Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208915.roa
File: AS208915.roa (raw, json)
Hash identifier: CAaT75oKzRpNodRRHAGus9VZem6TXATrmK6585dCP3I=
Subject key identifier: 0F:15:9D:8F:95:D3:DC:B2:CA:42:F1:91:6D:20:41:25:24:D3:52:28
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2ABBBAA676A7CD1D10E2007A595D8D4C2385C3C6
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208915.roa
Signing time: Wed 22 Jul 2026 09:03:42 +0000
ROA not before: Wed 22 Jul 2026 08:58:42 +0000
ROA not after: Wed 21 Jul 2027 09:03:42 +0000
asID: 208915
IP address blocks: 206.53.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:bb:ba:a6:76:a7:cd:1d:10:e2:00:7a:59:5d:8d:4c:23:85:c3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 22 08:58:42 2026 GMT
Not After : Jul 21 09:03:42 2027 GMT
Subject: CN=0F159D8F95D3DCB2CA42F1916D20412524D35228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:3b:b5:22:e9:4c:cc:08:6d:f3:74:7d:cd:
85:00:02:07:c9:19:d2:a0:8a:58:09:51:36:06:54:
a5:3c:65:b7:4c:c6:c7:22:d6:5d:c6:a5:1d:67:66:
25:6d:29:75:29:34:06:29:b8:1b:db:ed:23:bf:61:
1a:e3:60:64:b0:ba:ad:12:b4:90:d9:2d:19:65:ce:
0d:4f:da:04:95:83:6e:db:77:43:a8:a9:a3:8c:e0:
f8:cb:17:8f:c8:c0:3f:55:24:49:d3:de:68:d4:0f:
23:93:c0:28:4a:3b:e7:1e:e2:17:4b:80:15:2d:31:
b6:b3:1b:66:f5:08:a2:f4:9c:61:f5:a7:f1:60:81:
84:40:23:2e:cd:1b:90:82:b9:ec:74:d1:ff:73:5f:
d6:a5:8f:8f:3a:af:3c:2b:91:26:a9:f9:79:6d:1a:
b7:9f:9e:87:00:9a:e5:d1:bf:02:03:35:c8:60:85:
bc:55:4e:62:19:11:92:60:fc:03:f5:4f:fa:d4:5f:
a9:bc:55:6a:3d:14:4f:8a:9d:76:15:b6:1f:bf:a5:
de:1c:cc:01:a4:eb:eb:e2:30:bd:8a:38:31:55:8d:
9c:8d:44:72:8e:ec:15:37:80:78:a2:3b:e4:66:8a:
ea:2b:ef:49:eb:24:70:50:a8:06:04:06:81:f9:ea:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:15:9D:8F:95:D3:DC:B2:CA:42:F1:91:6D:20:41:25:24:D3:52:28
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.0.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7c:7d:2b:cd:34:25:a5:22:b4:f0:11:55:6c:a2:95:6c:92:
ad:cc:59:3e:c2:33:b9:48:21:fb:17:ac:72:92:ba:c4:71:ac:
5e:b0:a8:c2:85:0a:11:f3:85:e4:17:77:8b:cd:d3:02:24:01:
f1:76:ea:83:94:de:27:14:9b:74:01:f8:41:6f:2e:aa:73:7e:
5d:b3:1d:35:ec:3e:08:6e:3c:f9:d4:2a:95:fd:af:0d:5f:25:
99:18:f0:f5:7f:81:e7:9e:ad:74:4a:52:58:60:f9:a9:c3:c4:
3a:e2:c0:71:6e:3e:ea:33:2c:23:f9:4b:de:2b:d6:49:1b:e7:
07:b0:e3:fb:6a:07:00:bc:f8:12:56:02:a7:e9:25:85:34:84:
4b:ba:43:30:fb:83:62:70:a5:25:b1:e8:cf:4f:c6:8b:44:2c:
e6:8c:9f:03:bc:73:42:c6:97:c0:59:24:94:c9:53:58:1b:a8:
5b:5d:8a:d1:7d:26:60:6e:72:49:e4:68:4b:5d:59:f3:e0:57:
2e:6d:f7:f8:5d:d9:7b:b3:29:13:b0:c4:0c:53:0e:95:c8:10:
84:e0:7d:36:1a:5e:c2:02:6c:37:15:a2:1c:7c:d1:db:12:20:
49:c7:38:9c:ae:8b:1b:33:80:93:21:b7:8e:12:29:3e:fb:7a:
62:65:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:06 2026 by rpki-client