Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: 6cWmUe18SydrtU2uWEKm1V8COJiYRpbcZ3WevwZKl8s=
Subject key identifier: 89:DA:03:74:E7:6A:15:91:FB:1D:E3:E7:D8:28:D6:00:42:5A:47:19
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 483CFE77483E7DCA2D84D021F4363263ACCF4A64
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
Signing time: Thu 14 Aug 2025 23:53:55 +0000
ROA not before: Thu 14 Aug 2025 23:48:55 +0000
ROA not after: Thu 13 Aug 2026 23:53:55 +0000
asID: 58212
IP address blocks: 2a05:dfc7::/32 maxlen: 48
2a06:a007::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3c:fe:77:48:3e:7d:ca:2d:84:d0:21:f4:36:32:63:ac:cf:4a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 14 23:48:55 2025 GMT
Not After : Aug 13 23:53:55 2026 GMT
Subject: CN=89DA0374E76A1591FB1DE3E7D828D600425A4719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:30:ac:ac:09:b0:aa:7d:1c:5f:19:d2:3c:
0c:12:06:0c:cc:87:fc:54:7f:76:2e:b3:41:ad:15:
1c:85:5e:15:51:24:21:5e:ef:88:f7:9a:3a:e3:8a:
06:4a:f5:ec:ba:b6:71:63:12:3b:3d:bd:db:b0:4a:
5a:5e:16:87:c5:e8:c1:b0:d5:c4:73:7d:f1:b6:e2:
25:64:51:2d:3e:ed:f8:6e:6d:87:a2:73:d7:4b:1f:
cc:ae:f6:f9:6a:ba:7c:90:ba:b1:f5:aa:7d:9e:8e:
96:50:6d:08:81:cd:99:a5:4c:79:c5:d0:50:f3:26:
5e:50:9f:a8:39:08:9b:19:e6:69:c3:e9:86:87:e9:
2a:eb:12:23:88:36:66:d4:7a:5a:89:b6:75:f6:ce:
77:d1:23:8d:a6:6e:de:98:5b:3b:91:e1:6b:67:69:
83:83:f6:6c:47:67:b5:f5:6d:7c:c9:7c:fe:f2:81:
5f:a0:37:bf:87:5b:5e:c4:fa:14:80:5f:7e:bf:19:
dc:46:a6:93:f1:63:f0:6e:b2:57:0b:2f:2d:8f:7f:
ac:4e:08:46:bc:6c:5d:07:5c:56:09:11:9c:69:1b:
a0:c3:f0:36:29:85:47:19:01:c2:23:1a:31:2c:9e:
b6:3f:70:4f:04:89:63:0f:88:49:ae:c9:04:75:e7:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DA:03:74:E7:6A:15:91:FB:1D:E3:E7:D8:28:D6:00:42:5A:47:19
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7::/32
2a06:a007::/32
Signature Algorithm: sha256WithRSAEncryption
1f:76:7b:3d:d2:4b:a1:a5:6c:de:b1:3a:9f:e8:53:83:6a:b6:
f5:25:2f:7e:a5:dd:17:f0:7a:98:91:81:e4:bb:30:8d:d8:10:
d6:4a:d7:33:cc:29:90:78:d3:4d:2d:ff:2e:48:f5:70:c0:d3:
cd:59:1a:dd:e6:c2:a9:86:48:a6:31:41:66:eb:dc:2a:ea:ed:
af:f4:b1:a9:a9:3f:36:5e:0d:08:4f:7e:7b:75:35:a7:fc:d8:
87:80:a7:03:04:c6:17:02:28:7b:46:c0:49:cb:63:98:ce:f7:
ac:4d:5e:23:36:90:c1:24:cb:46:58:2e:b7:9a:0f:f3:c5:98:
bb:77:88:0f:80:fa:03:7f:a0:aa:c6:af:bf:7f:59:57:b8:ca:
a2:23:b1:f0:86:2d:09:74:c7:44:1f:98:58:ef:a2:a7:fc:1c:
61:09:6f:6a:bd:08:30:88:d7:88:a8:07:a7:2e:bb:14:7f:ea:
91:29:d9:91:c4:6b:09:0e:29:fa:21:6f:ee:83:52:de:e4:5f:
68:b6:96:fc:6f:84:f9:07:04:db:f2:d6:99:6c:0a:00:03:83:
e7:03:5c:1b:74:2e:52:40:57:32:53:83:b1:28:b2:5e:5c:ce:
63:b2:2e:3f:a2:62:c5:dc:82:9e:bf:18:94:82:1b:96:d9:e5:
d6:40:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:22 2025 by rpki-client