Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: MbCVC1iFrP32XxiQGSB0ONrxAWLu+pbdXDq/YNrLXww=
Subject key identifier: 66:BB:4A:DF:60:0E:94:0B:86:31:71:D4:69:A5:89:59:3C:EE:72:31
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 392588B66213083BFF466B720A1534F07458D76B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
Signing time: Fri 13 Nov 2026 18:31:37 +0000
ROA not before: Fri 13 Nov 2026 18:26:37 +0000
ROA not after: Fri 12 Nov 2027 18:31:37 +0000
asID: 0
IP address blocks: 2a09:54c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:25:88:b6:62:13:08:3b:ff:46:6b:72:0a:15:34:f0:74:58:d7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 13 18:26:37 2026 GMT
Not After : Nov 12 18:31:37 2027 GMT
Subject: CN=66BB4ADF600E940B863171D469A589593CEE7231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:b1:f5:2d:d2:2d:8b:08:83:20:57:bc:d0:
64:c3:df:a4:79:44:ea:58:a1:bb:ea:13:8f:f1:21:
8c:86:56:37:a7:3f:4a:83:02:f7:35:00:c5:bb:1a:
a3:b6:8b:34:59:8c:12:49:2b:a0:eb:dd:7b:26:d6:
64:8c:ce:ed:e7:19:21:91:e2:0d:3b:75:1f:38:cb:
02:59:c4:03:b0:e6:fb:39:27:15:8c:66:0a:4b:80:
c9:c2:b9:a6:a9:c3:51:00:0f:13:5a:b7:bf:06:d8:
15:1f:c3:f9:73:b9:8c:52:41:00:7b:ef:35:20:ea:
ba:77:05:4d:97:ca:c6:f4:35:99:86:e6:5a:a2:51:
15:1d:c5:34:33:b8:b6:ee:85:1c:ee:96:6c:ef:cf:
30:f7:90:08:cc:17:b4:15:ef:52:f1:1e:9d:87:86:
2b:04:84:40:33:47:b2:6c:73:f4:21:58:18:d1:ec:
0e:26:96:91:38:e2:c5:e8:d3:08:71:c3:f2:c5:54:
10:59:75:58:b0:bd:03:11:54:d5:0d:60:0d:32:3b:
99:3b:1b:cf:97:ce:4a:2e:58:41:5f:da:8c:51:6d:
aa:19:50:8e:96:fc:64:58:c6:b2:af:00:a7:48:4a:
7c:43:af:68:46:ad:41:ad:3a:4f:e0:e7:0b:17:3a:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BB:4A:DF:60:0E:94:0B:86:31:71:D4:69:A5:89:59:3C:EE:72:31
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c4::/32
Signature Algorithm: sha256WithRSAEncryption
50:03:66:a9:0f:a5:af:25:e6:c1:50:94:be:ac:86:52:d4:20:
f8:11:40:0b:b6:ba:06:dd:69:84:b9:04:1e:e5:97:cb:1a:a7:
7a:f0:ce:53:35:94:ee:69:6e:84:88:d6:ec:d8:3e:7a:81:ec:
16:dd:e1:a0:02:6d:e6:ba:d0:64:b3:f9:89:78:c6:c6:e4:8a:
40:99:30:97:92:67:a6:68:d3:73:f3:7e:8f:f0:b4:dc:8c:6a:
27:db:7b:75:0b:49:b7:8a:74:20:66:fe:c8:f1:34:1f:55:ad:
f9:2a:c4:d5:20:3c:d4:e7:a4:fd:1d:33:e3:20:d7:1b:be:57:
52:a5:40:c1:ab:d1:13:c3:81:00:96:5c:a2:4f:fe:eb:50:bf:
32:86:5b:69:74:f0:e7:53:52:2c:f9:c8:49:07:e9:ae:82:dd:
34:80:11:b7:69:c3:3d:fb:7f:9d:6f:65:c9:b6:30:f0:6b:bd:
7c:6c:45:28:32:49:1a:57:e7:de:66:39:57:e2:7a:fe:a0:8a:
4e:df:f5:96:cd:5f:a4:ca:2e:a9:e8:52:2e:a3:86:8e:3a:96:
c7:44:89:45:b4:8b:cd:6d:d5:5d:d2:a1:17:b4:7f:78:e7:6d:
8d:31:7f:76:25:62:1b:cd:13:41:ac:54:7f:54:d8:bf:5b:4c:
bd:81:5b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:04:40 2026 by rpki-client