Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa
File: 326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa (raw, json)
Hash identifier: 0OrEaTxbZmdTCmDhGHNSAddoccX8S5FG5gGYvhRWK7E=
Subject key identifier: 3B:5F:80:3E:5D:FE:66:16:5A:41:13:FE:C6:65:DE:7D:AA:BF:75:33
Certificate issuer: /CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Certificate serial: 59A7B198FEE591D3476C3846F3DD530F9BB6A88B
Authority key identifier: E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa
Signing time: Thu 12 Jun 2025 15:10:33 +0000
ROA not before: Thu 12 Jun 2025 15:05:33 +0000
ROA not after: Thu 11 Jun 2026 15:10:33 +0000
asID: 49867
IP address blocks: 2a06:41:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a7:b1:98:fe:e5:91:d3:47:6c:38:46:f3:dd:53:0f:9b:b6:a8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Validity
Not Before: Jun 12 15:05:33 2025 GMT
Not After : Jun 11 15:10:33 2026 GMT
Subject: CN=3B5F803E5DFE66165A4113FEC665DE7DAABF7533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:f8:97:0c:b6:91:71:be:2e:0c:02:79:60:
e8:c2:c2:3c:5a:49:66:a2:26:c9:cd:c0:f4:4c:61:
64:ba:9d:e2:12:db:37:85:3b:ab:61:a7:ba:0b:b4:
90:e4:ab:1d:28:ab:b7:3b:9e:e5:ac:65:fe:f2:c7:
60:26:5a:bd:b6:ba:1f:cb:56:78:56:a5:47:c9:b3:
fa:62:24:03:e0:42:d2:d0:03:70:d3:0f:89:99:7b:
ae:fc:f0:17:63:22:9a:fc:cf:7a:5f:e5:df:97:51:
1a:1f:bd:e3:3f:19:43:f1:ca:d2:a5:93:86:a4:5c:
68:d7:51:78:a0:30:87:a4:29:fb:15:2e:df:58:5e:
f1:73:00:3a:19:24:6a:32:34:1b:da:fb:9d:d3:24:
b1:47:59:96:fe:c7:16:73:1e:7d:3f:c4:66:a1:11:
9a:58:f0:93:cb:bb:5a:7b:77:ff:b1:a8:6e:ab:b2:
1a:2f:31:75:98:60:bb:b8:33:97:f6:1b:c8:68:76:
d7:a5:c9:a4:0b:c2:e9:f4:00:18:51:54:37:db:d9:
a9:3f:c9:0d:ca:cc:8e:54:f7:5e:7d:82:51:22:ca:
8d:ea:8b:59:e0:43:c7:25:20:78:be:5b:f6:de:cc:
7c:d5:1b:e1:03:b5:c0:05:d6:b8:92:e8:36:4c:12:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:80:3E:5D:FE:66:16:5A:41:13:FE:C6:65:DE:7D:AA:BF:75:33
X509v3 Authority Key Identifier:
keyid:E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:41:c000::/40
Signature Algorithm: sha256WithRSAEncryption
8a:a2:03:a9:61:d8:b3:71:2c:bc:77:6a:bb:4d:0f:2c:48:e8:
43:6a:d3:f5:ac:33:56:78:1a:fd:18:f9:28:5f:ea:3c:07:60:
6e:d8:91:99:17:60:88:4c:01:29:52:9e:a9:a1:d7:18:1f:c3:
2d:ae:07:4f:3a:fd:50:a6:1e:90:cd:6e:86:50:82:01:77:91:
86:8c:5c:81:45:72:13:7b:80:c8:03:b9:48:92:28:cf:5a:be:
14:9d:f7:d4:65:c1:23:03:58:74:8c:2a:79:89:be:0e:37:c1:
74:20:2e:29:13:80:9c:ac:84:5d:5c:9d:20:0d:62:7e:f3:23:
33:92:dd:f8:c1:3e:01:25:b7:56:4f:94:f0:09:bf:35:6b:3e:
22:90:ff:b4:b4:22:30:df:20:5a:2c:d0:ee:ec:22:20:0c:18:
15:28:fd:92:00:0a:e6:12:fa:be:e9:d7:62:14:6d:b7:b3:4e:
cc:b0:e4:b6:4f:93:45:e4:c6:8d:ed:df:3a:1e:55:f6:1d:fc:
2a:26:b5:06:b9:39:a4:7c:e1:c6:80:30:6d:fb:c3:dd:98:67:
be:01:1b:fa:97:79:92:1a:be:4b:28:fe:a3:8d:7d:69:c3:5a:
0a:b2:85:86:33:f9:ee:6a:fb:0f:12:a3:be:53:d1:52:ac:ca:
1c:1e:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:56 2025 by rpki-client