Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS64522.roa
File: AS64522.roa (raw, json)
Hash identifier: 1q6CFJMd6cDBAh9dSy8AepePhE3QoGmRj6Oa3b9zczw=
Subject key identifier: 67:F5:09:13:82:F2:98:4F:38:9D:F2:7D:4F:2F:7A:B6:C9:24:88:27
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6CEC40D9FBF3F814D079D08FFEBFC11A9F947CFD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS64522.roa
Signing time: Thu 16 Jul 2026 19:58:56 +0000
ROA not before: Thu 16 Jul 2026 19:53:56 +0000
ROA not after: Thu 15 Jul 2027 19:58:56 +0000
asID: 64522
IP address blocks: 2a06:1287::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ec:40:d9:fb:f3:f8:14:d0:79:d0:8f:fe:bf:c1:1a:9f:94:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 16 19:53:56 2026 GMT
Not After : Jul 15 19:58:56 2027 GMT
Subject: CN=67F5091382F2984F389DF27D4F2F7AB6C9248827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:38:6b:14:0f:b7:f7:01:f2:7a:22:80:a6:
d1:d8:d1:e9:a0:fa:81:f3:81:21:53:5a:3c:07:c3:
be:71:23:6f:67:75:f5:15:8f:d9:e5:07:35:52:75:
4b:ba:c4:dd:f3:97:bb:c4:94:a7:be:65:09:84:0f:
ae:b1:07:2c:cf:c6:cd:9b:a1:ce:dc:f9:ae:3e:b6:
2b:ca:ca:c2:af:56:c4:a1:3a:ee:3c:cd:14:2e:69:
b7:0b:10:26:3f:e1:fa:fe:a8:e4:bd:71:a9:26:d9:
36:8d:27:38:9f:c6:f6:69:be:db:74:f9:fe:c6:4d:
48:a2:ca:20:59:67:19:89:99:34:ae:24:b3:0e:b7:
c9:72:a8:86:f9:7b:cb:ff:4d:bf:4b:53:c0:45:30:
4b:59:c6:f5:ce:e8:6b:37:68:b4:ea:76:d0:3b:f0:
21:8c:30:9d:63:d5:fe:ec:78:6d:f8:7d:17:da:72:
a1:68:fd:79:6b:8a:9c:7a:b7:01:09:fd:94:7b:6e:
90:18:de:58:96:ee:c6:3c:6a:80:2d:aa:ec:cb:af:
ab:9a:85:bc:87:39:3a:b5:cf:85:54:7a:56:81:f4:
d2:1b:37:09:15:cb:2b:da:2a:02:e1:fe:1b:6c:cd:
5b:9d:31:32:8a:c9:bb:27:00:89:c3:6e:0d:88:97:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:09:13:82:F2:98:4F:38:9D:F2:7D:4F:2F:7A:B6:C9:24:88:27
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS64522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1287::/32
Signature Algorithm: sha256WithRSAEncryption
70:2e:04:b1:b7:f2:36:26:36:a9:0f:ac:0e:7e:34:fe:22:41:
34:7d:0c:dc:3b:6a:d9:4d:78:48:bf:23:8f:fb:a2:f3:2b:27:
95:c9:ae:f6:28:41:94:7a:ae:fd:d2:05:16:bb:b6:6e:57:b7:
37:af:30:fe:64:f4:48:36:42:80:79:0c:12:52:dc:6b:ae:86:
27:51:66:1d:ce:15:37:e7:32:61:80:fe:60:6b:94:63:47:5d:
91:b3:dd:48:79:32:5a:37:c8:aa:a5:f9:b7:34:90:f4:63:36:
ff:fe:50:a8:8d:82:1c:17:43:38:f8:0b:d2:6e:03:09:f7:6c:
53:6d:d9:37:f5:94:f5:37:80:38:18:5a:e3:71:5b:1f:b1:cc:
31:a9:11:af:a9:52:e9:da:f1:b6:af:be:cd:fc:c9:f4:15:4f:
7f:1c:76:af:4d:39:a1:40:f8:67:f1:23:67:ce:99:8e:2f:0e:
3f:56:49:3e:d4:00:f1:c1:01:9a:dc:7d:d2:71:71:bd:ff:6e:
75:ce:4e:15:20:ec:94:d9:14:33:54:39:6e:0d:2f:67:2e:4c:
24:1f:55:a4:27:4c:80:5b:86:b7:a7:36:83:ac:4d:33:64:9c:
fa:a2:c0:70:f4:4c:42:5b:2f:f3:76:c8:57:32:c4:ae:32:7d:
c0:6d:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:51:21 2026 by rpki-client