Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39312e302f32342d3234203d3e203336323336.roa
File: 3137362e35382e39312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: jJZ6GFJjrSiKNSIIJUj8vIV65NJwmGzGIXAr6KiSrHs=
Subject key identifier: 68:E3:83:48:B5:39:F6:F1:B8:95:90:04:15:89:2A:94:3A:D5:C6:D6
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 11EA2C96FAD7CA8AECDB1D885E83A9A31E7022C0
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39312e302f32342d3234203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 23:14:00 +0000
ROA not before: Mon 04 Aug 2025 23:09:00 +0000
ROA not after: Mon 03 Aug 2026 23:14:00 +0000
asID: 36236
IP address blocks: 176.58.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ea:2c:96:fa:d7:ca:8a:ec:db:1d:88:5e:83:a9:a3:1e:70:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 23:09:00 2025 GMT
Not After : Aug 3 23:14:00 2026 GMT
Subject: CN=68E38348B539F6F1B895900415892A943AD5C6D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:a3:30:45:0f:ec:e7:0e:6a:61:1e:60:72:
f5:ec:1f:69:cf:7e:18:1e:41:77:25:27:05:c4:06:
da:46:68:e1:23:f0:1c:c6:27:b2:b5:07:16:e5:7f:
be:71:ef:88:5d:6a:fc:42:ee:b8:85:a5:83:7f:6a:
02:52:e1:ce:e6:45:71:45:f4:be:d8:51:b5:1f:40:
b5:a5:5e:b4:3b:80:08:81:6f:57:2b:f6:43:01:5f:
a9:17:f5:5e:3a:91:49:a4:8b:ba:61:3d:e3:3a:58:
68:5d:a1:8a:07:5a:ee:66:e7:49:96:d5:56:25:f3:
8e:5e:0a:48:2a:de:0a:90:ca:8a:10:5b:41:c4:f3:
89:89:97:1a:ab:9f:c2:db:9b:8c:b9:a2:81:e9:1f:
02:61:77:4e:19:dc:ac:58:7d:0f:15:d2:65:b4:ea:
ed:b9:f0:36:65:99:f7:12:4a:bf:6b:4f:ff:c8:4f:
8e:5e:32:8d:f6:2b:17:76:de:86:37:86:34:a9:b6:
b2:16:37:4e:7a:3b:6b:8e:bd:60:b1:7a:65:aa:37:
53:05:8a:d4:04:c0:83:7d:85:b1:8b:96:70:6a:03:
0a:ec:eb:7e:05:40:87:e2:d5:69:e6:29:11:ff:93:
99:dd:16:0b:d4:a5:7c:29:6f:cc:87:5e:0f:ec:33:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:83:48:B5:39:F6:F1:B8:95:90:04:15:89:2A:94:3A:D5:C6:D6
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39312e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e4:3b:e5:05:dc:41:a8:a6:b9:3d:d8:59:b2:ae:4d:0e:af:
eb:20:5f:73:84:ef:37:36:d6:c5:4c:f7:3d:09:27:7a:3f:e0:
d6:6f:95:b3:3f:44:f1:25:1b:65:b3:76:68:c9:c8:76:cd:3f:
94:77:21:a8:ec:e7:e8:a3:36:48:39:a4:a9:fc:ab:f4:a2:c6:
9d:83:61:51:9c:5f:c7:56:3f:e0:1c:47:b5:a9:82:9a:f4:d3:
67:27:ed:76:f0:ca:6b:f7:c2:06:a8:8d:44:15:f3:61:c3:e7:
8f:cd:c8:90:ef:51:0d:99:ae:60:f4:13:9f:33:07:ed:10:52:
fb:8c:61:8c:db:32:ad:b1:77:b9:a9:ae:5c:d2:44:56:2a:48:
4f:a6:8f:73:1c:7c:d4:62:49:d8:a7:ba:cb:6c:c6:71:78:1d:
ee:1c:5d:96:c7:62:0d:f7:10:3c:f6:2d:55:76:d4:ea:f4:d1:
46:6e:c5:98:8a:1f:7a:6b:ab:90:70:d9:fe:2e:c6:05:3b:10:
30:45:c1:6f:5f:15:90:56:34:7d:d5:1e:a5:79:e2:b1:36:5b:
62:5d:69:13:ce:1b:77:13:92:9e:59:77:4e:84:24:72:12:80:
0a:58:4b:6c:d5:86:64:67:1f:7f:94:df:7c:e8:6a:29:93:a0:
48:c2:97:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:11 2025 by rpki-client