Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS273284.roa
File: AS273284.roa (raw, json)
Hash identifier: 3Wf+mDm2gV4qWgTzGK8eIRDAB7h8RgOMIwcDKw1Io00=
Subject key identifier: D4:68:D8:60:B2:C6:D7:27:F0:13:0C:CC:08:76:83:88:F1:30:71:33
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 514D3557385ADB689E8D136FAF5DAAD107EEEA22
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS273284.roa
Signing time: Thu 19 Jun 2025 20:21:32 +0000
ROA not before: Thu 19 Jun 2025 20:16:32 +0000
ROA not after: Thu 18 Jun 2026 20:21:32 +0000
asID: 273284
IP address blocks: 103.68.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4d:35:57:38:5a:db:68:9e:8d:13:6f:af:5d:aa:d1:07:ee:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jun 19 20:16:32 2025 GMT
Not After : Jun 18 20:21:32 2026 GMT
Subject: CN=D468D860B2C6D727F0130CCC08768388F1307133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:06:3b:01:65:38:d2:4b:fb:b0:8c:dc:37:
85:48:6d:c2:7d:9a:82:e1:67:82:b6:06:7c:c2:ba:
97:09:53:45:9b:b6:29:35:dc:7f:42:01:9f:05:73:
20:22:90:93:9d:1c:f9:08:d7:60:0e:af:f5:23:0e:
e9:7b:45:5e:43:fc:c4:73:9a:e9:84:6c:db:e3:52:
4f:38:2f:7a:f5:3d:19:61:cb:e6:0a:d5:3a:07:8a:
43:94:4f:e4:5e:01:cb:90:eb:87:44:37:67:9f:a7:
61:4b:b7:b2:5b:a5:39:bd:03:b0:8b:ce:e7:44:47:
c5:d2:8b:63:f4:02:d7:9e:72:1f:e3:46:13:1e:41:
62:ec:c4:2a:ad:14:ad:ff:f6:29:cc:6a:89:fd:e7:
0e:8a:7a:7b:4a:cf:81:a3:ec:c2:7e:b1:ab:f1:47:
0f:bd:20:d2:79:1c:65:06:79:c6:e5:3e:0c:8e:e4:
bd:c3:a7:27:00:f7:88:25:b4:36:98:71:18:c9:5b:
d7:b3:ad:d4:86:5a:0d:92:ac:e3:82:b9:c8:e9:db:
61:0d:3f:94:b4:06:09:fd:a5:8e:1e:1d:d9:ad:94:
46:1c:66:34:01:f4:8a:d7:f0:4e:3b:1a:d0:4e:a8:
8a:c9:d3:68:bb:92:4f:51:ee:e8:f7:04:c9:c1:82:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:D8:60:B2:C6:D7:27:F0:13:0C:CC:08:76:83:88:F1:30:71:33
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS273284.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.108.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:79:c0:b6:44:85:c5:da:28:62:0f:92:c4:73:21:48:d4:25:
82:85:6b:7a:52:91:9f:92:2b:74:7c:3f:f2:d0:8e:a4:3f:87:
1b:17:78:2d:6d:c7:e1:b9:7f:d0:88:6d:9f:82:5f:92:3a:9c:
da:e4:ec:10:fd:d7:06:c5:b5:d2:b7:10:53:8f:22:ba:d2:59:
be:5c:ae:22:b1:ca:43:b8:97:7b:06:9b:fe:c1:a0:67:f4:92:
10:f6:3c:af:6c:76:d6:6e:3e:c5:73:e5:0a:25:69:57:c8:dc:
ea:f1:20:8e:0e:6e:e1:ee:19:0e:cf:ba:2a:b5:02:23:11:3b:
04:da:28:a9:1f:a9:2f:f8:e8:d8:f4:52:00:68:4c:2e:8c:c7:
00:88:c6:9b:23:76:05:f4:45:64:b7:e8:67:a2:85:d3:2c:6d:
e9:ff:a1:39:30:23:08:e6:83:c9:b8:08:3a:74:78:fa:54:fa:
b4:fd:ff:d2:f6:82:a1:24:4c:53:e3:ae:e9:6c:2f:c4:e3:5b:
25:06:c6:2e:32:d4:d9:d5:c2:e5:63:65:3e:35:0f:2f:71:f3:
ff:75:e5:4d:a0:db:f4:d8:1a:ef:84:f9:f5:98:a5:3c:5b:25:
53:76:ae:0e:6f:9e:67:1b:76:b6:40:4e:7e:48:ed:1d:fe:78:
86:96:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:59:57 2025 by rpki-client