Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
File: AS16909.roa (raw, json)
Hash identifier: ZYbiZhoNrX/43GJTseS2yiNiQUkoQIX4PEk7x4hyTA8=
Subject key identifier: A8:B8:4C:2B:F6:0F:85:DA:D7:40:69:79:12:94:42:48:F4:64:EA:0D
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 5E32495ADBAB4C44C93A46CA8161CDAAFFB461B4
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
Signing time: Sat 10 May 2025 03:08:23 +0000
ROA not before: Sat 10 May 2025 03:03:23 +0000
ROA not after: Sat 09 May 2026 03:08:23 +0000
asID: 16909
IP address blocks: 2a14:7584:6000::/36 maxlen: 48
2a14:7584:61da::/48 maxlen: 48
2a14:7584:61db::/48 maxlen: 48
2a14:7584:61dd::/48 maxlen: 48
2a14:7584:61de::/48 maxlen: 48
2a14:7584:61df::/48 maxlen: 48
2a14:7584:61e1::/48 maxlen: 48
2a14:7584:61e2::/48 maxlen: 48
2a14:7584:61e3::/48 maxlen: 48
2a14:7584:61e4::/48 maxlen: 48
2a14:7584:61e5::/48 maxlen: 48
2a14:7584:61e6::/48 maxlen: 48
2a14:7584:61e7::/48 maxlen: 48
2a14:7584:61e8::/48 maxlen: 48
2a14:7584:61e9::/48 maxlen: 48
2a14:7584:61ea::/48 maxlen: 48
2a14:7584:61eb::/48 maxlen: 48
2a14:7584:61ec::/48 maxlen: 48
2a14:7584:61f1::/48 maxlen: 48
2a14:7584:61f2::/48 maxlen: 48
2a14:7584:61f3::/48 maxlen: 48
2a14:7584:61f4::/48 maxlen: 48
2a14:7584:61f5::/48 maxlen: 48
2a14:7584:61f6::/48 maxlen: 48
2a14:7584:61f7::/48 maxlen: 48
2a14:7584:61f8::/48 maxlen: 48
2a14:7584:61f9::/48 maxlen: 48
2a14:7584:61fa::/48 maxlen: 48
2a14:7584:61fb::/48 maxlen: 48
2a14:7584:61fc::/48 maxlen: 48
2a14:7584:61fd::/48 maxlen: 48
2a14:7584:61fe::/48 maxlen: 48
2a14:7584:61ff::/48 maxlen: 48
2a14:7584:6201::/48 maxlen: 48
2a14:7584:6202::/48 maxlen: 48
2a14:7584:6203::/48 maxlen: 48
2a14:7584:6207::/48 maxlen: 48
2a14:7584:6208::/48 maxlen: 48
2a14:7584:6209::/48 maxlen: 48
2a14:7584:620a::/48 maxlen: 48
2a14:7584:620b::/48 maxlen: 48
2a14:7584:620c::/48 maxlen: 48
2a14:7584:620d::/48 maxlen: 48
2a14:7584:620e::/48 maxlen: 48
2a14:7584:620f::/48 maxlen: 48
2a14:7584:6211::/48 maxlen: 48
2a14:7584:6212::/48 maxlen: 48
2a14:7584:6213::/48 maxlen: 48
2a14:7584:6214::/48 maxlen: 48
2a14:7584:6215::/48 maxlen: 48
2a14:7584:6216::/48 maxlen: 48
2a14:7584:6217::/48 maxlen: 48
2a14:7584:621a::/48 maxlen: 48
2a14:7584:621c::/48 maxlen: 48
2a14:7584:621d::/48 maxlen: 48
2a14:7584:621e::/48 maxlen: 48
2a14:7584:621f::/48 maxlen: 48
2a14:7584:6221::/48 maxlen: 48
2a14:7584:6222::/48 maxlen: 48
2a14:7584:6223::/48 maxlen: 48
2a14:7584:6224::/48 maxlen: 48
2a14:7584:6225::/48 maxlen: 48
2a14:7584:6226::/48 maxlen: 48
2a14:7584:6227::/48 maxlen: 48
2a14:7584:6228::/48 maxlen: 48
2a14:7584:6229::/48 maxlen: 48
2a14:7584:622a::/48 maxlen: 48
2a14:7584:622b::/48 maxlen: 48
2a14:7584:622c::/48 maxlen: 48
