Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48700.roa
File: AS48700.roa (raw, json)
Hash identifier: I7WRPeBFp03/pIEEhaAB0pPIbKcsSN3uE8g8QmKFKLE=
Subject key identifier: C4:68:82:6B:BE:62:55:C4:D6:A2:A1:F8:B1:E2:ED:D5:6B:C3:B5:50
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 69081DBAFE545B0166C78A7FD313891C32FE810C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48700.roa
Signing time: Wed 22 Jul 2026 09:08:18 +0000
ROA not before: Wed 22 Jul 2026 09:03:18 +0000
ROA not after: Wed 21 Jul 2027 09:08:18 +0000
asID: 48700
IP address blocks: 103.68.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:08:1d:ba:fe:54:5b:01:66:c7:8a:7f:d3:13:89:1c:32:fe:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 22 09:03:18 2026 GMT
Not After : Jul 21 09:08:18 2027 GMT
Subject: CN=C468826BBE6255C4D6A2A1F8B1E2EDD56BC3B550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:2d:64:04:c9:0b:f2:e3:15:40:6e:79:b6:
da:ce:18:74:8d:fa:a8:0b:dd:44:a5:51:67:90:43:
a9:c7:ea:9e:b7:a1:2a:e4:65:fa:9c:57:2e:63:18:
05:49:57:6d:bc:c8:75:e7:c9:77:05:8f:ea:de:ef:
f5:08:02:1e:72:ca:a7:cd:f9:6f:b6:33:7a:b0:cd:
bb:63:2f:45:87:14:59:f3:1a:4c:36:62:18:01:b0:
e4:de:15:7b:7a:a7:9f:22:c2:49:a0:e9:33:9c:e5:
72:10:9d:fd:39:34:7e:28:95:b5:12:cc:48:1d:65:
e1:1e:c1:a4:09:88:92:95:ca:5c:a4:96:97:a4:20:
0d:b3:ae:ec:58:2d:31:a5:76:8d:e8:17:59:27:7b:
05:ce:a2:e3:e9:d0:81:4a:56:47:15:4f:3b:88:86:
c4:ae:a8:79:1a:74:82:89:39:b7:51:58:11:46:85:
48:cd:2b:41:3d:d2:e7:12:c3:26:de:79:6d:88:a2:
8e:29:2b:fc:45:be:63:7f:b0:c3:ae:ea:a2:3b:7d:
e0:cb:1e:87:cd:3b:75:c6:42:80:0f:71:cc:d4:a8:
cb:98:f0:da:30:15:64:ef:c8:65:41:58:f4:31:de:
c2:5b:58:05:21:0a:4d:a0:e6:73:6b:40:4e:6c:fa:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:82:6B:BE:62:55:C4:D6:A2:A1:F8:B1:E2:ED:D5:6B:C3:B5:50
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.111.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:74:e0:33:00:6a:40:ee:fc:20:a4:1f:6a:09:cf:6c:14:08:
db:cf:8f:fd:9c:a3:2b:f4:56:06:b8:74:9b:80:21:c6:a3:0e:
37:91:91:c5:e9:c7:59:0c:c7:80:28:40:51:70:95:d7:99:2a:
3b:cc:6e:d4:d4:18:8e:f0:b4:c6:e4:3a:11:5e:1b:be:1b:b6:
b7:af:c4:9c:fa:8b:ec:9c:42:b6:dc:29:41:71:ca:aa:50:f4:
85:78:9e:74:00:0d:8b:6b:b9:45:31:b4:c3:b8:3d:7c:a2:91:
6b:71:a5:7d:4e:a9:72:25:48:f4:3d:3a:03:d1:e2:cb:39:85:
fe:3a:3f:23:e1:7a:4a:df:b3:ea:02:59:e6:0e:c5:a7:20:4d:
21:3f:5d:15:9a:c8:fd:7d:08:87:40:8f:0d:b1:04:40:07:4f:
6a:79:e4:e4:a0:ff:ba:c6:78:ba:55:73:c9:05:47:b4:d0:e5:
bd:18:80:25:67:70:d8:ef:8a:77:25:13:64:e2:7f:4c:c2:75:
fc:87:eb:1d:5e:09:55:57:32:4e:04:3e:de:29:0d:25:0f:23:
51:31:e0:ee:57:ee:e7:5f:da:c4:5f:27:c0:8c:87:87:4c:28:
3f:58:98:50:30:89:31:ae:b9:7d:f7:e7:a0:00:a4:f5:99:ca:
bb:f5:51:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:07 2026 by rpki-client