Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201392.roa
File: AS201392.roa (raw, json)
Hash identifier: oEIdfbblCcYWTIdsiV8HGM9D4XYlnTHlnDvjACvlWsA=
Subject key identifier: EC:26:02:B1:4C:99:BE:30:D1:49:18:E8:1F:5C:1D:44:A7:C4:82:9A
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 13461C5FEA57CBDE4865BDF277D1BB846BC0E423
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201392.roa
Signing time: Thu 12 Mar 2026 06:28:16 +0000
ROA not before: Thu 12 Mar 2026 06:23:16 +0000
ROA not after: Thu 11 Mar 2027 06:28:16 +0000
asID: 201392
IP address blocks: 206.245.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:46:1c:5f:ea:57:cb:de:48:65:bd:f2:77:d1:bb:84:6b:c0:e4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Mar 12 06:23:16 2026 GMT
Not After : Mar 11 06:28:16 2027 GMT
Subject: CN=EC2602B14C99BE30D14918E81F5C1D44A7C4829A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:65:60:64:35:c2:73:d2:76:f0:6c:a8:41:
0c:ef:09:60:03:83:73:91:2b:fe:d3:95:07:7d:30:
f6:ce:26:9a:c7:dc:1d:bc:be:70:d6:d4:9b:82:c5:
98:ee:87:0a:39:99:3e:b5:34:f1:00:90:4a:63:7e:
f1:b9:4b:91:e4:a0:5f:13:4f:ea:31:7d:71:22:a7:
7f:9c:7a:40:e1:a3:10:97:be:3a:09:84:bc:8b:f5:
91:e8:ac:9d:60:fe:cd:29:ac:86:c0:05:af:a8:da:
2c:b3:41:e2:4a:e3:57:8b:e4:68:eb:8e:c4:d4:cc:
3e:be:22:4c:d4:98:a9:c9:e9:c7:23:31:fb:3a:6f:
11:b1:dd:37:64:f1:11:d7:a5:cc:ab:58:4c:be:ff:
da:1b:b6:37:a1:9f:67:4e:d5:33:eb:be:bc:b4:ce:
93:9d:c9:c0:c4:77:73:21:05:69:b7:dc:d8:e8:cc:
93:eb:0b:50:fc:df:b0:6a:f2:f9:e6:c1:cd:08:0e:
62:e8:a3:b3:2c:3c:e2:49:e8:8a:d0:8d:1e:73:f2:
be:49:45:29:08:3b:29:1b:46:53:bc:4f:1e:f8:f3:
8c:a2:4e:48:9f:52:c7:77:bb:e0:7c:02:d0:06:23:
99:df:11:0e:d9:ab:2b:06:46:e0:93:ab:85:a6:8c:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:02:B1:4C:99:BE:30:D1:49:18:E8:1F:5C:1D:44:A7:C4:82:9A
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.166.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3f:38:21:07:07:89:a5:f3:63:7e:63:a6:b3:45:08:3b:3a:
83:5e:9e:f6:1a:0d:f5:f1:ff:a9:ba:df:48:d8:96:84:d5:b2:
19:d8:c9:1d:93:45:4d:f4:d5:25:3c:5e:af:e6:a5:2c:4f:6c:
3e:e3:c4:70:da:41:a5:62:1b:67:0b:9b:fa:4e:c2:70:a1:4e:
95:53:6f:71:b9:46:bd:ac:e1:73:4b:7e:e0:2f:81:1d:16:45:
13:8a:48:86:6a:5b:7d:32:1e:0e:05:54:00:5d:47:7c:03:6b:
2e:b8:82:78:5f:a1:05:83:f8:67:99:55:ed:b4:26:ad:ca:93:
bf:95:14:f1:a9:3b:53:a2:d9:93:0a:b3:b1:bd:7c:fc:ec:6e:
dc:59:74:3d:ef:43:07:df:ee:2a:ca:40:17:ee:09:b4:ec:54:
7d:af:39:c8:f6:a9:db:08:5a:0f:23:d3:08:79:f3:4e:a4:cd:
28:5e:17:7f:7e:11:5e:d2:64:a4:45:a8:85:1a:0d:2e:e1:19:
f5:df:92:f6:46:8d:61:36:fd:96:01:13:df:8d:e6:14:a2:5b:
88:04:14:e8:38:e8:01:64:1e:af:47:6b:78:f3:7a:a1:90:36:
98:12:fc:cf:7e:4d:be:46:f4:ba:f3:29:0e:9f:01:0d:46:cf:
a9:b8:7d:c2
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUE0YcX+pXy95IZb3yd9G7hGvA5CMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjAzMTIwNjIzMTZaFw0yNzAzMTEwNjI4MTZaMDMxMTAvBgNV
BAMTKEVDMjYwMkIxNEM5OUJFMzBEMTQ5MThFODFGNUMxRDQ0QTdDNDgyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRuGVgZDXCc9J28GyoQQzvCWAD
g3ORK/7TlQd9MPbOJprH3B28vnDW1JuCxZjuhwo5mT61NPEAkEpjfvG5S5HkoF8T
T+oxfXEip3+cekDhoxCXvjoJhLyL9ZHorJ1g/s0prIbABa+o2iyzQeJK41eL5Gjr
jsTUzD6+IkzUmKnJ6ccjMfs6bxGx3Tdk8RHXpcyrWEy+/9obtjehn2dO1TPrvry0
zpOdycDEd3MhBWm33NjozJPrC1D837Bq8vnmwc0IDmLoo7MsPOJJ6IrQjR5z8r5J
RSkIOykbRlO8Tx7484yiTkifUsd3u+B8AtAGI5nfEQ7ZqysGRuCTq4WmjAgPAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU7CYCsUyZvjDRSRjoH1wdRKfEgpowHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjAxMzkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAzvWmMA0GCSqGSIb3DQEBCwUAA4IBAQCGPzghBweJ
pfNjfmOms0UIOzqDXp72Gg318f+put9I2JaE1bIZ2Mkdk0VN9NUlPF6v5qUsT2w+
48Rw2kGlYhtnC5v6TsJwoU6VU29xuUa9rOFzS37gL4EdFkUTikiGalt9Mh4OBVQA
XUd8A2suuIJ4X6EFg/hnmVXttCatypO/lRTxqTtTotmTCrOxvXz87G7cWXQ970MH
3+4qykAX7gm07FR9rznI9qnbCFoPI9MIefNOpM0oXhd/fhFe0mSkRaiFGg0u4Rn1
35L2Ro1hNv2WARPfjeYUoluIBBToOOgBZB6vR2t483qhkDaYEvzPfk2+RvS68ykO
nwENRs+puH3C
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:51 2026 by rpki-client