Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
File: AS16909.roa (raw, json)
Hash identifier: d5nqsB1jhovAy3qoVb9FMNWyw+l+C3yQebvqqrey64A=
Subject key identifier: 3D:BA:F3:B3:56:14:A2:84:50:14:F3:BC:7B:0C:F9:44:30:41:20:E8
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 0EAA15AA5699CDF016935C6E0084CCD8D618FB2A
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
Signing time: Sun 27 Apr 2025 13:06:57 +0000
ROA not before: Sun 27 Apr 2025 13:01:57 +0000
ROA not after: Sun 26 Apr 2026 13:06:57 +0000
asID: 16909
IP address blocks: 2a14:7584:6000::/36 maxlen: 48
2a14:7584:609c::/48 maxlen: 48
2a14:7584:6155::/48 maxlen: 48
2a14:7584:6156::/48 maxlen: 48
2a14:7584:6157::/48 maxlen: 48
2a14:7584:6161::/48 maxlen: 48
2a14:7584:6162::/48 maxlen: 48
2a14:7584:616b::/48 maxlen: 48
2a14:7584:616c::/48 maxlen: 48
2a14:7584:6177::/48 maxlen: 48
2a14:7584:6178::/48 maxlen: 48
2a14:7584:6179::/48 maxlen: 48
2a14:7584:617a::/48 maxlen: 48
2a14:7584:617b::/48 maxlen: 48
2a14:7584:617c::/48 maxlen: 48
2a14:7584:617d::/48 maxlen: 48
2a14:7584:617e::/48 maxlen: 48
2a14:7584:617f::/48 maxlen: 48
2a14:7584:6181::/48 maxlen: 48
2a14:7584:6182::/48 maxlen: 48
2a14:7584:6183::/48 maxlen: 48
2a14:7584:6184::/48 maxlen: 48
2a14:7584:6185::/48 maxlen: 48
2a14:7584:6186::/48 maxlen: 48
2a14:7584:6187::/48 maxlen: 48
2a14:7584:6188::/48 maxlen: 48
2a14:7584:6189::/48 maxlen: 48
2a14:7584:618a::/48 maxlen: 48
2a14:7584:618b::/48 maxlen: 48
2a14:7584:618c::/48 maxlen: 48
2a14:7584:618d::/48 maxlen: 48
2a14:7584:618e::/48 maxlen: 48
2a14:7584:618f::/48 maxlen: 48
2a14:7584:6191::/48 maxlen: 48
2a14:7584:6192::/48 maxlen: 48
2a14:7584:6193::/48 maxlen: 48
2a14:7584:6194::/48 maxlen: 48
2a14:7584:6195::/48 maxlen: 48
2a14:7584:6196::/48 maxlen: 48
2a14:7584:6197::/48 maxlen: 48
2a14:7584:6198::/48 maxlen: 48
2a14:7584:6199::/48 maxlen: 48
2a14:7584:619a::/48 maxlen: 48
2a14:7584:619b::/48 maxlen: 48
2a14:7584:619c::/48 maxlen: 48
2a14:7584:619d::/48 maxlen: 48
2a14:7584:619e::/48 maxlen: 48
2a14:7584:619f::/48 maxlen: 48
2a14:7584:61a1::/48 maxlen: 48
2a14:7584:61a2::/48 maxlen: 48
2a14:7584:61a3::/48 maxlen: 48
2a14:7584:61a4::/48 maxlen: 48
2a14:7584:61a5::/48 maxlen: 48
2a14:7584:61a6::/48 maxlen: 48
2a14:7584:61a7::/48 maxlen: 48
2a14:7584:61a8::/48 maxlen: 48
2a14:7584:61a9::/48 maxlen: 48
2a14:7584:61aa::/48 maxlen: 48
2a14:7584:61ab::/48 maxlen: 48
2a14:7584:61ac::/48 maxlen: 48
2a14:7584:61ad::/48 maxlen: 48
2a14:7584:61ae::/48 maxlen: 48
2a14:7584:61af::/48 maxlen: 48
2a14:7584:61b1::/48 maxlen: 48
2a14:7584:61b2::/48 maxlen: 48
2a14:7584:61b3::/48 maxlen: 48
2a14:7584:61b4::/48 maxlen: 48
2a14:7584:61b5::/48 maxlen: 48
2a14:7584:61b6::/48 maxlen: 48
2a14:7584:61b7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:aa:15:aa:56:99:cd:f0:16:93:5c:6e:00:84:cc:d8:d6:18:fb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Apr 27 13:01:57 2025 GMT
Not After : Apr 26 13:06:57 2026 GMT
Subject: CN=3DBAF3B35614A2845014F3BC7B0CF944304120E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:d0:02:a6:78:94:b0:0a:cd:3d:7a:47:df:
