Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393368.roa
File: AS393368.roa (raw, json)
Hash identifier: dfyglTi2God0QanFqAIdMcigKHMXyyfsif2AaXS2I6E=
Subject key identifier: 2A:A2:36:2D:2F:44:FC:11:13:67:87:78:2A:C6:D5:34:D8:AF:76:23
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 25C6F56660E1E1FBA387655B93E6DAE739272F92
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393368.roa
Signing time: Tue 21 Jul 2026 22:33:28 +0000
ROA not before: Tue 21 Jul 2026 22:28:28 +0000
ROA not after: Tue 20 Jul 2027 22:33:28 +0000
asID: 393368
IP address blocks: 143.246.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c6:f5:66:60:e1:e1:fb:a3:87:65:5b:93:e6:da:e7:39:27:2f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 21 22:28:28 2026 GMT
Not After : Jul 20 22:33:28 2027 GMT
Subject: CN=2AA2362D2F44FC11136787782AC6D534D8AF7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:07:a4:45:4d:0c:75:fc:d5:6c:05:b1:89:
12:66:97:d6:17:c0:4f:ef:55:1f:dd:b8:7c:39:20:
9e:f8:4d:4c:ff:c5:8d:7f:72:07:59:7f:c1:8a:c3:
0c:04:07:a1:ac:0c:e0:3a:79:4c:a4:5f:ae:b9:9b:
ec:10:2d:a3:de:b3:c6:fd:25:a6:8f:47:73:23:60:
e3:bb:c0:d9:a5:2f:57:08:ee:48:f8:31:10:5f:0e:
f2:d1:af:4e:12:7c:01:9a:66:38:db:f0:7b:50:01:
04:6e:14:ec:10:4d:3a:01:29:33:1c:ab:d5:63:f3:
c8:50:01:6a:8c:45:fc:0f:e8:72:24:f0:73:61:83:
7d:38:9e:66:44:91:c3:0b:52:0a:da:a4:0e:1e:59:
b1:6b:ed:5e:7e:c1:b6:96:a8:c8:84:cd:4f:40:8b:
c7:da:c7:a6:35:df:01:f2:35:f9:56:b8:df:03:e3:
5c:2b:11:c8:74:92:e9:d9:54:d2:89:9d:d5:1d:2f:
1b:8a:f8:df:01:1e:51:88:30:36:d9:ec:60:92:a8:
d3:3c:5c:87:8b:60:ee:fa:cc:1b:8f:7a:7f:ee:2b:
00:01:9c:cb:c9:53:a7:41:47:95:2a:f9:67:b6:77:
ac:bc:c2:a4:14:c0:ec:b5:2e:d5:92:1d:56:f0:17:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A2:36:2D:2F:44:FC:11:13:67:87:78:2A:C6:D5:34:D8:AF:76:23
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393368.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.180.0/23
Signature Algorithm: sha256WithRSAEncryption
74:5d:1c:32:94:4d:29:ba:ba:0e:ed:00:c8:e1:c2:79:18:77:
06:c6:ea:21:f6:95:99:2c:69:3c:d6:51:38:f9:93:ae:98:bf:
5c:61:37:1b:7c:2f:08:9e:e4:9b:4b:09:9a:b9:e5:77:47:5a:
b4:04:79:70:f2:f3:a3:85:28:49:60:15:62:3d:67:d1:ab:ae:
24:12:ae:2f:75:e3:e2:6b:f9:51:e8:fa:3f:ce:69:61:d4:7f:
c5:05:31:f2:9b:1f:6c:f7:66:04:f5:5e:24:21:13:39:f3:81:
4e:bc:1d:b7:d5:7e:f0:ef:59:97:64:55:94:f8:20:0d:b6:80:
f1:88:ab:d7:b0:30:85:bb:97:5e:a0:ba:8e:80:a6:4e:ef:81:
98:5b:88:c0:28:29:62:4c:de:88:a3:06:e5:85:a4:53:b5:d2:
d9:5d:63:8a:82:c3:70:e3:10:7b:83:80:7f:ec:41:41:3a:1e:
be:ee:0d:9c:a8:8f:1e:ae:ac:4d:8b:10:9c:c2:fc:d8:97:2c:
ba:50:52:ff:f7:30:36:17:84:f9:69:bd:fb:67:6b:53:8f:8c:
ca:77:54:83:a5:79:8f:d7:04:ce:82:f5:ec:0b:1e:ed:54:19:
cb:da:82:da:e4:d7:5b:10:32:fb:ac:b5:6c:98:a9:70:60:76:
e7:e6:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:06 2026 by rpki-client