Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400587.roa
File: AS400587.roa (raw, json)
Hash identifier: NypjhP0IM9ZW79JbGYJvNrF+hGcCYetG0ZMHpzTIrQc=
Subject key identifier: 5A:DB:CA:80:4D:5F:92:BF:42:9B:23:C3:67:C1:25:31:93:A1:1F:42
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 306FA30DE843C2F616E8EB2A09BBE0702C49FE50
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400587.roa
Signing time: Thu 16 Oct 2025 19:02:47 +0000
ROA not before: Thu 16 Oct 2025 18:57:47 +0000
ROA not after: Thu 15 Oct 2026 19:02:47 +0000
asID: 400587
IP address blocks: 85.155.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6f:a3:0d:e8:43:c2:f6:16:e8:eb:2a:09:bb:e0:70:2c:49:fe:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 16 18:57:47 2025 GMT
Not After : Oct 15 19:02:47 2026 GMT
Subject: CN=5ADBCA804D5F92BF429B23C367C1253193A11F42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:e4:41:78:cb:34:37:03:9d:48:bf:bc:38:
34:82:5f:7b:02:2a:a8:ec:49:da:2c:d6:48:15:ea:
be:9c:81:8b:9f:fe:79:21:11:b3:e4:56:bf:c8:5e:
e3:7d:53:a6:b8:c9:c0:32:95:c6:7a:ba:98:a3:b1:
6e:99:24:85:cd:08:e6:42:0f:a5:b0:6d:f0:ac:39:
4c:12:d3:2a:7f:3e:80:2e:08:3b:70:73:60:ea:d9:
e7:6f:27:e4:5b:3f:ed:9c:f3:af:d4:88:ee:b0:f0:
ae:a1:12:35:e3:69:d2:29:91:cc:4b:df:cb:48:25:
a7:34:c1:ca:48:61:8f:85:75:64:ec:75:be:c5:83:
af:d7:a6:65:b4:08:0b:81:43:a7:b7:b8:74:a0:5a:
56:1e:7b:d7:ee:9f:f2:23:b3:07:bb:cd:67:54:93:
14:31:2e:07:02:78:35:3c:24:f0:cd:6e:25:c5:09:
02:27:c4:a6:d0:28:fd:39:da:d0:d7:e6:41:fb:98:
8d:05:22:b3:1e:f8:6b:50:3e:da:41:68:86:0f:eb:
53:14:c8:b0:2a:c5:c6:4f:8b:c4:a0:c2:7f:4a:c0:
d9:79:f6:f3:a0:7c:0b:36:2e:4a:2f:9d:06:1c:f9:
6a:f8:b0:2e:eb:d8:85:8c:2b:63:d9:9c:01:94:b7:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DB:CA:80:4D:5F:92:BF:42:9B:23:C3:67:C1:25:31:93:A1:1F:42
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a6:f9:80:a7:02:32:1b:e5:81:5e:dd:ed:3e:f2:a9:28:72:
37:a2:af:14:ce:2b:e9:f8:cf:14:6f:52:8c:e7:de:b8:bb:d5:
7e:da:89:0a:7f:04:40:a3:20:b9:6b:6d:ea:c1:73:12:f6:a3:
2d:38:ed:55:1b:17:01:d0:9f:9e:e9:6c:94:5c:0c:9d:0b:c6:
cc:3e:c1:96:99:8b:b8:66:3d:4e:64:45:12:bb:3a:4a:44:ad:
a9:74:8f:a6:da:ec:6f:ce:41:f8:3c:fa:76:ef:7e:5d:c1:3a:
74:e1:7e:43:05:62:85:79:9d:78:55:af:3d:2f:c7:1b:79:8d:
dc:4a:c3:f1:6a:b9:35:cc:92:86:59:c3:31:d5:3b:55:b0:be:
19:2c:f8:57:bc:25:b0:79:51:b2:27:db:83:c6:98:c1:27:32:
a8:9c:75:a2:f1:86:ad:64:de:d9:d5:f5:a5:ea:55:7b:22:b8:
b0:82:7d:4d:4d:7a:04:fb:9d:31:ae:23:e4:37:25:bc:5c:55:
3c:a4:8a:2f:a2:ef:53:48:f7:1c:89:02:52:dd:ad:4a:5e:86:
32:1f:27:be:ba:5c:f1:24:40:65:60:12:0a:05:81:cf:b8:6b:
b6:11:b7:aa:fe:ce:49:ec:c6:64:59:e3:71:fa:95:1a:7e:66:
6a:7a:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:35 2025 by rpki-client