Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39352e302f32342d3234203d3e203336323336.roa
File: 3137362e35382e39352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: 1dNrOrSIFrBbQlguV5TxW/XXC4NcEa0aLvL0uo132Ug=
Subject key identifier: 44:72:FE:89:82:4A:73:82:DC:3E:B1:83:9E:5C:2E:72:31:F9:61:39
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 74E36B0589EAA2A6D0D056160300365BDA2993B9
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39352e302f32342d3234203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 23:14:00 +0000
ROA not before: Mon 04 Aug 2025 23:09:00 +0000
ROA not after: Mon 03 Aug 2026 23:14:00 +0000
asID: 36236
IP address blocks: 176.58.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e3:6b:05:89:ea:a2:a6:d0:d0:56:16:03:00:36:5b:da:29:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Aug 4 23:09:00 2025 GMT
Not After : Aug 3 23:14:00 2026 GMT
Subject: CN=4472FE89824A7382DC3EB1839E5C2E7231F96139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:64:39:93:70:0f:02:e9:59:b9:06:9b:7c:
96:3a:e5:6f:22:05:d0:dc:ea:2a:33:b6:af:b8:8a:
82:69:c4:09:c0:ec:33:bc:15:ac:f2:f1:cf:9e:73:
96:0c:71:ba:df:72:0d:21:e0:e2:6c:1a:bd:c9:a8:
05:b5:fc:fa:03:5d:3c:98:1c:28:42:6d:c7:2c:f6:
42:f2:cb:70:43:09:be:e3:3f:5e:df:3f:af:75:44:
f0:47:f0:aa:bb:8c:6b:a6:44:01:18:ad:2b:76:93:
19:fa:62:b6:0a:60:28:bb:95:2c:2d:a2:0f:5f:77:
ad:af:b6:0b:53:3d:f2:9f:9f:61:d5:16:e9:db:04:
c3:bb:e4:48:7a:cb:64:fe:e7:cb:75:be:ab:fd:e3:
d7:95:25:17:54:30:73:f9:79:bb:10:46:03:f5:5a:
10:98:52:81:e0:a9:8f:97:31:12:b0:67:79:80:f2:
71:c1:ea:3e:31:2d:c8:90:72:02:26:b9:40:26:6e:
ed:18:95:7b:9f:fd:b8:3f:79:19:4f:ee:dd:5f:cb:
6e:1f:8d:82:80:b9:78:4e:8a:c3:3b:92:b0:ae:2b:
1d:6d:0b:52:b0:c2:f9:cc:dd:8c:4c:8e:c3:e1:14:
2d:5f:31:b3:82:07:ba:30:1f:3e:70:c7:d4:77:b8:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:FE:89:82:4A:73:82:DC:3E:B1:83:9E:5C:2E:72:31:F9:61:39
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39352e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c1:3a:54:26:4a:42:41:70:f1:2c:ae:42:0e:61:e0:73:c0:
fb:ce:39:92:89:15:6e:91:f7:eb:92:a9:c0:2d:01:b3:cd:4a:
2b:0d:44:68:98:34:a2:8b:f1:e3:c4:36:7b:d0:eb:27:c2:a1:
72:3c:f6:12:90:91:f7:3b:f7:03:7e:12:af:42:f7:55:fb:49:
13:8c:62:21:a6:40:f3:19:70:17:3f:f6:b5:fc:96:0d:5a:86:
89:38:ef:57:0c:86:3c:a1:68:c7:cf:33:21:8d:5c:82:b5:0e:
1d:c3:0d:bb:0b:26:6b:57:a5:d4:53:9f:7c:16:83:26:2b:c5:
c6:be:70:54:88:ab:f0:a6:e9:10:32:5a:56:b7:ae:29:f2:cb:
a4:c6:33:68:11:4b:43:f5:b8:20:24:5f:a3:cc:6d:83:11:b5:
15:cf:8d:9f:b9:9a:c6:6d:46:c6:46:e3:65:ac:c0:c2:da:5a:
f8:a4:85:0b:5c:77:20:a2:56:2e:8f:6a:e8:78:29:fd:e8:e4:
17:db:71:88:82:f8:99:6b:c7:5f:14:08:9a:52:8e:90:fe:dc:
ae:35:8f:83:96:7b:58:e4:4f:86:eb:f0:8a:88:a2:97:49:0f:
3a:99:ec:d3:d5:e8:e7:b9:62:9f:12:1d:45:67:5f:75:f2:29:
13:0a:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:33 2025 by rpki-client