2a14:7584:6256::/48 maxlen: 48
2a14:7584:6257::/48 maxlen: 48
2a14:7584:625a::/48 maxlen: 48
2a14:7584:625b::/48 maxlen: 48
2a14:7584:625c::/48 maxlen: 48
2a14:7584:625d::/48 maxlen: 48
2a14:7584:625e::/48 maxlen: 48
2a14:7584:625f::/48 maxlen: 48
2a14:7584:6261::/48 maxlen: 48
2a14:7584:6262::/48 maxlen: 48
2a14:7584:6263::/48 maxlen: 48
2a14:7584:6264::/48 maxlen: 48
2a14:7584:6265::/48 maxlen: 48
2a14:7584:6266::/48 maxlen: 48
2a14:7584:6267::/48 maxlen: 48
2a14:7584:6268::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:32:49:5a:db:ab:4c:44:c9:3a:46:ca:81:61:cd:aa:ff:b4:61:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 10 03:03:23 2025 GMT
Not After : May 9 03:08:23 2026 GMT
Subject: CN=A8B84C2BF60F85DAD740697912944248F464EA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:0b:53:06:59:78:92:2b:c1:04:05:9b:37:
3b:72:82:0e:13:ad:1d:3e:af:21:5d:d8:fc:00:be:
0c:b9:ec:20:aa:6c:8f:0b:60:ab:52:d0:18:d7:36:
0e:2c:e5:2c:62:d4:05:17:8e:50:5a:b3:06:c2:1b:
f8:a5:d8:49:d8:47:83:d1:8e:1c:b7:38:c1:63:10:
b3:47:d7:b1:5c:6e:27:af:ff:78:0d:9f:47:f7:65:
23:b9:c7:48:a7:35:b7:72:40:9e:aa:42:24:f6:9e:
97:b7:fc:23:c2:84:74:38:ad:72:67:aa:23:18:9b:
ed:da:28:de:ba:7c:2d:24:11:cc:14:de:6f:fb:4a:
e2:da:e4:d8:81:f7:63:fe:ae:b0:fb:1e:e8:33:35:
e9:cb:c1:ce:c9:74:73:ee:6e:db:eb:b6:43:a1:3d:
16:60:c4:62:56:9a:5b:af:80:18:67:bd:68:51:20:
15:7e:0a:c4:bb:10:3e:8e:c1:9e:49:f1:5a:f8:c9:
f0:53:59:29:64:a3:c4:f5:5a:0f:5e:6d:f1:df:18:
1a:9a:4f:4d:5b:29:6f:6f:4e:7e:4e:36:9f:bb:a3:
05:80:ad:df:ee:09:54:6a:f2:e3:66:1d:23:1d:7e:
da:a9:0b:a2:ba:2c:d3:4b:8a:2b:c5:f0:eb:6f:d1:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:4C:2B:F6:0F:85:DA:D7:40:69:79:12:94:42:48:F4:64:EA:0D
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS16909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6000::/36
Signature Algorithm: sha256WithRSAEncryption
a6:62:9c:8e:fe:a9:f9:c4:92:02:14:1e:0e:fe:03:16:6a:39:
0c:c5:1b:66:39:8f:27:a1:1f:a6:8a:1f:6f:55:1b:a7:16:18:
48:cc:37:75:e6:e0:40:0f:d8:85:a7:db:af:cd:8a:19:e4:3a:
1b:c1:f7:c9:08:18:dd:57:bd:80:7b:68:39:68:93:a8:98:9e:
30:99:91:14:82:2c:ab:62:d9:35:e6:72:b6:ca:66:cb:c0:fb:
c5:2d:e5:6c:e3:ff:c2:fa:5a:8d:bb:7c:83:38:d6:90:a3:cf:
9b:9d:23:88:62:c3:d6:57:6b:3c:fb:6d:cb:5b:1f:c8:8d:ea:
89:73:f5:71:c5:7c:09:61:88:a8:94:04:d1:a0:0c:a5:88:36:
d3:64:6f:fa:af:5e:08:36:da:7b:89:65:e6:4c:db:38:84:b8:
f1:6f:fc:11:3a:db:41:f0:84:23:be:55:98:9e:48:01:4e:c6:
f4:6a:da:e5:d4:82:37:b3:7f:89:3a:1d:3d:a2:e3:11:7f:f0:
19:8b:d8:3b:7c:dc:53:f1:f1:ca:cd:a6:8e:51:09:16:9e:0a:
75:7a:43:df:a2:cb:05:48:41:be:f0:5b:82:d0:03:8a:a2:43:
fc:74:91:73:c9:7f:9e:b0:43:c4:47:5e:5b:6d:1b:18:e9:bc:
c0:a5:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:21:01 2025 by rpki-client