Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34343a3a2f33302d3438203d3e2037323537.roa
File: 326130363a34343a3a2f33302d3438203d3e2037323537.roa (raw, json)
Hash identifier: pRL7KUB/quxHNcW8Z/S5oljKFA80VpYWr0yXEUywUmo=
Subject key identifier: A7:54:3B:D9:CF:48:D4:5E:51:F6:D6:D1:95:CB:5B:D6:7D:0B:55:51
Certificate issuer: /CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Certificate serial: 77A3F11213349A3F9564CE69347F3956DE0ACF98
Authority key identifier: E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34343a3a2f33302d3438203d3e2037323537.roa
Signing time: Sun 27 Jul 2025 07:51:46 +0000
ROA not before: Sun 27 Jul 2025 07:46:46 +0000
ROA not after: Sun 26 Jul 2026 07:51:46 +0000
asID: 7257
IP address blocks: 2a06:44::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a3:f1:12:13:34:9a:3f:95:64:ce:69:34:7f:39:56:de:0a:cf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Validity
Not Before: Jul 27 07:46:46 2025 GMT
Not After : Jul 26 07:51:46 2026 GMT
Subject: CN=A7543BD9CF48D45E51F6D6D195CB5BD67D0B5551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:08:96:b6:64:d2:3f:b6:b8:6e:08:8e:4a:
ae:18:81:6e:42:0a:7f:9e:2e:ca:ee:be:bd:1e:da:
de:26:6c:f9:f5:74:49:34:9e:fd:3d:e6:ca:84:28:
f0:a6:7b:1d:8a:c2:ab:77:03:5a:bd:f2:51:2b:d9:
21:53:6f:48:6c:70:15:3a:51:89:f1:f0:fe:e2:cb:
43:83:fd:cf:d1:30:d7:a8:e0:63:07:6a:0a:6e:dd:
cb:4c:aa:e4:03:7e:2e:fd:4c:11:90:6b:4a:d1:c0:
75:e1:b2:77:3f:bf:d3:55:31:dd:89:fa:52:6c:29:
18:76:b5:74:88:bd:d1:47:f2:d2:df:82:7d:c8:dd:
97:b0:90:49:51:eb:b1:e3:ae:53:eb:96:21:32:b4:
67:eb:4d:50:bb:28:d2:b4:53:14:01:74:12:d5:ac:
fb:56:47:41:03:26:69:22:d1:cc:0d:31:7f:63:d3:
67:98:b4:88:5c:78:7f:95:a4:b0:ad:2b:49:c5:83:
58:73:f6:15:b3:c9:bc:94:47:c4:70:ee:0b:d0:f8:
7a:44:8f:48:7c:ab:75:a3:98:76:e3:64:7d:fe:af:
0c:fe:27:a2:a0:5f:bf:45:5d:b0:67:2b:aa:49:40:
a3:fa:a7:c9:28:15:f2:92:ea:44:3c:28:af:98:c2:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:3B:D9:CF:48:D4:5E:51:F6:D6:D1:95:CB:5B:D6:7D:0B:55:51
X509v3 Authority Key Identifier:
keyid:E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/326130363a34343a3a2f33302d3438203d3e2037323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:44::/30
Signature Algorithm: sha256WithRSAEncryption
08:27:cf:e9:2b:66:cf:34:55:0f:0d:e7:0f:2d:df:06:1a:80:
3a:cd:e7:31:62:27:8f:51:7a:51:79:cb:30:f5:35:90:5d:96:
a4:6a:bf:4b:23:cf:b2:db:6e:14:31:aa:04:42:0b:18:00:15:
bb:ba:54:ba:04:45:39:fa:91:21:8f:49:b2:37:98:b0:38:3c:
a0:a3:0d:7d:73:39:44:74:d1:30:6b:e4:0d:fb:22:a6:f8:35:
77:82:89:cd:4e:d0:31:a5:f6:a0:b8:ab:cb:52:46:3b:57:9e:
1e:48:98:b1:78:70:8f:ed:cd:7a:f4:63:1d:4a:38:cf:7d:b4:
68:b5:c8:c5:73:bb:bb:5f:dc:60:d8:bc:13:26:91:ba:04:dc:
bd:0f:11:38:53:41:61:b7:2e:e8:20:5c:ef:20:96:3a:42:ad:
6d:a4:b8:ef:84:d4:ea:36:f9:51:73:5e:ca:5a:78:0b:f3:32:
6e:ff:58:32:a8:06:fa:83:88:13:62:92:09:72:43:94:f0:ba:
15:54:83:42:2a:ad:78:85:0b:6f:70:ff:85:81:6a:b4:e2:69:
9c:b3:59:45:be:e3:9b:84:38:6a:24:b3:4b:31:1b:d9:7a:54:
1c:aa:7e:70:7c:6a:d0:cb:1b:20:41:a6:ac:52:1e:62:1f:0e:
6f:31:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:35 2025 by rpki-client