GXOSkXwLI3cymuvKXxvO60f/KrcVd2
9l2xhN5qhh2prwRODGgWp1xm+Yta93ZvS4I0TMClT6oJ8ya9P3MI9XAE0nNcvkjL
VnZC95n5GGzP7Q+eSMnhLW7thPty3uYMX2C60724T8t52mvBLLfCTvgINfdez85I
//2NMdNJzSAaVu2pDCQ=
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:14:39 2026 by rpki-client