76:66:8e:81:8d:03:13:c7:62:dc:6d:9f:f9:0e:33:
db:ad:4e:bc:fe:ca:df:aa:18:78:92:a3:db:e3:ab:
f3:54:91:d6:52:f4:33:43:01:7b:44:a5:83:cd:99:
d6:38:f6:0b:c5:c6:81:7b:c8:0b:06:ca:6e:14:1b:
72:c6:6f:dd:d0:9f:5c:f1:d0:32:47:d0:56:f4:b2:
04:aa:fa:7b:04:2c:26:75:0d:9c:d9:3f:4d:5a:79:
3a:31:ec:1c:95:2d:cf:0b:e9:75:f9:d4:bd:58:e7:
80:b8:cd:a0:ca:1a:80:e0:29:0e:5f:61:19:a5:31:
bb:8b:d1:2c:06:d0:2d:8a:fb:5e:62:03:01:80:37:
3e:8d:e3:5e:fd:bf:8d:30:8a:35:79:be:60:1f:49:
e5:cc:43:9c:e0:7d:b1:5a:a5:83:9b:52:eb:c1:ec:
e1:18:a4:02:45:87:6b:09:2e:96:50:3e:a5:1c:2f:
f8:ca:d3:68:48:a7:0b:69:b6:e1:a4:bf:9f:de:b2:
54:19:e6:4b:88:9f:64:3e:85:54:1b:ce:e7:fd:6f:
ed:66:81:73:88:6c:1b:99:34:ae:fc:65:87:ea:ec:
02:40:94:58:bb:14:dc:f5:9f:fe:19:d4:7a:39:e2:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BA:F3:B3:56:14:A2:84:50:14:F3:BC:7B:0C:F9:44:30:41:20:E8
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6000::/36
Signature Algorithm: sha256WithRSAEncryption
81:05:b3:bf:c6:a5:0b:83:16:85:69:59:69:44:88:02:29:d9:
b1:4c:e5:7c:20:0a:4e:e7:8f:75:9a:d5:6c:69:4c:70:97:c6:
bc:97:2a:6a:ff:17:8c:98:08:6a:57:fb:bf:8f:06:49:d0:9d:
3c:fc:09:70:15:6a:b5:7e:b9:37:43:71:b9:c4:31:d7:3d:20:
26:54:9f:08:39:ed:50:2e:f5:a7:8d:2c:da:bd:c6:76:27:44:
6e:15:fb:e5:01:70:d2:3e:e2:1c:76:6b:3a:91:fc:d1:a5:23:
4a:ab:bc:58:68:d2:4c:44:d1:31:25:28:69:24:4b:a6:15:38:
99:aa:60:64:d8:53:dc:81:21:84:82:c3:c2:fc:6c:e2:57:04:
bb:2e:6f:5e:60:75:02:30:17:c1:b6:d2:9d:39:a1:03:a4:0d:
21:ea:88:50:bc:77:66:02:58:ad:9e:14:be:c4:4e:f4:a2:31:
14:9e:80:6c:28:11:ef:19:de:f7:fa:42:3f:e0:02:0e:d9:8c:
fd:79:7f:f4:a3:8a:32:7e:53:6d:95:7b:80:c5:fe:9a:9e:e8:
cf:16:f0:77:68:4a:10:4b:eb:af:78:f5:c2:47:55:eb:f7:d8:
ac:06:3d:d7:2d:5d:ce:3d:db:63:e2:ba:dd:09:1c:f1:34:85:
69:3a:44:5f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUDqoVqlaZzfAWk1xuAITM2NYY+yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA0MjcxMzAxNTdaFw0yNjA0MjYxMzA2NTdaMDMxMTAvBgNV
BAMTKDNEQkFGM0IzNTYxNEEyODQ1MDE0RjNCQzdCMENGOTQ0MzA0MTIwRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5tACpniUsArNPXpH33ZmjoGN
AxPHYtxtn/kOM9utTrz+yt+qGHiSo9vjq/NUkdZS9DNDAXtEpYPNmdY49gvFxoF7
yAsGym4UG3LGb93Qn1zx0DJH0Fb0sgSq+nsELCZ1DZzZP01aeTox7ByVLc8L6XX5
1L1Y54C4zaDKGoDgKQ5fYRmlMbuL0SwG0C2K+15iAwGANz6N4179v40wijV5vmAf
SeXMQ5zgfbFapYObUuvB7OEYpAJFh2sJLpZQPqUcL/jK02hIpwtptuGkv5/eslQZ
5kuIn2Q+hVQbzuf9b+1mgXOIbBuZNK78ZYfq7AJAlFi7FNz1n/4Z1Ho54nzZAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUPbrzs1YUooRQFPO8ewz5RDBBIOgwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtpLXJw
cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEw
ZWE2Njg3LzEvQVMxNjkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoUdYRgMA0GCSqGSIb3DQEBCwUA
A4IBAQCBBbO/xqULgxaFaVlpRIgCKdmxTOV8IApO5491mtVsaUxwl8a8lypq/xeM
mAhqV/u/jwZJ0J08/AlwFWq1frk3Q3G5xDHXPSAmVJ8IOe1QLvWnjSzavcZ2J0Ru
FfvlAXDSPuIcdms6kfzRpSNKq7xYaNJMRNExJShpJEumFTiZqmBk2FPcgSGEgsPC
/GziVwS7Lm9eYHUCMBfBttKdOaEDpA0h6ohQvHdmAlitnhS+xE70ojEUnoBsKBHv
Gd73+kI/4AIO2Yz9eX/0o4oyflNtlXuAxf6anujPFvB3aEoQS+uvePXCR1Xr99is
Bj3XLV3OPdtj4rrdCRzxNIVpOkRf
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:06:07 2025 by rpki-client