Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS16909.roa
File: AS16909.roa (raw, json)
Hash identifier: WBr9MQ+ZjGWCY7O9FxngqVVAk396nKEL1m6NMdVPY+M=
Subject key identifier: 27:05:74:40:F0:DF:E4:CA:DF:C3:FC:24:79:2B:81:15:1A:09:3B:E7
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 17B71325177C5914438591E3B1A53BB6339A816E
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS16909.roa
Signing time: Mon 18 Aug 2025 19:56:37 +0000
ROA not before: Mon 18 Aug 2025 19:51:37 +0000
ROA not after: Mon 17 Aug 2026 19:56:37 +0000
asID: 16909
IP address blocks: 89.39.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b7:13:25:17:7c:59:14:43:85:91:e3:b1:a5:3b:b6:33:9a:81:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 18 19:51:37 2025 GMT
Not After : Aug 17 19:56:37 2026 GMT
Subject: CN=27057440F0DFE4CADFC3FC24792B81151A093BE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:6c:63:29:89:0c:7b:01:d1:34:82:20:37:
b7:3b:95:e9:ae:be:59:38:51:52:88:5e:1d:89:18:
f7:f8:9e:50:12:8c:70:11:b5:b5:f5:89:1e:ec:20:
ce:a9:c2:a6:2b:6f:57:11:e5:9c:42:61:61:d6:cf:
78:8f:59:02:a5:b3:80:93:6b:89:5c:e1:67:14:5d:
d6:0e:80:25:81:88:73:9f:4c:9f:28:b9:4e:d0:2d:
4f:a6:68:0c:ec:3b:c9:db:db:15:f8:ea:a9:3d:f8:
61:93:01:b2:ea:97:4b:64:fa:70:db:c7:5b:b1:25:
18:2d:7e:20:63:54:9f:84:b3:08:52:23:1b:c7:00:
63:b6:49:8c:7e:a8:02:ad:59:b8:a7:5a:be:20:2a:
81:44:2c:e3:1e:30:2a:a9:7c:bf:0e:61:29:a5:55:
25:29:08:f4:40:24:30:cf:2b:fe:e6:41:b6:fb:65:
e5:d1:21:3d:69:3f:67:fe:08:91:5a:06:95:7b:10:
ff:95:24:8a:06:08:7b:6f:93:ca:a5:e6:01:70:aa:
23:9f:fd:87:ff:fb:c3:ef:8c:e3:74:e1:f8:c5:5a:
a8:c0:b4:08:75:17:0e:27:04:96:5c:25:f3:49:8a:
de:40:fe:43:47:4c:31:f9:7b:7c:a0:06:a9:bf:2d:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:74:40:F0:DF:E4:CA:DF:C3:FC:24:79:2B:81:15:1A:09:3B:E7
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS16909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:1f:42:ba:95:97:e1:0a:dd:89:7c:dc:86:7a:a0:b1:a5:36:
ad:69:3d:63:67:9b:93:c6:5a:4a:53:f9:d2:83:7e:f9:c0:30:
2b:c6:1b:fd:40:4c:0e:93:63:14:ca:f3:1c:d9:d3:bc:3c:93:
c1:6f:36:92:4f:30:e3:db:e4:24:5d:ac:44:93:07:55:05:1c:
e9:26:5b:ad:b0:f2:ff:3d:3a:c4:46:d8:90:09:6e:fe:4a:ce:
dc:37:f6:e0:4a:d9:61:0a:dc:be:e9:13:bf:99:c0:64:25:33:
d3:b9:84:10:ad:90:60:e3:de:59:c4:85:b9:2c:de:26:c7:ec:
4c:29:01:18:ec:2b:ed:78:0c:27:e3:b6:79:ff:1a:99:99:95:
98:5d:fe:c8:22:39:e6:6c:52:a4:8d:17:c6:dd:99:10:d1:e1:
c5:93:0f:26:74:48:36:06:9e:c8:a8:e3:e8:02:ce:85:46:c8:
45:c3:d2:b2:22:2b:05:f4:31:e6:82:3e:bd:b3:a7:71:9a:11:
44:f7:3f:e8:27:c6:ec:46:32:c6:52:6d:ec:53:9a:4a:0f:9f:
c9:fd:8c:7a:89:82:3b:e0:6a:6d:0f:fe:d4:43:f7:de:09:c8:
da:19:93:ea:bf:7a:b2:0d:89:82:a3:cd:fb:e7:39:44:d9:81:
5c:3c:e4:74
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUF7cTJRd8WRRDhZHjsaU7tjOagW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA4MTgxOTUxMzdaFw0yNjA4MTcxOTU2MzdaMDMxMTAvBgNV
BAMTKDI3MDU3NDQwRjBERkU0Q0FERkMzRkMyNDc5MkI4MTE1MUEwOTNCRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOCGxjKYkMewHRNIIgN7c7lemu
vlk4UVKIXh2JGPf4nlASjHARtbX1iR7sIM6pwqYrb1cR5ZxCYWHWz3iPWQKls4CT
a4lc4WcUXdYOgCWBiHOfTJ8ouU7QLU+maAzsO8nb2xX46qk9+GGTAbLql0tk+nDb
x1uxJRgtfiBjVJ+EswhSIxvHAGO2SYx+qAKtWbinWr4gKoFELOMeMCqpfL8OYSml
VSUpCPRAJDDPK/7mQbb7ZeXRIT1pP2f+CJFaBpV7EP+VJIoGCHtvk8ql5gFwqiOf
/Yf/+8PvjON04fjFWqjAtAh1Fw4nBJZcJfNJit5A/kNHTDH5e3ygBqm/LZTfAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUJwV0QPDf5Mrfw/wkeSuBFRoJO+cwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MTY5MDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABZJ9IwDQYJKoZIhvcNAQELBQADggEBALEfQrqVl+EK
3Yl83IZ6oLGlNq1pPWNnm5PGWkpT+dKDfvnAMCvGG/1ATA6TYxTK8xzZ07w8k8Fv
NpJPMOPb5CRdrESTB1UFHOkmW62w8v89OsRG2JAJbv5Kztw39uBK2WEK3L7pE7+Z
wGQlM9O5hBCtkGDj3lnEhbks3ibH7EwpARjsK+14DCfjtnn/GpmZlZhd/sgiOeZs
UqSNF8bdmRDR4cWTDyZ0SDYGnsio4+gCzoVGyEXD0rIiKwX0MeaCPr2zp3GaEUT3
P+gnxuxGMsZSbexTmkoPn8n9jHqJgjvgam0P/tRD994JyNoZk+q/erINiYKjzfvn
OUTZgVw85HQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:24 2025 by rpki-client